The ability to forge such session cookies (or more generally, session tokens) stems from the fact that the tokens are not generated in a secure way.

这种打造的能力，像会话 cookie （或者更通俗地说，会话标识）源自于这些标识不是以安全的方式产生的事实。

youdao

Cookies marked as secure (storing encrypted data and passing to the user only under SSL) remain the most popular method of providing a secure online experience.

标记为安全的cookie(存储加密数据并且在SSL保护下传递给用户)是最常用的方法，它提供了最佳的安全网络体验。

youdao

That script, since it is running inside the Web browser from the site, has access to secure information, such as the user's cookies.

那段脚本由于来自该站点，并在Web浏览器内部运行，所以可以访问安全信息，例如用户cookie。

youdao

These include such foundational patents of the web as Secure Socket Layer (SSL), cookies and JavaScript.

FORBES: Third Way: What If Microsoft Threw Its Weight Behind Mozilla's Firefox OS?

Basically it's a USB security key that supposedly encrypts data stored to the thumb drive using AES, provides remote encrypted storage, creates a secure connection to the internet, and deletes your browser's cookies and history files.

ENGADGET: Mighty Key, the new secure USB snake oil?