Does keycloak documentation say that Cookie transfer in HTTP should be securely encrypted

1

I want to report a vuln along the lines of this, but not sure if it was an intended functionality.

2

If you want to report a security issue, please see here on how to do this:

3

is the insecure transfer of cookies on http a valid security issue? @dasniko s