It looks like it was 1Password who have blogged their take on this Cloudflare vulnerability here - https://blog.agilebits.com/2017/02/23/three-layers-of-encryp...

Thankfully it looks like it's not 1Password, who seem to use AWS CloudFront.

According to Tavis Ormandy's twitter post it was 1Password, https://twitter.com/taviso/status/834900838837411840

1Password's blog post responding to this incident: https://blog.agilebits.com/2017/02/23/three-layers-of-encryp...

taviso called out 1Password in the initial tweet, although that still leaves room for other password managers too: https://twitter.com/taviso/status/834900838837411840

Tavis specifically named 1Password, was that wrong?

https://twitter.com/taviso/status/834900838837411840

I am confused - why is 1Password is using anything but iCloud or Dropbox? Those are the only options I see (and "Folder" which is presumably just local).

Their Teams product has a web-based console for granting users access to vaults: https://1password.com/teams/

They have "for Teams/Families" options now that appear to use a proprietary, server-side sync, instead of the safer guarantees of the traditional client.

It's still very safe. They do not rely on TLS for protection, they actually send already encrypted data over TLS.

I just checked them too, but they may have just switched over.