I went and read up on it and almost posted in the Programming thread. Much of it is, in practice, well beyond my expertise - but I understand it. First thing I did was to find the "test page" somebody made where you can test various websites. Looks like banks and financial institutions are on top of things already.
Am I correct in noting that
Cloudflare is responsible for letting the cat out of the bag first?
...