Webmasters Stack Exchange is a question and answer site for pro webmasters. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an application written in Python running behind Apache and SSL. I am not seeing a secure flag on my cookie:

apache Server version: Apache/2.2.15 (Unix)

I have added a configuration line to my ssl.conf as:

Header edit Set-Cookie ^(.*)$ $1;Secure;HttpOnly

I don't have enough points to post a screen shot of my session. Can anyone share their experience with this or provide any help?

share|improve this question
So far I didn't find a way to configure secure flag to cookie through apache. Instead a I wrote a small python function to set the secure flag. – Vipin May 6 '13 at 21:39

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.