Set-Cookie/EN/Description

Cookies should be secured by setting the HttpOnly and Secure flags to ensure they cannot be read or altered by others.