Plugin Author
gioni
(@gioni)
Programmable how? What’s the reason?
Best practice. While secure cookies can be overwritten too (https://tools.ietf.org/html/rfc6265#section-4.1.2.5) and wp-cerber may not store confidential info, our application requires high security standard; this may be seen as a flaw when detected by third party web tests.
Plugin Author
gioni
(@gioni)
That’s a reasonable argument. First of all, Cerber doesn’t use cookies to store any sensitive data from the first day of its existence and will never do that: https://wpcerber.com/browser-cookies-set-by-wp-cerber/
Secondly, before setting cookies with the security flag on, we need to ensure that a website has a valid SSL certificate in place. It’s important because many websites don’t use SSL yet. Anyway, it will be implemented this year. Stay tuned.
Plugin Author
gioni
(@gioni)
