network profile
|
Dec 10 |
comment |
cookies “secure” flag i have the last question(s): does browser send cookies to the server? |
|
Dec 6 |
comment |
cookies “secure” flag From your words cookies should be created at client-side in both cases -- and that's the reason i ask the previous question. |
|
Dec 6 |
comment |
cookies “secure” flag i have something like: client <--HTTPS--> load balancher <--HTTP--> server. If i configure server to set secure attribute in cookie and tries to login -- cookies are not created on the client side. If i make server to set cookie without secure flag -- they are created on client side. |
|
Dec 6 |
comment |
cookies “secure” flag "After '2' the browser will have the cookie..." sorry, but are you sure? Can you, please, give some examples or proofs? |
|
Dec 6 |
comment |
cookies “secure” flag in case only browser send cookies to server, where the browser get those cookies from? |
|
Dec 6 |
comment |
cookies “secure” flag The question is not about redirection but to know who is responsible for blocking cookies with secure attribute of being sent from server back to client? (i know that browser is the one to manage that on "client->server" request) |
|
Dec 6 |
comment |
cookies “secure” flag that's great to know. And talking about htaccess where can that be defined? (Sorry for my English) |
|
Dec 6 |
comment |
cookies “secure” flag so it's the server who decides, to sent or not, "secure" cookie over HTTP conenction back to client? And theoretically we can force server to send back "secure" cookies over HTTP connection? |
|
Dec 6 |
comment |
cookies “secure” flag in other words, will we have cookie with "secure" flag in our browser when trying that flow with logging in i've described above? |
|
Dec 6 |
comment |
cookies “secure” flag so if browser ask server to include cookies with "secure" flag over HTTP connection, the server will have sent cookies with "secure" flag to browser? |
