Forum communautaire Tous les produits

My system • Windows 11 on a Dell laptop. • Firefox Version 157, my default browser. • Norton 360 Standard. • Two Firefox profiles; the warning appears in both. • Firefox Troubleshooting Mode does not eliminate the warning https://support.mozilla.org/en-US/kb/sslkeylogfile-warning?utm_source=chatgpt.com

What I have observed The warning appears on Firefox network-error pages, including when the internet is disconnected or I enter an incorrect URL. A particularly reproducible example occurs after I successfully log in to Kotak Net Banking and select Help → Raise a Query. Firefox then displays a connection/privacy warning associated with the embedded page. I do not see the same behaviour in Chrome or Firefox Private Browsing when performing the equivalent Kotak steps. Troubleshooting already completed 1. Norton Safe Web HTTPS scanning was disabled and re-enabled without resolving the issue. 2. QUIC/HTTP3 scanning, WebSocket Protocol Scanning and DNS/DoH scanning were individually tested without resolving it. 3. Firefox Enterprise Policies are inactive. 4. I found no SSLKEYLOGFILE entry in either Windows User Variables or System Variables. 5. Norton and Dell malware scans found no malware. 6. The warning also occurs when I connect through a mobile phone hotspot rather than my usual BSNL connection. Questions for Mozilla's technical contributors 1. Does this warning establish that Firefox detects SSLKEYLOGFILE, or could another mechanism produce the same message? 2. Can the variable be inherited by Firefox from a parent process or injected into its running process even when it is absent from the Windows User and System Variables? 3. What is the safest way to identify which process or security product is setting it on Windows 11? 4. Is there a known interaction between Firefox 157 and Norton 360 Standard that could explain this behaviour? 5. What evidence should I collect to distinguish a Norton issue from a Firefox issue without disabling security protections or modifying Windows settings? I am not looking to disable security features indiscriminately. I want to identify the actual cause and, if Norton is responsible, determine the precise setting that needs attention. I would particularly appreciate a response from a contributor with Windows networking, Firefox TLS or security-software diagnostic experience. Thank you.

Thunderbird has worked fine for me over the years. I rarely send mail but started receiving a message that smpt server refused connection and contacted Network Solutions support. Their advice is below but I have clicked Clear Security Exception many times but can't get beyond it. Any ideas would be welcome.

To configure your mailbox in Thunderbird, please follow these steps:

   Open the Thunderbird application.
   Select Add Mail Account.
   Enter your Full Name, Email Address, and Password.
   Click Continue. 
   When you reach the page titled "Connect your email settings", click Edit Configuration.
   Change both the Incoming Server Hostname and Outgoing Server Hostname to mymail2.myregisteredsite.com.
   Click Connect.
   Enter your mailbox password when prompted.
   After entering the password, a warning message may appear. Select Confirm Security Exception.

Please note that you may need to click Confirm Security Exception three or four times before the account setup is completed successfully.

The reason you are receiving the security warning is that the mailbox is configured to use Connection Security: None. This is necessary because your mailbox is hosted on a legacy email service that is not compatible with SSL/TLS or STARTTLS encrypted connection methods. As a result, Thunderbird may display security warnings during the configuration process.

If you require further assistance with Thunderbird configuration, we recommend contacting your personal IT professional or someone familiar with email client setup and administration, as third-party email client configuration falls outside our support scope.

After upgrade to thunderbird 153.5.1esr from 140.17.0esr on a debian 13 (trixie) system I can no longer digitally sign my message with my external OpenPGP key located on a smartcard: I get the error message "Unable to send the message, because there is a problem with your personal key. The configured key ID ‘...’ cannot be found on your keyring." If I try to import the public key via the OpenPGP Key Manager I will get the alert "Importing the keys failed. TypeError: RNPLib.prepare_ffi is not a function". Any idea how to fix this?

Hello,

Since I updated Thunderbird to the version 153.5.1esr (64 bits) on Debian, I can't access to my PGP keys anymore, so I can't encrypt/decrypt my mails with OpenPGP.

In the console, I found this error message when starting Thunderbird: Error: RNP/OpenPGP library failed to load

And in OpenPGP, when I try to import keys (in .asc format), I've got this error message TypeError: RNPLib.prepare_ffi is not a function

I'm lost and I couldn't find any relevant information about this error for this version.

