Yahoo’s "crypto witch" exploits web security feature, learns your site history
Yan Zhu of Yahoo! decided to see if two HTTP security features could be combined for an overall reduction in security.
Story added 30. October 2015, content source with full text you can find at link above.