1Password & Cloudflare
Comments
-
@ohreally: Just a follow up here after verifying with the team. Apparently I tend to confuse "CloudFlare" and "CloudFront", as I used the former rather than the latter at least once just then. We are using CloudFront (and CacheFly) for hosting some content (images, for example), but are not using CloudFlare. If there's more context let me know and I'll be happy to clarify. :)
0 -
Brent
I thought months ago there was a warning about Cloudflare and that Agilebits/1Password was mostly unaffected by it?
See Cloudbleed:
https://discussions.agilebits.com/discussion/75711/cloudbleed-cloudflare-cdns-does-it-impact-1password-no-see-blog-agilebits-com0 -
You guys do great work! I thought I would correct you. :)
0 -
I ask because Tavis Ormandy seems to think otherwise
https://twitter.com/taviso/status/834900838837411840?lang=en
0 -
You can find our response here:
AgileBits Blog | Three layers of encryption keeps you safe when SSL/TLS fails
:)
Ben
0 -
Ah, indeed. Both the Twitter comment and blog post were referenced in the discussion that wkleem linked above. Anyway, that was 8 months ago. Hopefully he doesn't still think that. :lol: :+1:
0 -
Hi
How do I check for exposure to Cloudflare if I may ask as I some site I use have used Cloudflare? MediaFour, for example, uses ZenDesk which uses CloudFlare.
I didn't quite get what was posted earlier in how to check for CloudFlare affected sites.
0 -
@wkleem: Change your passwords for affected sites (i.e. not 1Password, but others using CloudFlare and relying on SSL/TLS for their security). There aren't a lot of CloudBleed-specific entries in Watchtower because 1) it can't be determined for many sites and 2) vastly more are already in our database for other, unrelated breaches.
0 -
Thanks Brent! I will have to look them up as some sites that use CloudFlare I only access infrequently, if at all.
0 -
:+1:
Ben
0
