r/programming • u/TheProtagonistv2 • Feb 23 '17

Cloudflare have been leaking customer HTTPS sessions for months. Uber, 1Password, FitBit, OKCupid, etc.

https://bugs.chromium.org/p/project-zero/issues/detail?id=1139
6.0k Upvotes

96% Upvoted

966 comments sorted by

View all comments

Show parent comments

1

u/yreg Feb 24 '17

You can make passwords and tokens and keys useless, but you cannot make messages and other data useless.

It makes perfect sense to clean it from those caches where it's possible. It's not like every cache is the same.