Microsoft Outlook information leak (callback)

By setting CA certificate URL field in certificate used for message signing, it's possible to force Outlook to issue HTTP request without user intervation...