News for hackers. Stuff that matters.

A comment on List of Sites Affected by Cloudflare's HTTPS Traffic Leak. Parent comment

Re:List of Sites Affected by Cloudflare's HTTPS Traffic Leak by tyingq on Friday February 24, 2017 @07:24AM (#13722943)
The email Cloudflare is sending out to customers where Cloudflare didn't find any cached info isn't particularly alarming: http://pastebin.com/pUnKJE3J

I wouldn't be surprised if people receiving this took no action.

[ Parent | on HN ]
Re:List of Sites Affected by Cloudflare's HTTPS Traffic Leak by yeukhon on Friday February 24, 2017 @08:21AM (#13723370)
Well, in the Google Zero Project issue ticket, the engineer said he felt Cloudflare tried to downplay the severity and it took them extra days and a lot of demanding from Google Zero Project team to finally get a draft (which from a legal and a company reputation PoV that makes sense; you need a lot of eyes on the draft before going out to the public).

I think not every "leak" is sensitive, but there are definitely instances Cf and Google both found very sensitive information.

[ Parent | on HN ]