Evernote doesn't really care about security

Post by julianz » Sun, Mar 03, 2013, 9:54 PM UTC

rane wrote: post #53

aschobel wrote: post #44

Co-founder of Catch here, we are sometimes compared to Evernote but Catch is a note-sharing and collaboration app. 1. Two-factor We don't offer two factor but is something we are investigating. This is mitigated somewhat by the fact that a lot of our users use Google login. 2. SSL / TLS SSL shouldn't be a paid feature. It's been included in our product for free since we launched. We try and use SSL everywhere. All pa…

> Co-founder of Catch here, we are sometimes compared to Evernote but Catch is a note-sharing and collaboration app. Would you say Catch has something to offer over Evernote for someone who uses the latter for private & personal notes?

Post by gcr » Fri, Mar 08, 2013, 1:45 AM UTC

lucb1e wrote: post #50

gcr wrote: post #31

Earlier quoted context omitted.

No. I consider properly setting up SSL to be a duty of care for the website owner. Your argument could apply to storing passwords in plaintext because "hashing is hard," or doctors refusing to wash their hands between patients because "it takes too much time" -- it's just not a corner that professionals should cut anymore.

Uh, if a selling point of theirs was "we hash your password", I would find that a good thing. I'm not saying it's not a duty for the website owner.