There is a Rails project. It works on https ( config.force_ssl = true ) and is located on a subdomain.
I need a cookie on the main domain and all its subdomains, ssl is only on where the cookie is created.
So I create a cookie:
cookies.permanent[:my_uid] = { value: @user.id, domain: :all, secure: false }
And here is what my browser writes about this cookie:
Because force_ssl: true , the cookie secure: false flag is ignored. How to avoid it?
