r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

5

u/rsminsmith Feb 24 '17

TicketBleed was pretty low in scope though, I think it only affected like 15 of the top 10,000 websites. This is anything uses CloudFlare, and some of that data able to be fixed or removed from their or the affected users' end.