3 ms·
There was a discussion on this in the report itself; the vulnerability was far too huge for it to go undisclosed for 90 days, I believe.
by govg 10y ago
There was a discussion on this in the report itself; the vulnerability was far too huge for it to go undisclosed for 90 days, I believe.
- forgot-my-pw 10y agoAnd it was disclosed after the Cloudflare announcement, IIRC
- Buge 10y agoBasically it was required to be disclosed for it to be "fixed" further. The action that needed to be taken was for everyone to delete their web caches. And everyone can't delete their web caches unless they know about the vulnerability.