Doesn't mean the data's encrypted on the server-side though. The person running this could probably access anything written here pretty easily. That's a trade-off you make with almost any cloud service though.

If you have a super-secret million-dollar startup idea or something really personal that you don't ever want anyone reading, you probably shouldn't be putting it anywhere on the internet.

Eh. Do you email ideas? Someone could read those, too.

Actually as all email traffic is sent in clear text (unless encrypted using PGP or a program of the sort) - these can be read by any node between your SMTP server and the recipient's POP server not just the end points.

The site definitely needs HTTPS.

I agree. While someone on the server might be able to read it, there's no need for everyone with a sniffer to be able to.

Regardless, I like this.