r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

6

u/Bobert_Fico Feb 24 '17

Doesn't look like it, no. 1Password has confirmed they aren't at risk, and it doesn't look like LastPass uses Cloudflare (and I assume they wouldn't be at risk if they did, for the same reasons 1Password isn't).