--- a/includes/sessions.php	Sat Oct 20 21:44:13 2007 -0400
+++ b/includes/sessions.php	Fri Oct 26 19:28:54 2007 -0400
@@ -1049,7 +1049,7 @@
     {
       // Stash it in a cookie
       // For now, make the cookie last forever, we can change this in 1.1.x
-      setcookie( 'sid', $session_key, time()+315360000, scriptPath.'/' );
+      setcookie( 'sid', $session_key, time()+315360000, scriptPath.'/', null, ( isset($_SERVER['HTTPS']) ) );
       $_COOKIE['sid'] = $session_key;
     }
     // $keyhash is stored in the database, this is for compatibility with the older DB structure