diff --git a/src/main/java/org/owasp/benchmark/testcode/Benchmark00087.java b/src/main/java/org/owasp/benchmark/testcode/Benchmark00087.java
index ca188b0..da19371 100644
--- a/src/main/java/org/owasp/benchmark/testcode/Benchmark00087.java
+++ b/src/main/java/org/owasp/benchmark/testcode/Benchmark00087.java
@@ -88,7 +88,7 @@ public void doPost(HttpServletRequest request, HttpServletResponse response)
         if ("".equals(str)) str = "No cookie value supplied";
         javax.servlet.http.Cookie cookie = new javax.servlet.http.Cookie("SomeCookie", str);
 
-        cookie.setSecure(false);
+        cookie.setSecure(true);
         cookie.setHttpOnly(true);
         cookie.setPath(request.getRequestURI()); // i.e., set path to JUST this servlet
         // e.g., /benchmark/sql-01/Benchmark01001
@@ -98,6 +98,6 @@ public void doPost(HttpServletRequest request, HttpServletResponse response)
                 .println(
                         "Created cookie: 'SomeCookie': with value: '"
                                 + org.owasp.esapi.ESAPI.encoder().encodeForHTML(str)
-                                + "' and secure flag set to: false");
+                                + "' and secure flag set to: true");
     }
 }