Secure Cookies - Failed PCI scan.

This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.
6 anni tempo fa
We have a site running on V3.6 that has failed a WorldPay PCI scan by SYSNET for not delivering secure cookies. The whole site runs on https secure URLS with a redirect from non-SLL to SSL. How do we redirect the cookies to be delivered via SSL? Thank you, James
0
6 anni tempo fa
I have been informed it is a simple task of adding to the web.config file under <system.web>, the following <httpCookies requireSSL="true" />.
Does anyone have any knowledge if this is correct? Any help is appreciated. Many thanks.
0
This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.