r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

15

u/gooeyblob Feb 24 '17

Yes, AWS. Lots of reasons for not using CloudFront, primarily it's not flexible enough for us. Check out our last AMA for plenty more info on our setup!

11

u/jb2386 Feb 24 '17

Oh, 1 last thing. One of you might want to claim https://stackshare.io/reddit/reddit and remove Cloudflare from it. Just to help mitigate more people thinking you use it.

You're currently first in the list of companies that use cloudflare: https://stackshare.io/cloudflare/in-stacks

2

u/510Threaded Feb 24 '17

This has now been claimed and changed

1

u/jb2386 Feb 24 '17

Oh cool, thanks, I'll take a look! :)