For some reason I thought the order does matter, head should be done first. We shouldn't be encouraging parsing the full body if not necessary, bad practice and also an attack vector we need to mention in security section. Also sender MUST be able to do both! (Only stop if inbox found, not only try one then stop). I feel like order matters so the publisher knows what's going to happen reliably.