I have two sites: A.com and B.com. When a user lands on A.com I want to save a session variable for that user that is accessible from B.com. A.com and B.com are hosted on the same server. 

The transmission must be secure. Meaning, there should be no way for the user to access that session variable.

I am using PHP.