When you enable the
-insecure
command line
argument, the Server sends web cookies without the
Secure
attribute,
as it is not supported by HTTP endpoints. When the command line
argument is disabled and only HTTPS is available (default configuration),
web cookies are sent with the
Secure
attribute.
If you require using HTTPS, it is recommended to disable the
-insecure
command
line argument for enhanced cookie security.