Can A Cookie That Was Generated With Javascript (not Send In The Header By The Server) Be Stolen / Used By An Attacker?

I save the cookie with Javascript, and I get the values from the cookie with Javascript. I communicate the content of the cookie over https in the ajax header. I will not use the s

Solution 1:

I think you're worried about Man in the Middle. This could happen if you aren't using HTTPS with your browser cookie and/or you have mixed media where one of the insecure HTTP requests is sent with the cookie. Make sure it's encrypted using HTTPS, and then it's pretty secure (but not impossible to break w/ enough computational power)