The certificate for 'www.evernote.com' is invalid

[sejtam 0]

Today when connecting from my mac, I get this popup almost every few seconds:

 

The certificate for 'www.evernote.com' is invalid

 

You might be connecting to a server that is pretending to be 'www.evernote.com' which could put your confidential information at risk.

 

at first I thought this was because i was inside a coporate network which has some proxy setups

but I get the same if I connect to the 'net using my T-Mobile Mifi.

 

I don't see the same on my Android device connecting through the same networks.

 

I'm running Version 5.4.4 (402231) on Mountain Lion.

 

 

[sejtam 0]

and yes, I did exit Evernote.app when changing connections, just to ensure it's not some old state hanging around

[cwb 225]

Looks fine from here.

https://www.ssllabs.com/ssltest/analyze.html?d=evernote.com&s=204.154.94.81

 

What if you open a browser to https://www.evernote.com and check the certificate, what does it say?

 

You could have a proxy or malware installed and that would be indicating a man in the middle attack, in which case wouldn't matter what network you're on.

[sejtam 0]

I am gettint the same Popup in Evernote 5.5.1 (402628 App Store).

 

I don't get when accessing www.evernote.com using Firefox (and the lock logo's mouseover shows a valid VeriSign inc cert there).

 

At first I thought it was because I am also running Avast Webshield but the problem stays the same even when disabling that.

 

 

If there at least was some way to inspect that cert that the evernote app complains about, that might help narrow it down.

 

As it stands, Evernote on the mac is useless

[sejtam 0]

Ah, looking into the console shows me many entries like

 

22/4/14 8:08:29.927 AM sandboxd[97318]: ([97448]) Evernote(97448) deny file-read-data /Library/Preferences/com.apple.crypto.plist

 

following advice in https://discussions.apple.com/thread/4178698
 

deleting that plist helped.