News for hackers. Stuff that matters.

A comment on Ticketbleed F5 bug undermines HTTPS. Parent comment

Re:Ticketbleed F5 bug undermines HTTPS by bsagdiyev on Thursday February 09, 2017 @09:41PM (#13612870)
We had session tickets disabled already so weren't affected, but you'd be surprised some of the sites that use these devices. I believe AT&T has quite a number in use.
[ Parent | on HN ]
Re:Ticketbleed F5 bug undermines HTTPS by zonknz on Thursday February 09, 2017 @10:46PM (#13613060)
At one time Azure was built on a whole bunch of F5s. Unsure if they are still in the picture.
[ Parent | on HN ]
Re:Ticketbleed F5 bug undermines HTTPS by trome on Thursday February 09, 2017 @11:00PM (#13613111)
F5 is just across the water from Microsoft, and there is a lot of cross-pollination of employees between the two. Even if F5 wasn't the best choice, I wouldn't be surprised if they were used just due to familiarity.
[ Parent | on HN ]