&gt; If the cookie is set through HTTPS, the browser won&#x27;t send it when loading HTTP resources.<p>If the cookie is set through HTTPS and does not have the Secure flag set, the browser will happily send it along when loading HTTP resources.