== Ask Yourself Whether
* the cookie is for instance a _session-cookie_ not designed to be sent over non-HTTPS communication.
* it's not sure that the website contains https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content[mixed content] or not (ie HTTPS everywhere or not)
There is a risk if you answered yes to any of those questions.
