cf email thread

TBH, I think anything that is hosted behind CloudFlare in any shape or form should be considered compromised. I think CloudFlare claiming that only this specific set of sites they identified are affected is bordering on reckless. They have no way of knowing for sure, and probably have no way of working it back to find out where it actually has been used.
We've also no idea if a third party has actually been exploiting this for a longer time.
Best to err on the side of caution at least!

This is very old news at this point.

Does anyone have any reason to suspect we were affected by this (We don't host stuff on cloudflare). If not, and if there are no objections, I would like to close this bug and make it public.

Security Team: Close this task as non-actionable?

See previous comment

@Aklapper - the Security-Team agrees with @Bawolff's last comment. Will resolve this task and move on our board as there are no actionable items here for WMF.