OK – so its google, they are huge, and lots of firewalls, and the web page uses HTTPS.

One compromised password though, if the CEO or IT manager, and they can wipe out accounts, and steal corporate secrets pretty quickly.

Its difficult to control how people use their PCs, at home, on the road, at internet cafe’s.  Browsers routinely ask to ‘store the password’ for you. These stored passwords are VERY easy to lift from a PC.

There is a ton of ways to compromise a password, and a gmail account, and wham – the corporate email is wiped, stolen, corrupted.

With IBM Domino, or Microsoft Exchange, the email is usually more protected with at least VPN access, and sometimes physical access.