Which following statements are correct

$$ Regenerating session IDs on every request cannot help preventing session fixation attacks.

$$ Phishing attacks are commonly executed through fake emails or instant messages that appear to come from a trusted source.

$$ Using per$-$session salt values in session tokens will not add an additional layer of security.

$$ HTTPS provides end$-$to$-$end encryption between the client and the server.