List of Sites Affected by Cloudflare's HTTPS Traffic Leak
1–10 of 228 posts
Re: List of Sites Affected by Cloudflare's HTTPS Traffic Leak
#2You missed the "possibly" in the header.
And the disclaimer right at the top:
This list contains all domains that use cloudflare DNS, not just the cloudflare SSL proxy (the affected service that leaked data). It's a broad sweeping list that includes everything. Just because a domain is on the list does not mean the site is compromised.
Re: List of Sites Affected by Cloudflare's HTTPS Traffic Leak
#3I'm confused by the "not affected" remarks. I thought the issue was any site which passes data through cloudflare could be leaked by requests to a different site, due to their data being in memory. Have I misunderstood?
Re: List of Sites Affected by Cloudflare's HTTPS Traffic Leak
#4I'm confused by the "not affected" remarks. I thought the issue was any site which passes data through cloudflare could be leaked by requests to a different site, due to their data being in memory. Have I misunderstood?
[deleted]
Re: List of Sites Affected by Cloudflare's HTTPS Traffic Leak
#5Thanks for posting and curating this list.
Re: List of Sites Affected by Cloudflare's HTTPS Traffic Leak
#6I'm confused by the "not affected" remarks. I thought the issue was any site which passes data through cloudflare could be leaked by requests to a different site, due to their data being in memory. Have I misunderstood?
The update from 1password indicated that there was application layer encryption happening in addition to the TLS encryption, so a breach of the TLS protection did not expose any sensitive data. Presumably other sites are in similar situations. But don't take my word for it, go change all your passwords.
Re: List of Sites Affected by Cloudflare's HTTPS Traffic Leak
#7I wrote this(1) script to check for any affected sites from local Chrome history. It checks for the header `cf-ray` in the response headers from the domain. It is not an exhaustive list but I was able to find few important ones like my bank site.
1: https://gist.github.com/kamaljoshi/2cce5f6d35cd28de8f6dbb27d...
Re: List of Sites Affected by Cloudflare's HTTPS Traffic Leak
#8I have hundreds of passwords in my password manager. That's going to take a week, considering I also have to work.
Re: List of Sites Affected by Cloudflare's HTTPS Traffic Leak
#9I have hundreds of passwords in my password manager. That's going to take a week, considering I also have to work.
Is your password manager 1Password?
https://blog.agilebits.com/2017/02/23/three-layers-of-encryp...
Re: List of Sites Affected by Cloudflare's HTTPS Traffic Leak
#10[deleted]