title: Sitecore with requireSSL for cookies
body: <p>Our Sitecore 6.6.0 (rev. 120918) based website can work over http as well as https. We also have a security requirement of making all the cookies to transfer over SSL regardless of whether the website is accessed via http.</p>
  
  <p>We have achieved this requirement by using the requireSSL property in the web.config as described here: <a href="https://stackoverflow.com/questions/1442863/how-can-i-set-the-secure-flag-on-an-asp-net-session-cookie">How can I set the Secure flag on an ASP.NET Session Cookie?</a></p>
  
  <p>With this change, our public website works fine and when analyzed in Firebug, we can see that all cookies are "secure" even when the website is accessed via http.</p>
  
  <p>But the problem is when I try to login to the sitecore admin portal via http, it throws the error <code>The application is configured to issue secure cookies. These cookies require the browser to issue the request over SSL (https protocol). However, the current request is not over SSL.</code> The only way I can access the sitecore admin portal is via https. Even with https, it gives some weird issues. After some time of use, it says that lot of admin users are logged in and I have to kick some out to get in. I also can't access the admin portal remotely.</p>
  
  <p>Why is it that the public website works with SSL cookies, but the sitecore admin portal has issues with SSL cookies. Could it be and incompatible configuration in our site?</p>