Our app agent always sets a secure cookie over a secure channel. Though the secure attribute is not always visible in the Headers tab of the developer tool, this does not imply that the cookie is insecure.
To verify whether the cookie is secure or not, follow the steps below in Chrome:
- Open the Chrome developer tool and access the instrumented page for which backend correlation is enabled.
- Still in the browser developer tool, click on the Application tab.
- In the Storage section on the left navigation panel, browse to the cookie section. Select the URL instrumented. It will show all the cookies with various attributes as columns. If the Secure column is ticked for a cookie, that implies the cookie is secure.
