3 ms·

I would be surprised if Gmail sent any tokens or credentials via Cloudflare

• dawnerd 10y ago
  Fear might be shared email/passwords since thats really common.
  • wapz 10y ago
    What's the fear? Aren't all passwords encrypted on the server side?
    • pshc 10y ago
      But if an in-transit plaintext password is leaked by CloudFlare, server-side encryption is irrelevant. (... that said, it's not like revoking sessions would impede a password-holding adversary...)
      • amatriain 10y ago
        It would for users that have 2FA enabled.
• pilsetnieks 10y ago
  Third party sites where the Google account was used for authorization, could have transmittted data through Cloudflare. (Think "Log in with Google" button on millions of sites.)