title: Does plainText password over https remains secure when stored in the client.?
body: <p>When setting Cookiee on the server with properties(httpOnly and secure=true), does that mean it will only be secured during the communication beween server and client, but not after that?
  In other words, if the value was originally in plainText -will it also be stored on the client side with plainText (after traveling with https ) -making it unsafe/vulnerable?</p>
  
  <p>1) Do passwords needs to be always encrypt befors sending (even when using https)?</p>
  
  <p>2) Where is httpCookiee (with secure=true) stored? and is this storage access is protected?</p>