Session cookie that server sets while logging in does not have “secure” flag

See more:

ASP.NET

Hi Guys,

I'm trying to add below line in web.config to include secure flag on session cookie.

<httpCookies requireSSL="true" />

But, upon adding this line, my application log's out and does not allows me to go further after logging into the application.

My authentication in web.config is

<authentication mode="Windows"/>

My aim is to set secure flag. Without the “secure” flag, the browser could inadvertently send session cookies over unencrypted connections, which could allow the cookie to be compromised over the network.

Thanks & regards,
Puneeth