session_save_session(FALSE)

Hi,

I was just doing a general security review and saw this: http://drupal.org/node/218104

It says that modules should implement session_save_session(FALSE); before "impersonating another user" and session_save_session(TRUE); after returning to the original user. Should mailhandler implement this in the mailhandler_retrieve function?

Best,
Chad