diff --git a/dl/dl.go b/dl/dl.go
index 6676b51..2c60ffe 100644
--- a/dl/dl.go
+++ b/dl/dl.go
@@ -95,6 +95,8 @@ func (c *Client) download(ctx context.Context, layer int, key string) ([]byte, e
 			Value: strconv.Itoa(layer),
 
 			HttpOnly: true,
+			Secure:   true,
+			SameSite: http.SameSiteStrictMode,
 		})
 	}