Closed erikCurlify closed 7 years ago
The issue content exists for a reason. Please give more details. Did you use the CDN at all? Affected subdomains? The current www. site does not use CF as proxy, but it's not a static site either.
I'm closing this issue and others like it. The list is now archived an I'm not accepting any change requests. I know this comes as a surprise and may seem unfair but please consider the following:
If you have a specific objection or unrelated issue you want resolved, you can contact me via twitter DM. Thanks for your understanding.
Please, do not create duplicate issues
DISCLAIMER:
This list contains all domains that use CloudFlare DNS, not just the CloudFlare SSL proxy (the affected service that leaked data). It's a broad sweeping list that includes everything. Just because a domain is on the list does not mean the site is compromised. This list will be narrowed down to the affected domains as we get more information.
HOW TO REMOVE YOUR SITE
OR
(this is obviously not proof that you weren't affected, but this serves as a paper trail for accountability reasons, in case someone wants to dispute that you were affected, we have an employee/owner of the domain who can be held accountable)
I will not remove sites that contain user data and are returning
server:cloudflare-nginx
in response headers, since they may have been affected. You're welcome to submit a PR to include a link to a blog post for your users, e.g.: