Change Details

The "GeoIP" cookie is not "Secure" now. Although HSTS is enabled, Secure flag is still needed, since old browsers don't support HSTS, and it is possible for users to clear the HSTS records without clearing cookies.

The "GeoIP" and "WMF-Last-Access" cookies are not secure now. Although HSTS is enabled, Secure flag is still needed, since old browsers don't support HSTS, and it is possible for users to clear the HSTS records without clearing cookies.

The "GeoIP" and "WMF-Last-Access" cookie iss are not "Ssecure" now. Although HSTS is enabled, Secure flag is still needed, since old browsers don't support HSTS, and it is possible for users to clear the HSTS records without clearing cookies.