4 ms·
This doesn't detect Cloudflare CNAME clients. For ex. It says uber.com is not vulnerable - because the homepage isn't, while the app is consitantly one of the
by nikcub 10y ago
This doesn't detect Cloudflare CNAME clients.
For ex. It says uber.com is not vulnerable - because the homepage isn't, while the app is consitantly one of the most impacted in the caches I've seen
I don't think anyone has really nailed the methodology here - and I think that is important (as is erring towards false positives rather than false negatives) for security mitigation advice
- mauriciob 10y agoIt's not that easy. Not all CNAME clients used the three services that had the issue. These lists are bad, because they list any Cloudflare clients that can be found, not just the ones that might have had exposed data.