__cfduid cookie still being sent as ‘insecure’ even though we have Always use HTTPS enabled.
This support article says if we have Always use HTTPS enabled the cookie should be sent with ‘secure’ flag.
We do not have a Business account and as far as I can tell are not using Managed CNAME service. Our DNS is with Cloud Flare, though.
Thoughts why this cookie (and cf_use_ob) are sending insecure?