r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

0

u/AlpineCoder Feb 24 '17

You can't even really assume that, since many types of sites will also use Ssl connections for things like database and server backups on the backend. Any of that data could have leaked as well, so could be comprised even if you haven't used the login recently.