Convenient Calendar

No Https, no security

Convenient Calendar offers a service whereby you sync/share your scheduling, contacts and even photos. Their website doesn't even offer https, however, which means that all this data is being transferred between your computer and their site unencrypted (readable to anyone and everyone on the internet interested enough to look). Worse still, the connection wasn't even encrypted when I tried to set up an account and typed in my password, which means that this also was transferred insecurely. This means that my data and password is anything but secure.

(You can tell if https is enabled because your browser displays a green padlock symbol to the left of the web address.)

In 2018, not providing https is a security disgrace. Worse, it's actually free to do it using, for example, solutions like Let's Encrypt.

Even worse still, not having https enabled goes against Convenient Calendar's own privacy policy (emphasis mine):

Convenient Calendar will take reasonable technical and organizational precautions to prevent the loss, misuse or alteration of your personal information. Convenient Calendar will store all the personal information you provide on its secure servers. Information relating to electronic transactions entered into via this website will be protected by encryption technology.

Clearly, they don't take customer privacy seriously enough to even implement https. What a joke. Your data, the personal information of the people whose contacts you might want to input to Convenient Calendar's service and even your password for the account are all at risk, in direct contravention even of Convenient Calendar's own policy. Stay well away. These are fundamental shortcomings that could cost you very dearly.

2018-05-01