4 ms·
Does 1Password really send anything meaningful in their API queries, or is it encrypted separately and then just sent over HTTPS?
by rdl 10y ago
Does 1Password really send anything meaningful in their API queries, or is it encrypted separately and then just sent over HTTPS?
- fjarlq 10y agoFor what it's worth, I've posted this question in 1Password's support forum, which is frequented by 1Password staff: https://discussions.agilebits.com/discussion/75711/cloudbleed-cloudflare-cdns-have-been-leaking-sensitive-1password-data https://discussions.agilebits.com/discussion/75711/cloudblee...
- zaatar 10y ago1Password has said via their blog that nothing was compromised whatsoever: https://blog.agilebits.com/2017/02/23/three-layers-of-encryption-keeps-you-safe-when-ssltls-fails/ https://blog.agilebits.com/2017/02/23/three-layers-of-encryp... More details are promised in the coming days.
- deleted 10y ago[deleted]
- travem 10y agoAccording to their blog post about this issue they use multiple levels of encryption to guard against compromise at the SSL/TLS layer - https://blog.agilebits.com/2017/02/23/three-layers-of-encryption-keeps-you-safe-when-ssltls-fails/ https://blog.agilebits.com/2017/02/23/three-layers-of-encryp...