[markburns]

Do you have a reference for that? Was quite shocked by that and searching his site found a couple of sensible articles about security, but nothing about emailing yourself your passwords. May just be that my google-fu isn't good enough.

[ta12121]

Second to last paragraph: http://www.codinghorror.com/blog/2012/04/make-your-email-hac...

[markburns]

Presumably that is based on his assumption that once the web app receives an email via https and it is to a gmail user, they don't send the message via email (i.e. it never travels over an insecure channel). It may be a reasonable assumption, but seems a little strange to boast about exactly how secure it is.