If you call HTTPResponse.set_cookie() method with keyword secure=True, I think you'll get a "secure" attribute on the cookie. On Feb 4, 2005, at 5:39 AM, R J Ladyman wrote: > On a related subject, where would I set the 'secure' flag for each > cookie?