This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How to configure Android WebView to encrypt cookies?

Hi,

I am working on an Android App, Using a SQLIte browser on a rooted device, the application session id cookie is being written in plain text into a SQLite table named COOKIES. I have tried some steps:


1. Using Cache-Control no-cache=\"Set-Cookie\".

2. Setting the Set-Cookie secure and httpOnly header attributes.


According to many blog entries, Chromium is suppose to encrypt cookies https://codereview.chromium.org/24734007 and indeed, I've observed an "encrypted_value" column within the COOKIES table. I read some blogs from few android developer forum related to this but unfortunately, none of the above attempts have succeeded in configuring Android WebView to encrypt stored cookies. Please help me to resolve my query.