Manual:$wgCookieSecure

Details
Whether cookies are secured. The default value is calculated by looking at the protocol that the request came in under (or as defined in $wgProto if pre version 1.18 ). If it is 'https' then this variable is set to true, otherwise it is false.