On Thu, Jul 05, 2018, Kevin J. McCarthy wrote: > I am disinclined to default-enable something that send http requests > out without the user fully understanding what's going on.
Agreed. I would patch my copy of the source to not enable such code at all -- IMHO it does not belong into the MUA but some "helper" program; more complexity increases the likelihood of bugs.