Enabling HTTPOnly in Secure in Asp.Net
<p>We have enabled HttpOnly for our site. </p>

<pre><code>&lt;configuration&gt;
    &lt;system.web&gt;
        &lt;httpCookies httpOnlyCookies="true" requireSSL="true" /&gt;
    &lt;/system.web&gt;
&lt;/configuration&gt;
</code></pre>

<p>This is working fine, when we accessing the site in non-secure region. But in Secure live region(Https), this is not working and we able to get the session keys. how to mitigate it. any idea whould be much helpful.</p>

<p>Im trying in Asp.Net 2.0</p>
