Set all cookies to use httponly and secure in ASP.Net

I have a problem in terms of the httponly and secure properties for the ASPSESSION cookie ..., currently I handle various environments in which only 1 has ssl and the secure attribute works well, now as for the httponly attribute it always appears marked in all environments that do not have ssl but when I see that if it has ssl this attribute does not appear marked, does anyone know the reason or if it has already happened since the programming was replicated exactly the same?

It is worth mentioning that in the web config I only added these lines

<httpCookies httpOnlyCookies="true" requireSSL="true"/>