CODEWITHSUNDEEP
cookieshttps
Anish Chandran
Anish Chandran

Reputation: 447

cookie passing over HTTPS connection

I read many articles cookies are passed over HTTPS connection is encrypted. I checked with my application, its having SSL connection, but i can read cookie information from request headers. Is anything done for cookie encryption in HTTPS connection?

Upvotes: 2

Views: 255

Answers (1)

Marco A. Hernandez
Marco A. Hernandez

Reputation: 821

HTTPS encrypts the entire session, headers included. But notice that SSL (TLS in fact) works over the Transport Layer. If you are reading the cookies from the Application Layer (for example using javascript or a java servlet to get the HTTP request) the content will be already unencrypted.

See Does SSL also encrypt cookies?

Upvotes: 2

Related Questions