I agree that --enable-autocrypt should be applied in debian's mutt package.
Autocrypt may not be as secure as traditional OpenPGP fingerprint verification, but on the other hand, almost no one actually does OpenPGP fingerprint verification. And autocrypt doesn't stop people from doing fingerprint verification who want to do it. The realistic alternative to using autocrypt at scale is basically annoying and error-prone manual OpenPGP certificate distribution, which is decidedly not great. Enabling it in mutt as proposed here probably also means adding a build-dependency on libsqlite3-dev, by the way. Please do --enable-autocrypt in mutt. --dkg
signature.asc
Description: PGP signature