thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Advanced

Cookie Prefixes

The __Secure- and __Host- cookie name prefixes that make browsers enforce secure attributes on cookies.

Definition

A __Secure- cookie must be set with Secure from an HTTPS origin. A __Host- cookie must also have Path=/ and no Domain attribute, locking it to a single host and preventing subdomains from overwriting it.

Example

Set-Cookie: __Host-session=abc; Secure; Path=/; HttpOnly

Exam tip

__Host- protects against cookie tossing from compromised subdomains.

Related terms