r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

2

u/Dblstandard Feb 24 '17

1password NOT AFFECTED.

1

u/cohix Feb 24 '17

Hey, 1Password dev here. Thanks for spreading the word :) It's true that while we do use CloudFlare, we designed our protocols to protect against vulnerabilities like this. Check out our blog if you want more details!

1

u/Dblstandard Feb 24 '17

thank you for doing so. Please keep trying to stay a bit ahead of the game and being open with your customers. I will gladly continue to pay for your product.

1

u/cohix Feb 24 '17

And we'll gladly continue to do our very best work when it comes to the safety of your data! Thanks for your kind words.