Bruce Schneier's one of the more prominent security writers around, and he covered that one over three years ago: http://www.schneier.com/blog/archives/2005/02/the_curse_of_t...

Where I work, all webmail is blocked, so the IA department is grateful to Palin for the object lesson supporting the policy.