Thunderbird Community Forum

Nord keeps telling me that Mozilla Thunderbird Version 128.0.1 Severity level : High. Exploiting this vulnerability is relatively straight forward for attackers. They may gain unauthorized access to your data or cause system disruptions. Risk mitigation is needed. This message was also for the latest 115 version. Then I updated to 128 and it has the same problem

NordVPN flags Thunderbird as a high security level risk and relatively straightforward for attackers to gain access to my data. Please look into this matter and correct. Thanks

I am using TB Beta 130.0b3 64 bit on Windows10

An entry has appeared in my Calendar and I have No idea where it came from It is however dated Friday 13th September ?! "France & Spain Trip 2024 Deposit"

Can anybody explain this ?!

Regards Eric

I am assessing the application and the Thunderbird application requires consent in Entra https://support.mozilla.org/en-US/kb/microsoft-oauth-authentication-and-thunderbird-202

Can you confirm if the Thunderbird stores any data? If yes, where it is being stored on your infrastructure, please provide the region? and which data type - email, body, subject, email id, etc?

Hello I m writting behalf on my colleague. His name is <redacted>.

His email address is <redacted>

He got mail regarding someone has access his email and knows about every secret detail.

When he tries to change his password, the backup email address shows wrong. Setted by the hacker.

Can you get in contact with <redacted> to save his account in above.

Why did I have to use Google to be able to access my Thunderbird account? I don't see that as protecting my privacy. Admittedly I haven't previously updated my Thunderbird password as often as I should but I don't see why it couldn't be used to enable Thunderbird on my new computer.

I am getting numerous emails that I can't seem to filter. they end in .best I set up a filter the same way I did for .be etc. They slip right through. Any ideas?

Hi E-mail message which i sent via Thunderbird contains in headers my internal and external IP in "Received from" record. Is it possible to hide it without use proxy or VPN? Recipient can see it.

I did not set up a password to view my passwords now I can't get out my passwords. I'm the only one who has access to the computer so there is no need for this "added security", more added annoyance. I've never had to have a password before to look up a password on one of my accounts but now I'm stuck with this function turned on. I think they must have forced it on me in a resent update because I just looked at my passwords last week. Yes, I know there is a thing to reset my passwords in Thunderbird and hopefully let me turn this silly requirement off. But I've tried that and it did nothing at all.

As I understand it, Thunderbird does not load many images in emails by default because the external provider of that image would receive the user's IP address.

It seems like some clients, such as outlook.com and gmail.com, just proxy the remote content so the user's IP is only exposed to the proxy provider (Microsoft and Google).

Is there a way to achieve this using Thunderbird? When I check images from my Microsoft or Google accounts, Thunderbird still seems to be retrieving them from their original remote sources. Could it instead obtain them through the email provider directly?

Alternatively, I have a VPN, though I seldom enable it for all traffic. Is it possible to bind remote content loading to a specific network interface?

I am making a feature request for official support (https://connect.mozilla.org/t5/ideas/remote-content-in-thunderbird-protected-proxy-loading/idi-p/65074).

Dear,

I get a daily mail from my solar panel (convertor) supplier with my daily (solar) energy production profile. This mail gets 'labeled' as a potential scam by Thunderbird systematically. I'm 100% confident these mails are not scams...

Of course, I could just uncheck the scam detection flag in the settings, but I do appreciate the extra protection this detection offers!

Your site says litteraly: "Why does Thunderbird tell me that a legitimate message is a scam? Thunderbird's detection algorithm isn't perfect and, unlike its spam filter, does not learn or adapt based on your email flags. ..."

Could the detection algorithm not be changed, so that it learns? Or so that, if the user has unflagged mails, it no longer flags similar (almost identical) mails?

Thanks (wholehartedly!) for Thunderbird. And for your attention, of course... Marc Claes

Good evening. I would like help with a forgotten password. Recently, I have been receiving a message asking me to enter a master password that I do not remember.I cannot find the passwords in the saved passwords tab. Please help me in this matter. My mail is biuro-logan@outlook.com. Thank you and best regards, Krystyna

I've received an email from 'mozilla', but in the end it's coming from a russian site called idealcart.ru.

I do believe this is fake, but was unsure what to do.

Using 115.10.1 (32-bit), Windows 11.

I get a lot of SPAM. Much is filtered out upstream (via a Barracuda system supplied by my ISP) More (but less effectively) by Thunderbird. But some (too much) still gets through.

My question - most of the time I can recognize it's SPAM by only looking at headers - subject, and correspondent (sender). I have no need to check the email content.

But to junk the email I need to select it, which causes the email content to appear by the built in browser in TB.

Not an expert, but this seems like an unnecessary security risk, that gives the email content (and any included code) time to do something. Am I overthinking this? Is there a way to mark an email junk without selecting it?

thx,