All Products Community Forum

I signed into one of my financial accounts and it said the sign in was with firefox windows 10. I have windows 11 on my computer. Is this a security issue? Fire fox says i am on the latest version

I received an email threatening to cancel Firefox because of inadequate usage. Is this for real or a scam? I do use Firefox but, perhaps not enough for Mozilla's rules? I would regret losing this privilege. Thanks.

Dear Thunderbird Development Team

I'm a regular Thunderbird user. I'd like to provide feedback regarding security concerns regarding the UI specifications of the Android version of Thunderbird.

Currently, Thunderbird for Android displays the sender's "display name only" on the email list screen, making the sender's actual email address invisible at all times.

I feel this specification increases the following risks, particularly in smartphone environments:

- Anyone can freely forge display names. - Phishing scams posing as financial institutions, e-commerce sites, and official support are common. - Users often rely on the list screen or notifications to determine the content of emails.

As a result, a UI that makes it difficult to determine whether an email is from a legitimate sender at the list screen level can become a breeding ground for phishing scams.

The PC version of Thunderbird allows for detailed header display, etc., and I'm disappointed that the mobile version of Thunderbird, despite being the same Thunderbird, is at a disadvantage in terms of security.

I would appreciate it if you could consider the following improvements.

- Setting to always display "display name + email address" on the email list screen

Someone has created Mozilla accounts using several of my company's openly available email accounts. I can't figure why. Anyone have an idea why? I know this because all three accounts received the following email message from Mozilla: "Welcome to Mozilla! A few days ago you created a Mozilla account, but never confirmed it. Please confirm your account in the next 15 days or it will be automatically deleted. Don’t miss out on the browser that puts you and your privacy first."

Moderator note: This question has been edited to remove extra newlines.

I am using Thunderbird with both Microsoft and Gmail accounts. My question is... is Microsoft able to see that i am using a Gmail account, and/or the account name/adress, and vise versa?

Hello. I know how to define a server certificate exception to avoid browser warnings in case of certificate issue with a website (see attachment). However, I'd like to apply that exception for all users with access to my machine using a GPO (for user or local machine). This is also a requirement in my work where many users run Firefox from a server and the face browser warnings all the time (related to self-signed certificates) so it would be great to apply an exception for all users through a GPO specifying the self-signed certificate warning we want Firefox to ignore. Thanks.

Hello,

I process phishing URL's,

I have recently come across URL's that make use of a BLOB: syntax on the URL:

blob:https://bolig.botik.dk/16c8c011-0fa5-4ba0-a10f-ed7675055cc6

You can see an example of the Phishing URL in this PhishTank entry:

https://phishtank.com/phish_detail.php?phish_id=9118779

That URL then re-directs to the above "BLOB" URL.

My understanding is that it is "locally" generating the phishing website, similar to an old fashioned about: syntax, however it's not clear what the significance of bolig.botik.dk URL is - loading that URL without the BLOB: prefix causes an error

Can someone explain:

1) What is the BLOB: syntax, and 2) what would be reported to have the phishing URL removed in the above example?

Hello, I've come across a rather strange problem. I have a phplist mailing list (on domain1). When sending emails, I usually also add an image (as a link to the image). Since the beginning of June, however, I've noticed that Thunderbird doesn't display the images added in this way. Instead of the image, it displays an empty frame (a completely empty frame without any tags). Even if "Allow remote content in messages" is checked in the settings. Other email clients (outlook, gmail, roundcube) have no problems and display images without any problems. However, if I put the image on another domain (domain2) and put a link to this image in the email, Thunderbird also displays it. So: it doesn't display the image from domain1, where I have the mailing list, but it displays the same image from domain2 (in the same email from the same mailing list from domain1). Is it possible that Thunderbird is blocking the display of images from a certain domain?

Recently asked by Mozilla Thunderbird for access to my data etc and this was questioned by Google. However I agreed to the request and wish to be assured that this was not a scam

Yesterday there was a 4 hour outage at AOL. I use Thunderbird to access my AOL account. When I discovered the outage, I check my Windows 10 hard drive where my Thunderbird emails are stored and it was empty. Not only was my INBOX empty but every saved folder, delete folder, trash folder, etc. Once AOL was operational, all of my emails reappeared on my hard drive. Everything appears to have been recovered without me doing anything. My question is: who has the ability to delete files from my hard drive without me specifically doing so either manually or through the Thunderbird app?

Dear Sirs, I got a letter about a donation to support Thunderbird and I payed 200 SEK. I was connected to https://updates.thunderbird.net/sv-SE/thunderbird/128.0/nov24/

Is it OK? Or did I a mistake?

Regards Bengt Bengtsson Kalmar Sweden

I received an email from breach-alerts@mozilla.com informing me that Mozilla Monitor⁩ discovered a data breach that includes my personal information: Unfortunately, I don't know if this is a legitimate email from Mozilla. Can anyone confirm if it is or is not?

Thanks

When I attempt to add a Gmail account, I get this error - "Unable to login at server. Probably wrong configuration, username, or password"

Below are the steps with screenshots: - checked for no cookies to prevent Google from asking for an actual login - no stored google passwords - didn't put in my password on setup - TB finds the available configuration - prompted to login at google - add google password - allow access - error message

I have restarted Thunderbird. I have checked for updates (even though I have it on auto-update).

Are there settings on my Google or Gmail account that could prevent this from working?

Today is 01.16.2026 Hi Volunteers, thank you for the service you are providing Thunderbird users.

I didn't see a topic called Security, so I chose Settings.

For Thunderbird version 146, what specific version of LDAP is being used?

Regarding which LDAP version is the most up to date, I found this: https://pkg.go.dev/github.com/go-ldap/ldap/v3@v3.4.12

My concern is about LDAP's security. I believe it is reasonable to think that the latest available version of LDAP would have the latest and most up to date security patches applied.

I would like to feel secure knowing I have the protection of the newest version of LDAP which affords the best security protection available for Thunderbird laptop version 146.

However I have been unsuccessful in determining if Thunderbird 146 is using this LDAP latest version. Could you help me learn if Thunderbird 146 is utilizing the latest version of LDAP that is available? Thanks in advance.

Yes I know I am a bit verbose.

I continually get popups wanting me to give permission for TBird to access all sorts of stuff. Is this a BUG or a "Feature"?. How do I turn them off? Or should I give permissions?