I mean, enforcing HTTPS is easy and elementary, but maybe they didn't have time? Or something.
If you search HN, there has been previous discussion about Evernote's lack of security across many areas.
Other than that, I don't care either way about the company.
I mean, enforcing HTTPS is easy and elementary, but maybe they didn't have time? Or something.