Cloudfare data breach [see "Three layers of encryption…" post at blog.agilebits.com]

stevensudbrink

A recent article stated one password was one of the companies involved in the cloudfare data breach. How do we know what information was obtained and what passwords were compromised? I use the cloud service with one password.
Here is the article link.

http://bgr.com/2017/02/24/uber-1password-fitbit-and-okcupid-user-data-exposed-by-massive-security-flaw/

Thanks

---

1Password Version: Not Provided
Extension Version: Not Provided
OS Version: Not Provided
Sync Type: Not Provided

rickfillion

Hi @stevensudbrink,

I recommend that you take a look at this thread which discusses this :
https://discussions.agilebits.com/discussion/75711/cloudbleed-cloudflare-cdns-does-it-impact-1password-no-see-blog-agilebits-com/p1

I also recommend that you check out the post on our blog about it, which contains everything you need to know : Three layers of encryption keeps you safe when SSL/TLS fails. The short of it is that 1Password.com's API does not rely on SSL/TLS which is what failed in this case.

I'm going to close this thread as we're trying to group this discussion in a centralized place.

Rick