Setting 'bb_sessionhash' cookie as secure
 

Hi all,

We have been working on a Single Sign On integration of VB with another application and all works well.

However we'd like to add some additional security and I was hoping I could find a way to make VB set the 'bb_sessionhash' cookie to secure without touching the core.

Does anyone know if this is possible?

As a last resort, I guess I could create a plugin which is triggered in the last called hook to rewrite the cookie set in the header before being sent!!!

Any comments welcome.

Regards,
Kris...