Ravi Sir's Cyber Security Cards › Interview Cards
Session cookies on plain HTTP are dangerous because:
Session cookies on plain HTTP are dangerous because: A. HTTP is faster forever B. On-path observers may steal cookies (lab sniff demos) C. Cookies cannot exist on HTTP D. TLS forbids cookies B. On-path observers may steal cookies (lab sniff demos) On plain HTTP the cookie travels unencrypted, so any
Read card text
What this card says
Options
A. HTTP is faster forever
B. On-path observers may steal cookies (lab sniff demos)
C. Cookies cannot exist on HTTP
D. TLS forbids cookies
Correct answer
B. On-path observers may steal cookies (lab sniff demos)
Why
On plain HTTP the cookie travels unencrypted, so anyone on the network path can read and reuse it; HTTPS with the Secure flag prevents this.
Learn more in the lesson: 48.7 CEH-Style Practice Questions – Set B (Modules 11–20)