Even more specific: mailto's are specified in RFC 6068 with some definitions coming from RFC 5322. Those specify the exact rules, a little complicated to summarize here, but for example the @ between the local-part and domain in the addresses shouldn't be escaped. The URI module claims to support the now obsolute mailto specification from RFC 2368.