title: How to secure the ASP.NET_SessionId cookie?
body: <p>I have set the .ASPXAUTH cookie to be https only but I am not sure how to effectively do the same with the ASP.NET_SessionId.</p>
  
  <p>The entire site uses HTTPS so there is no need for the cookie to work with both http and https.</p>