Confirm Security Exception error message AGAIN!!!!!!!!!!!!!!!!!
This is getting to be routine with Thunderbird. My company uses GMail. Periodically I get the endless Confirm Security Exception popup parade. There does not seem to be anything I can do. I have tried the various "fixes" posted in other threads to no avail. Contact your provider? Have tried contacting Google AND performing your work responsibilities?
I REALLY DO NOT want to use Outlook. Does anybody have a clue?
Chosen solution
You're running Avast anti-virus, and told it to scan your incoming and outgoing messages (for whatever reason). Since Avast cannot look into SSL/TLS encrypted sessions to your server it generates a cert for the Google server and tries to sneak it in. This is what Thunderbird alerts you about for good reason: Thunderbird cannot verify the Avast self-signed cert. This looks like a man in the middle attack, and in fact it is. Avast is intercepting your secure connection to the server, and connects to the Google server on your behalf. I'd hope you do have a lot of faith in Avast, I wouldn't want them to be able to scan all my mail and see my Gmail password. And do you know what they do with that knowledge?
So you can either tell Avast not to scan your SSL/TLS encrypted traffic, or live with the Thunderbird warning. There is nothing to be 'fixed' in Thunderbird, it works as designed.
Read this answer in context 👍 1All Replies (7)
Press 'View'. Please create a screenshot of the certificate viewer window. Make sure the issuer of the cert is visible in the screenshot - see attached example. http://support.mozilla.org/en-US/kb/how-do-i-create-screenshot-my-problem
Is this what you are asking for?
Chosen Solution
You're running Avast anti-virus, and told it to scan your incoming and outgoing messages (for whatever reason). Since Avast cannot look into SSL/TLS encrypted sessions to your server it generates a cert for the Google server and tries to sneak it in. This is what Thunderbird alerts you about for good reason: Thunderbird cannot verify the Avast self-signed cert. This looks like a man in the middle attack, and in fact it is. Avast is intercepting your secure connection to the server, and connects to the Google server on your behalf. I'd hope you do have a lot of faith in Avast, I wouldn't want them to be able to scan all my mail and see my Gmail password. And do you know what they do with that knowledge?
So you can either tell Avast not to scan your SSL/TLS encrypted traffic, or live with the Thunderbird warning. There is nothing to be 'fixed' in Thunderbird, it works as designed.
Modified by christ1
This "fan page" shows how you can pause/suspend the avast! Mail Shield so you can test whether that resolves the issue: http://www.getavast.net/support/turn-off-shields (as I am not an avast! user, I don't know for sure that this is for the current version)
I went into the avast settings and turned off the mail part of it. As of right now I am not getting the TB security exception message.
Thanks for your help.
Hi. I am having this problem with Gmail. I am using Ubuntu 14.04 with Thunderbird 38.30.
Everything seems normal until I ask it to send. When I use the Gmail WWW mail page, it seems happy connecting via HTTPS. So, have I done something wrong? Using the WWW page is not convenient.
Any advice is welcome. Thank you.
Akemwave,
Whatever your problem is, it isn't the same. Please start a new thread for your problem and provide as many details as possible.