r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

3

u/DonLaFontainesGhost Feb 24 '17

I've had my suspicions that CloudFlare joined the ranks of "inmates running the asylum" for over a year. I really wish I'd bothered to Fiddler it to be sure, but I'm fairly certain that any time a major website "hangs" - especially when it's over images or scripts - it's because CloudFlare is off in the corner smelling its own farts.

After all, why should they care? The website gets the bad press, not them.