{"action":"created","issue":{"url":"https://api.github.com/repos/TeamMentor/TM_4_0_Design/issues/661","labels_url":"https://api.github.com/repos/TeamMentor/TM_4_0_Design/issues/661/labels{/name}","comments_url":"https://api.github.com/repos/TeamMentor/TM_4_0_Design/issues/661/comments","events_url":"https://api.github.com/repos/TeamMentor/TM_4_0_Design/issues/661/events","html_url":"https://github.com/TeamMentor/TM_4_0_Design/issues/661","id":66247611,"number":661,"title":"Should we mark TM session as secure too?","user":{"login":"michaelhidalgo","id":1732035,"avatar_url":"https://avatars.githubusercontent.com/u/1732035?v=3","gravatar_id":"","url":"https://api.github.com/users/michaelhidalgo","html_url":"https://github.com/michaelhidalgo","followers_url":"https://api.github.com/users/michaelhidalgo/followers","following_url":"https://api.github.com/users/michaelhidalgo/following{/other_user}","gists_url":"https://api.github.com/users/michaelhidalgo/gists{/gist_id}","starred_url":"https://api.github.com/users/michaelhidalgo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/michaelhidalgo/subscriptions","organizations_url":"https://api.github.com/users/michaelhidalgo/orgs","repos_url":"https://api.github.com/users/michaelhidalgo/repos","events_url":"https://api.github.com/users/michaelhidalgo/events{/privacy}","received_events_url":"https://api.github.com/users/michaelhidalgo/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/TeamMentor/TM_4_0_Design/labels/Area:%20Security","name":"Area: Security","color":"f7c6c7"},{"url":"https://api.github.com/repos/TeamMentor/TM_4_0_Design/labels/Type:%20Question","name":"Type: Question","color":"bfd4f2"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-04-03T23:27:51Z","updated_at":"2015-04-05T00:17:57Z","closed_at":null,"body":"TM session is set to be ReadOnly, should we also enforce Secure so that way it will be only transmitted over a secure channel? I think we should :)\r\n\r\n![screen shot 2015-04-03 at 5 29 23 pm](https://cloud.githubusercontent.com/assets/1732035/6990302/cbb852e2-da26-11e4-82ba-3c10c69b5bef.png)\r\n"},"comment":{"url":"https://api.github.com/repos/TeamMentor/TM_4_0_Design/issues/comments/89692599","html_url":"https://github.com/TeamMentor/TM_4_0_Design/issues/661#issuecomment-89692599","issue_url":"https://api.github.com/repos/TeamMentor/TM_4_0_Design/issues/661","id":89692599,"user":{"login":"michaelhidalgo","id":1732035,"avatar_url":"https://avatars.githubusercontent.com/u/1732035?v=3","gravatar_id":"","url":"https://api.github.com/users/michaelhidalgo","html_url":"https://github.com/michaelhidalgo","followers_url":"https://api.github.com/users/michaelhidalgo/followers","following_url":"https://api.github.com/users/michaelhidalgo/following{/other_user}","gists_url":"https://api.github.com/users/michaelhidalgo/gists{/gist_id}","starred_url":"https://api.github.com/users/michaelhidalgo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/michaelhidalgo/subscriptions","organizations_url":"https://api.github.com/users/michaelhidalgo/orgs","repos_url":"https://api.github.com/users/michaelhidalgo/repos","events_url":"https://api.github.com/users/michaelhidalgo/events{/privacy}","received_events_url":"https://api.github.com/users/michaelhidalgo/received_events","type":"User","site_admin":false},"created_at":"2015-04-05T00:17:57Z","updated_at":"2015-04-05T00:17:57Z","body":"I think is doable from Node Express perspective as described in this\narticle\nhttp://scottksmith.com/blog/2014/09/04/simple-steps-to-secure-your-express-node-application/\n\nHowever, setting this flag means that the cookie will only be transmitted\nover a secure channel, which might not work on our local environment\n\n2015-04-04 17:53 GMT-06:00 RomichG <notifications@github.com>:\n\n> I am not sure we can do it with the reverse proxy.\n>\n> —\n> Reply to this email directly or view it on GitHub\n> <https://github.com/TeamMentor/TM_4_0_Design/issues/661#issuecomment-89690251>\n> .\n>\n\n\n\n-- \nMichael Hidalgo\nhttp://michaelhidalgocr.blogspot.com\n\n*The future has many names: For the weak, it means the unattainable. For\nthe fearful, it means the unknown. For the courageous, it means\nopportunity. (1802-1885) French Poet, Dramatist, Writer*\n"}}