Audit required: Cookie is transmitted over an insecure connection CS-A1009
Security
Critical
a05
cwe-614
cwe-311
cwe-315
a04
sans top 25
owasp top 10
Setting Secure to false means that the cookie is allowed to be transmitted over an insecure connection. It is always recommended that you send and receive information only via a secure line.
Bad Practice
cookie.Secure = false;
Recommended
cookie.Secure = true;