Question

For a connection that changes from HTTP to HTTPS, what flaw arises if you do not change the session identifier?

       A. Cross Site Scripting

       B. Session Hijacking

       C. Security Misconfiguration

       D. Session Replay

Answer 1

Correct answer is :- Session Replay

A connection that changes from HTTP to HTTPS Session Replay.