Hello Juan,
Having secure cookies can be very useful and helpful especially when your IT or security teams complete audits and find cookies such as the one shown above. When Confluence is using HTTPS and the configuration file is set for scheme=HTTPS and secure=True then the authentication and user cookies will be set to secure. With this said, there are other cookies which may not be set to secure as they are only storing product presentation information. Confluence user details are not stored within these cookies. Here is a list of other cookies:
- confluence.list.pages.cookie
- confluence.browse.space.cookie
- confluence-language
- AJS.conglomerate.cookie
More information about these cookies can be found at Confluence Cookies.
For setting Confluence up using SSL you can see Running Confluence over SSL or HTTPS.
This may not be exactly what you are looking for, so there is an option for you to submit a feature request to add the Confluence-Language cookie as a secure cookie. To create a feature request, go to the Create Feature Request site and fill out the form, ensure you choose suggestion. When you fill out the feature request please ensure to state a use case for the feature. Once you have a feature request created, please link it back to this post so others may find, vote and watch your feature request.
I hope you find this helpful.
Regards,
Stephen Sifers
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.