The ability to forge such session cookies (or more generally, session tokens) stems from the fact that the tokens are not generated in a secure way.
这种打造的能力，像会话cookie （或者更通俗地说，会话标识）源自于这些标识不是以安全的方式产生的事实。
Cookies marked as secure (storing encrypted data and passing to the user only under SSL) remain the most popular method of providing a secure online experience.
标记为安全的cookie(存储加密数据并且在SSL保护下传递给用户)是最常用的方法，它提供了最佳的安全网络体验。
That script, since it is running inside the Web browser from the site, has access to secure information, such as the user's cookies.
那段脚本由于来自该站点，并在Web浏览器内部运行，所以可以访问安全信息，例如用户cookie。
Returns true if the browser is sending cookies only over a secure protocol, or false if the browser can send cookies using any protocol.
如果浏览器仅仅安全协议下发送cookie则返回true。浏览器能使用任何协议发送cookie则返回fasle。
Returns true if the browser is sending cookies only over a secure protocol, or false if the browser can send cookies using any protocol.
如果浏览器仅仅安全协议下发送cookie则返回true。浏览器能使用任何协议发送cookie则返回fasle。
应用推荐