Gmail – some users being signed out of their accounts unexpectedly

Re:Gmail – some users being signed out of their accounts une... by 6nf on Friday February 24, 2017 @12:56AM (#13721403)

I would be surprised if Gmail sent any tokens or credentials via Cloudflare

[ Parent | on HN ]

Re:Gmail – some users being signed out of their accounts une... by pilsetnieks on Friday February 24, 2017 @03:44AM (#13722085)

Third party sites where the Google account was used for authorization, could have transmittted data through Cloudflare. (Think "Log in with Google" button on millions of sites.)

[ Parent | on HN ]

Re:Gmail – some users being signed out of their accounts une... by dawnerd on Friday February 24, 2017 @01:30AM (#13721539)

Fear might be shared email/passwords since thats really common.

[ Parent | on HN ]

Re:Gmail – some users being signed out of their accounts une... by wapz on Friday February 24, 2017 @02:27AM (#13721748)

What's the fear? Aren't all passwords encrypted on the server side?

[ Parent | on HN ]

Re:Gmail – some users being signed out of their accounts une... by pshc on Friday February 24, 2017 @02:43AM (#13721805)

But if an in-transit plaintext password is leaked by CloudFlare, server-side encryption is irrelevant.

(... that said, it's not like revoking sessions would impede a password-holding adversary...)

[ Parent | on HN ]

Re:Gmail – some users being signed out of their accounts une... by amatriain on Friday February 24, 2017 @06:19AM (#13722676)

It would for users that have 2FA enabled.

[ Parent | on HN ]