title: Does HTTPS protect against CSRF attacks?
body: <p>I'm writing a mostly ajax-driven web application and I'm looking at how to protect the user from CSRF attacks. I'm planning to run the pages of the application where the user is logged in to do his work in HTTPS mode.</p>
  
  <p>Does running the page on HTTPS work to protect against CSRF attacks?</p>