title: ASP.NET Securing Cookie on HTTP and HTTPS
body: <p>I have a site that has both HTTP and HTTPS pages.</p>
  
  <p>I have tried the following to make cookies secure:</p>
  
  <ul>
  <li>Web.config <code>&lt;httpCookies requireSSL="true" /&gt;</code> with form authentication.</li>
  <li>Forcing cookie to secure at <code>Application_End</code></li>
  </ul>
  
  <p>In both case pages don't work with HTTP. I think above solution only works if all the pages use HTTPS.</p>
  
  <p>How to resolved this puzzle? </p>