diff --git a/dlls/wininet/http.c b/dlls/wininet/http.c
index 1392fb8aeb4..1943e912562 100644
--- a/dlls/wininet/http.c
+++ b/dlls/wininet/http.c
@@ -1999,8 +1999,6 @@ static DWORD HTTPREQ_QueryOption(object_header_t *hdr, DWORD option, void *buffe
 
         *size = sizeof(DWORD);
         flags = req->netconn ? req->netconn->security_flags : req->security_flags | req->server->security_flags;
-        if (req->hdr.dwFlags & INTERNET_FLAG_SECURE)
-            flags |= SECURITY_FLAG_SECURE;
         if(req->netconn) {
             int bits = NETCON_GetCipherStrength(req->netconn);
             if (bits >= 128)
diff --git a/dlls/wininet/netconnection.c b/dlls/wininet/netconnection.c
index f799dbdb2f4..ac9f347699d 100644
--- a/dlls/wininet/netconnection.c
+++ b/dlls/wininet/netconnection.c
@@ -729,6 +729,8 @@ DWORD NETCON_secure_connect(netconn_t *connection)
     }
 
     connection->ssl_s = ssl_s;
+
+    connection->security_flags |= SECURITY_FLAG_SECURE;
     connection->server->security_flags = connection->security_flags;
     return ERROR_SUCCESS;