How can I set the Secure flag on an ASP.NET Session Cookie?

asp.net-session, ssl-security

Solution

There are two ways, one `httpCookies` element in `web.config` allows you to turn on `requireSSL` which only transmit all cookies including session in SSL only and also inside forms authentication, but if you turn on SSL on httpcookies you must also turn it on inside forms configuration too.

Edit for clarity: Put this in `<system.web>`

<httpCookies requireSSL="true" />

Problem

Original source