4 ms·
According to things I discovered on their privacy pages here: https://www.notion.so/willchatham/Terms-and-Privacy-28ffdd083dc3473e9c2da6ec011b58ac https://www.
by geekamongus 8y ago
According to things I discovered on their privacy pages here:
https://www.notion.so/willchatham/Terms-and-Privacy-28ffdd083dc3473e9c2da6ec011b58ac https://www.notion.so/willchatham/Terms-and-Privacy-28ffdd08...
They encrypt your data at rest, have their stuff audited by a third party quarterly, and give the employees some amount of security training.
The thing I am curious about is that to log in, you don't have a password. Rather, then send a temporary login code to your email address. Not sure how I feel about that.
- ralusek 8y agoIt's safer than email + password. Every email + password combination I'm familiar with allows you to reset password by having a link sent to your email, which means that access to email is always considered the ultimate association of identity. This just removes the email + password altogether and requires that you have explicit access to the email. So it takes the end-all-be-all access criteria of the other solution, but removes the possibility of them being able to have a weak password, and also removes the issue of them having to store and transport passwords.
- innerspirit 8y agoIt's less safe than email + password. Someone can break into your email with email + password, or you can forget it logged in and they have your Notion automatically, so it has the same problems email + password have, plus some more.
- cookingrobot 8y agoHow is it less safe than any service with an email based password reset option?