I have to agree with this. I hadn't read Jeff's post yet since, really, I haven't regularly read his stuff in probably two or three years, but I just did. The

I have to agree with this. I hadn't read Jeff's post yet since, really, I haven't regularly read his stuff in probably two or three years, but I just did. The only mention of emailing things to yourself is wholly contained in the following paragraph: > The upside is that once you enable this, your email becomes extremely secure, to the point that you can (and I regularly do) email yourself highly sensitive data like passwords and logins to other sites you visit so you can easily retrieve them later. To me, that's really dangerous advice. It relies on the assumption that you're only emailing things from your own gmail account, to your own gmail account. This means that the only transfer happens between you and Google over a secure HTTPS connection. Your data is transferred securely, stored on Google's servers, and securely transferred back to you when you request it. At no point is this specific assumption pointed out, nor are the problems with it discussed. First, although I can't think of a particular reason why gmail-to-gmail emails would be routed outside of Google's servers, that doesn't mean it doesn't happen. If someone could point a blog post discussing it, I would appreciate it. Second, All bets are off if you use a separate provider. One example might be work email. If you're signed in to a work account already, you might be more inclined to just use that to toss an email at yourself for later. I've certainly done that before, even though I could sign into gmail from work. People could make the mistake of thinking he's saying "send an email to yourself from anywhere" which isn't correct. Incidentally, activating two-factor auth makes it more likely that someone would do work-to-home emailing since there's now an extra barrier to just logging into gmail. Finally, this seems to rely on the assumption that you're only using the web client to access gmail. If you're using POP3 or IMAP to access your account, you could still be at risk, since I think (though admittedly I'm unsure since I only use the web interface) that these protocols aren't encrypted by default.