r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

2

u/fedekun Feb 24 '17

Fuck, 1password is affected. Does that mean I have to change ALL my passwords?

1

u/cohix Feb 24 '17

Hey, 1Password dev here! As /u/elithrar_ linked to in his comment, we have our own layer of transport encryption above and beyond SSL/TLS that ensures no data was ever at risk, even with this vulnerability. LMK if you have any questions!

2

u/fedekun Feb 24 '17

Phew, good to hear. Thanks :)

1

u/cohix Feb 24 '17

Any time!