API down?

[nschloe]

ping api.keygen.sh

PING behavioural-mandrill-rnma91gjivqr3isoab4hacmq.herokudns.com (3.220.57.224) 56(84) bytes of data.

https://app.keygen.sh/ seems down as well.

Edit: I just saw https://status.keygen.sh/, so yeah.

Edit: Now I'm getting API responses, but partly with incorrect signatures. -- This can probably be called a bug.

[asaf-b]

Same issues here.
ETA on getting the API back up?

[ezekg]

We experienced a DDoS this morning. During mitigation, some parts of our API sporadically failed, such as signature verification (due to Cloudflare's CDN modifying the Date header, causing it to become out of sync with the Date header that was signed).

We're writing a post-mortem that will detail this in further depth once we're able to fully review the incident.

[nschloe]

For reference: https://status.keygen.sh/incident/322421