Comment by raldi

Can anyone think of a good reason LinkedIn didn't mark their cookies as HTTPS-only?

http://en.wikipedia.org/wiki/HTTP_cookie#Secure_and_HttpOnly