Because then you are sending a lot of requests to random domains that may not be designed to handle the traffic? And a lot, a hell of a lot of mail servers out there for common email services use legacy mail servers not related to the domain of the email address (because the mail servers were set up before that particular email domain became popular).

Super quick example, if you have a @windowslive.com email address, the IMAP server is imap-mail.outlook.com. The Exchange ActiveSync server is s.outlook.com. Neither one would be found but your suggestion of randomly hitting subdomains.

There is actually an included list of common Mail Servers and common mail configurations. Mail.app only sends the domain when the domain is not on the list or the configuration fails. It also means that if enough users look for a domain, Apple can immediately include the information without waiting for an update.

Have you ever done tech support for email problems before? It's a nightmare. Anything to help the user is best.

He turned off Spotlight suggestions for Spotlight, not Spotlight suggestions in Safari.

(Because you may not want Spotlight sending strings to Apple when searching for files on the computer, but you may not care if you are only searching the internets via safari).

No, he said he turned off Spotlight suggestions in Spotlight. Not Spotlight suggestions in Safari. (Because you may not want Spotlight sending strings to Apple when searching for files on the computer, but you may not care if you are only searching the internets via safari).

It's in the same window!

It is not on by default. It's an option shown in the setup assistant. Shown after you first install Yosemite. The option in the setup assistant then sets those options in the Security prefpane. I'm not sure why Siracusa said they are on by default. Maybe since he's been using the beta for so long (since June), he forgot the option was in the Setup Assistant (since the Setup assistant is only shown on first major upgrade)

It's part of the automatic configuration settings. When you first set up a new email address using "Add other Mail Account" in Mail.app, it just asks your for your name, email address, and the password for the account. It then sends the domain to Apple to get the imap/pop3/smtp servers and other configuration information for that domain, if it is available, so the user doesn't have to enter them all separately. It's part of a good UI.

Oh, I read it. But you didn't read my response to your other comment, which was,

Even if you change search engines in safari, it doesn't disable Spotlight suggestions in Safari. That's a separate checkbox in the Search tab in the Safari preferences. (There are a bunch of options in the Search preferences in Safari)

Searching maps is part of Spotlight suggestions

Even if you change search engines in safari, it doesn't disable Spotlight suggestions in Safari. That's a separate checkbox in the Search tab in the Safari preferences. (There are a bunch of options in the Search preferences in Safari)

If you want live search results from the web, of course the client has to send the search string to a server each time the search string changes. Why is this surprising? If you don't want live search results from the web, disable it (in the Spotlight preferences and/or in the Safari Preferences) and the search string will stop being sent.

If you want any kind of information from the internets, some data has to be sent to a server on the internets at some point in time. There's no way around this.

I think OP might mean instead of a different type of server and didn't realize web servers can be extremely small when tasked with one singular purpose.

OpenSSL has proven to be too big and too much of an untested surface area. Although I'm saddened they didn't move to CommonCrypto.

So why didn't Snapchat take a proactive approach and ban the third parties? They really depended on the ToS for enforcement of security?

Extremely low density of vending machines in the US. Now, Japan...

Because otherwise it would leak passwords to insecure sites, in plain text.

If they are using iPads with the latest version of iOS 8, they can just save the passwords using the keychain in safari with autofill (only works if a site is HTTPS, however)

it has no utility for anything other than payments. The use scenarios other devices use NFC for (because they can't be used for payments due to carrier interference) are better handled by better technologies, like Bluetooth LE.