On Sat, 14 Mar 2015, Joe Delahaye wrote to Tommi Koivula:

 JD>> Move the packet to secure??

 TK> No, that's not safe. Unpack the archive in insecure before 'hpt toss'.

 JD> If indeed it would be a mail bomb, then unpacking it first before
 JD> tossing would still create problems I would think.

that's why the tosser simply inspects the bundle to see what the
compression ratio is before unpacking... it seems that many developers have
forgotten how to do these common things as has been done since at least the
90s...

)\/(ark