Manual:$wgCookieSecure

Details
Whether cookies are secured. The default value is calculated by looking at the protocol (as defined in $wgProto). If it is 'https' then this variable is set to true, otherwise it is false.