title: Are Cookies encrypted in REST API call over SSL (HTTPS)?
body: <p>I know it's a duplicate question but not very much clear from other answers.
  I am using RestTemplate to call external REST APIs. The calls are over HTTPs.
  Client needs to call Authentication REST API with username and password passed as body parameter and this API returns SessionId as part of Set-Cookie header. Now, In subsequent request client needs to set Session Cookie.
  So, I pass Sessions Cookie as part of header.
  Now my questions are:</p>
  
  <ol>
  <li>Are cookies secure in https call during transmission?</li>
  <li>Do I need to store certificate in JRE trust store if I do not get any error during SSL handshake? (Assuming Root CA certificate is already present in JRE trust store)</li>
  <li>How can I monitor traffic to actually check if request is encrypted?</li>
  </ol>
  
  <p>Thanks in advance.</p>