RequestLoginLink hands mail.Send to a goroutine so that a hit and a miss
return on the same path — a synchronous SMTP round trip was a timing oracle that
answered whether an account exists (#155).
Nothing drains those goroutines at shutdown, so a restart during delivery drops the mail silently. The cost is one of the account's five hourly slots and a retry, which is why it was not fixed in !261.
Ref #155.
closed by commit 3dd60ce9a5 by cmc: control: queue login link mail instead of a fire-and-forget goroutine
2026-09-05 19:51 UTC