setting secure cookie through proxy servlet
===

I have a web application which is accessible to users through proxy sevlet - part of bigger web application. Communication between browser and bigger application is encrypted by ssl. From my embedded application I would like to set a secure cookie which indicates users'session. Communication between proxy servlet and my web application is not encrypted, so when I set session id cookie it doesn't have secure flag. My application is running on tomcat and response from this tomcat is proxy'ied to client's browser by proxy servlet. 

Will this cookie be secure and unable to hijacked by others, despite the fact that is not indicated as secure? Can browser send cookie in not secured connection in that situation? 