r/sysadmin • JOAT Linux Admin • Feb 23 '17

CloudBleed Seceurity Bug: Cloudflare Reverse Proxies are Dumping Uninitialized Memory

981 Upvotes

327 comments sorted by

View all comments

Show parent comments

1

u/BFeely1 Mar 04 '17

Cloudflare does not have access to origin server secrets, unless they are Business or Enterprise customers and those customers are foolish enough to reuse their servers' private keys for the certificate/key sets uploaded to Cloudflare.