https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/
the only way for cloudflare to have this data is if it is inside the ssl channel, analyzing traffic to their customers who are logging in.
ssssoooooooo i guess this makes the […] https://mastodon.social/@Viss/114178938573128987
the only way for cloudflare to have this data is if it is inside the ssl channel, analyzing traffic to their customers who are logging in.
ssssoooooooo i guess this makes the […] https://mastodon.social/@Viss/114178938573128987
Comments
so i feel like i have to point this out to the non-security folks.
the part where they, without consent, intercept the […]
because on this planet, when you steal fucking credentials from people who havent given you […]
what they have not done for years, though, is MITM the traffic and analyze users credentials without consent
buyer -> https -> Cloudflare -> Plain http -> Seller
If you want https without cloudflare involved this will get a more difficult setup.