Hi Diego,
It isn't used but it cannot be commented out, there must be some setting there to prevent an error but the setting there does not have to be correct, the settings used come from <appSettings/user.config
The asp.net password recovery would normally use the <system.net settings but at the last second before the message is sent we change the settings so it uses the ones from <appSettings. But if the system.net settings are missing an error will happen before we even get a chance to change the settings, therefore something must be there uncommented but the settings there don't have to be correct.
Hope that helps,
Joe