title: .NET 'secure' cookies using authentication mode = none
body: <p>In my web.config (IIS6.1 asp.net 4.0):</p>
  
  <pre><code>  &lt;system.web&gt;
      &lt;authentication mode="None"/&gt;
      &lt;httpCookies httpOnlyCookies="true" requireSSL="true" /&gt;
    &lt;/system.web&gt;
  </code></pre>
  
  <p>Browsing to localhost/whatever using https works fine. All requests complete successfully. My problem is that the cookies I get don't have the 'secure' flag set. The HTTP flag is set. </p>
  
  <p>How do I get the Secure flag? My implementation of IPrincipal?</p>
  
  <p>Thanks.</p>