This bug was pretty much a showstopper for me.  My ISP won't allow me to send email using 
their SMTP server over port 25 (even connecting to localhost) without providing a username 
and password, and there's *no* *way* I'm hard-coding a cleartext account password into any 
script, period, much less on a shared server.  :-)

Patch attached.  This patch adds a "sendmail = " option.  After applying this patch, you can 
add:

    sendmail = /usr/sbin/sendmail

(or whatever) to your config file, and instead of using SMTP directly, it will pass the message 
to the sendmail binary.