Permanent Cookie Contains Sensitive Session Information I have a cookie question in regards to a security scan (via IBM Rational AppScan) conducted on a drupal(7.43) site. The security scan failed with the following error: (Permanent Cookie Contains Sensitive Session Information) is POSITIVE on: http://site-name/user/login?ModPagespeed=noscript (cookie = SESSa020b17496f7fb76f92dd28c8d8341be).

How to resolve this?
Your app scanner is alerting you that cookie session data is being sent over an insecure channel (http://site-name/user/login?ModPagespeed=noscript) and is susceptible session hijacking. 

One way to resolve this is to force your website to use HTTPS only, thus preventing anyone from sniffing out session data.