Fastly and Cloudflare are doing a great service monitoring and reporting on fallout from the PHP exploit -- but it's important to remember that they can do so because they have visibility into a huge chunk of the Internet's traffic in plaintext, even when it appears encrypted to you.