Furthermore, cookies over a internet site served via HTTPS have to have the safe attribute enabled. Over a site that has delicate information on it, the person as well as session will get exposed whenever that web site is accessed with HTTP rather than HTTPS.[14] That is why HSTS was introduced.