redirect opt-in?

[Petite Abeille]

Given that user-agents should refrain from initiating network connection on their own, should redirects (3x)  be manually confirmed? With explicit user consent?

The spec is ambivalent:

Redirect limits
Clients may prompt their users for decisions as to whether or not to follow a redirect, or they may follow redirects automatically.  

Perhaps user-agents SHOULD prompt for decisions as to whether to follow a redirect, or MAY follow redirects automatically.