On Sat, 14 Mar 2015, Joe Delahaye wrote to Tommi Koivula:

 JD>> Move the packet to secure??

 TK> No, that's not safe. Unpack the archive in insecure before 'hpt toss'.

 JD> If indeed it would be a mail bomb, then unpacking it first before
 JD> tossing would still create problems I would think.

that's why the tosser simply inspects the bundle to see what the compression
ratio is before unpacking... it seems that many developers have forgotten how
to do these common things as has been done since at least the 90s...

)\/(ark