What can I do ?

What do I do about this warning I am receiving when I refresh my inbox? "The certificate for pop.windstream.net is not valid. Someone could be trying to impersonate the server and you should not continue"

   Unable to receive new messages on my Thunderbird inbox for this warning

What do I do about this warning I am receiving when I refresh my inbox? "The certificate for pop.windstream.net is not valid. Someone could be trying to impersonate the server and you should not continue"

   Unable to receive new messages on my Thunderbird inbox for this warning

Доброго времени суток! Уважаемые друзья, хочу сообщить, что у нас мало времени! В ближайшие месяцы появится опасность взлома квантовыми компьютерами корневых сертификатов сервер-клиент, ключи обмена и другие ранее считавшиеся не возможными взломами обычными средствами и вычислительными мощностями. Пожалуйста, добавьте проверки на квантово-устойчивую гибридную криптографию при сканировании браузера и сервера.

I have Thunderbird installed on Windows 11 along with Norton 360. Today, my connection to the AT&T e-mail server suddenly disconnected and I immediately got a pop-up notification that Norton detected a problem with a security certificate. When I inspected the details, it indicated that the certificate for inbound.att.net had expired (the range of valid dates on the certificate actually listed the current date as the last valid date). After several infuriating calls with AT&T support and Norton support, I figured out that simply disabling Norton e-mail protection allowed me to access my e-mail account.

Multiple web searches on similar issues suggested that since Thunderbird has its own certificate storage, fixing the problem involves locating the Norton certificate file and importing it using Thunderbird's certificate manager. Unfortunately, that solution appears to be applicable for first-time Thunderbird installation, and I when I tried it I was informed that the certificate was already installed. Another web search suggested that I should go to the Authorities tab and remove the entry for "Norton Email Protection". Unfortunately, the entry that I found was for "Norton Web/Mail Shield", which according to at least one source is not the same thing, so I am afraid to remove it.

So my question is has anyone else encountered this same problem, and is the correct approach to remove the Norton Web/Mail Shield authority before importing Norton's certificate file?

Thank you. I’m not a technical person and so could you please share the specific and safe steps which will resolve both the error state shown, and the TLS logging issue without creating any other unintended consequences. I don’t want create any additional problems while trying to address these two issues. Thank you

Thunderbird will not download mail. It sends this: "The certificate for inbound.att.net does not come from a trusted source." "Location: inbound.att.net:995" Then it sends the data with the certificate information. I am not a programmer, I do not understand what I am supposed to do to get it going again.

AVG sends message: "We've identified a site certificate problem" "Trust for this certificate has been revoked."

Looking at certificate page that AVG provides is Greek to me. General tab displays:

"This certificate has been revoked by its certification authority"

issued to : inbound.att.net

issued by: Digicert Global G2 TLS RSA SHA256 20250 CA1

Valid from: 4/12/26 to 10/28/26

Details tab:

lists a bunch of things that I don't comprehend and offers an option to "copy to file" and lists a number of formats to copy the file to.  Have no idea which would be the one to use. 

Trying to access email directly from browser has not been successful because it wants verify my identity by sending message to my phone, but it does not send anything.

Hi there.

I'm in Alberta, where we have recently changed timezones. Note that the CLOCK has not changed yet, as we are still before the date in November when we would "fall back". We were UTC-6 summer and UTC-7 winter. Windows called this "Mountain Time (USA and Canada), but now the "Mountain Time (Alberta)" timezone is in Windows after the 2026-09 Preview Update (KB5124010) (26300.9550).

When connecting to Shaw.ca's IMAP servers, the certificates that were valid prior to the Windows update are now reported as invalid. This has been confirmed across two separate PCs with different email accounts. The data for the certificate LOOKS valid (see screenshot) and is the same before and after the timezone change.

The failure occurred on the latest ESR release of Thunderbird, as well as 156.0 and 157.0 non-ESR.

Thanks :)

Norton flags that the Thunderbird certificate has expired. Looked at instructions on the help, but most are to start from scratch. This is a new problem as of today, so fairly sure it isn't on my end, but cannot verify.