Security Tips Security Tip: The Cookie ‘Secure’ Flag [Tip #5] Don't forget to configure your cookies for to only work over HTTPS.