Thunderbird Community Forum

When my message filter uses the "Reply with Template" action, the reply e-mail is always PGP encrypted, even when I do not have any public key for the recipient e-mail address. As a result, the reply e-mail is always corrupted.

I am using Thunderbird 140.7.1esr on Windows 10.

I have attached a screenshot of what the reply e-mail always looks like.

In the Template that I am using, the "encrypt" button is not selected, and in the OpenPGP menu of the Template, the "Encrypt" menu item does not have a checkmark next to it.

Does anyone know how I can get Thunderbird to send reply e-mails without using encryption?

Hi, With new version 1.143 all accounts are gone, need to re-create my existing mails accoutns (outlook, yahoo, gmail) but all fail on error message "www.mozilla.org uses an invalid security certificate" How to resolve ? Grtz, Jane

Hi. I'm using Thunderbird for my POP account and it has stopped sending messages. It just says, Sending of the message failed. Peer's certificate has expired. The configuration related to (my server name) must be corrected. What am I to do?

I keep getting a certificate error on my Thunderbird. The certificate refers to an email account i no longer have (Personal domain) and i have removed the account in thunderbird, and also removed previous certificate exceptions.

I have been through all menus and settings, and cannot find anywhere where it refers to that domain (and subdomain) I have also removed one entry with that FQDN in the outgoing server section.

What to do?

On Monday, 17 November 2025 the Security Certificate expired and I stopped receiving emails both on my computer and Andriod Device. As a result I am not receiving any emails through Thunderbird, but I can go to email host site to view them.

I logged in my computer tonight and clicked here and clicked there and the error message: "The certificate for mail.homebizmall.net is not valid for that server. Someone could be trying to impersonate the server. Create an exception but this could mean that someone has stolen your certificate and may be able to impersonate you."

So it seems the POP server and the SMTP server certificates were only valid for 3 months and I was FORCED to create the exception for both servers. Now I am worried the security has been breached.

By clicking here and clicking there, I stumbled on a few people who seem to have this problem, but each with their own limitations. My operating System is Windows 10 without the option to upgrade. I have not extended the security updates because I don't understand if it is just the operating system uploading to the cloud or everything on my computer and I am not prepared to do the latter.

Is it safe to leave the band aid on that I have used for the moment? Can I create an exception for the phone? Or is there a glitch that someone needs to walk me through fixing?

Thanking you in advance

Clinton

I am getting an error for an outdated certificate on my mail smtp server and when I try to add a security exception Thunderbird does absolutely nothing when i click the button to add a security exception where I can send mail. I end up having to cancel the window and discard my email. It will also not go view the certificate and if you ask it to check it just hangs up forever in and endless loop of checking.

Sending an email produces the following:

"Send Message Error Sending of the message failed. Unable to communicate securely with peer: requested domain name does not match the server’s certificate. The configuration related to mail.sinnamonlaw.com must be corrected."

After I click OK, the screenshot attached shows up.

Please advise, thank you!

Hi,

I’m using Thunderbird on Windows and recently ran into a certificate warning that I can’t safely interpret, even after searching the web and using AI tools (which gave me inconsistent answers).

Thunderbird tries to connect to the iCloud contacts server p123-contacts.icloud.com (CardDAV). When it does, I get a “wrong site” certificate error. When I click “View certificate”, Thunderbird shows a valid certificate, but not for Apple/iCloud – it’s for login.kraftcom.de (issued by DigiCert / GeoTrust TLS RSA CA G1). I did not accept the exception.

From what I can see online, p123-contacts.icloud.com is a legitimate Apple domain, but it is also mentioned in some phishing / scareware contexts, which makes me even more unsure how to interpret this combination (Apple host + Kraftcom certificate). I’m also not sure whether this is simply a captive-portal / ISP login interception effect or something that should worry the wider community.

My questions:

Is this behavior expected in any scenario, or does it indicate a misconfiguration / MITM situation that Thunderbird should treat as a serious security issue?

Is there anything I should check or change on my side (Thunderbird config, network, ISP, certificates)?

Is there any additional diagnostic information I can provide (logs, screenshots) that would help you assess whether this is a Thunderbird issue or a network/ISP issue?

I specifically did not confirm the certificate exception and I would like to keep my setup secure, but I also want to make sure the community is aware if this is a broader problem.

Thanks in advance for any guidance

When someone sends me a msg, it displays along with the HTTP equivalent? Trying to figure out what setting is out of Wack such that I ses the HTTPS display of the message? Thanks

From Microsoft: "Recent Outlook Mobile updates introduced a stricter and more standards-aligned S/MIME message structure. The messages themselves are valid, but some third‑party mail clients such as Thunderbird do not fully support the way Outlook mobile structures the encryption. As a result, these clients may display a blank message body even though the encrypted content is present.

As a workaround, if you need to send encrypted mail to recipients who use third‑party clients, use Outlook desktop or Outlook on the web instead of Outlook mobile. These versions generate encrypted messages in a format that is more widely supported. "

I couldn't find this reported anywhere in these forums. Is there a solution being worked on to address this issue? Or has anyone found a workaround? We are stuck with using the Outlook app until the Thunderbird app supports S/MIME.

Hello.

I have added a new account to Thunderbird, and it is not syncing to show new messages. I am getting a pop-up from Tbird saying "The certificate for mail.newcreationloughborough.uk is not valid for that server ..." etc. I have gone through the procedure titled 'Troubleshooting email client warnings about invalid server certificates' to add Norton's certificate to my email app (as directed by the 'resolve' link in the 'Resolve email sync issues caused by certificate warnings' from the Norton EE Cyber Security add-on), and it tells me that the certificate is already installed.

What can I do next to get it to sync?

When I export my private key and add more user IDs to it, GPG adds extra feature flags that apparently aren't supported in Thunderbird. I've tried following the directions here, but GPG doesn't seem to do anything different with the --rfc4880 flag, and so importing the key back into Thunderbird still gets the "unsupported features" warning.

Even when creating a key in Sequoia-PGP, it seems to add an extra notation? And that also seems to make Thunderbird say it's an extra unsupported feature.

Am I doing something wrong?

I am getting this message when I try to send email. All of my settings are correct. 'Sending of the message failed. Unable to communicate securely with peer: requested domain name does not match the server’s certificate.

I have just installed Thunderbird, am continually getting "certificate for outlook.office365.com" not trusted. I have added Thunderbird to my Malwarebytes exception list, but the the notice continue to come. I have ensured that OAuth2 is the correct authentication method, but the messages persist.

Is there something else I can do to stop these messages?

Would be very grateful, thank you.

Tim Harrison

Hi All. New to Thunderbird but liking what I see. Am trying to install a new certificate but keep seeing the same error message when I attempt to send an email:

Sending of the message failed. You specified that this message should be digitally signed, but the application either failed to find the signing certificate specified in your Mail & Newsgroup Account Settings, or the certificate has expired.

So here is what we know:

The certificate seems to work (I've sent test emails to a couple of test email accounts) when I use it in Outlook safe mode. Can't get it to work in normal Outlook mode because of add-ins, hence my switch to Thunderbird. They seem to appear fine in the S/MIME section for digital signing and encryption and I can even see the certificate when I go into Manage S/MIME Certificates.

Has anyone come across this before / got any ideas about how to resolve this? Thanks!!

We are testing EDI messaging with a government department however it seems that Thunderbird keeps stripping the attachment before the email reaches the exchange and produces this error.

We sent 3 messages:

1. 2 had this error: PKCS#7 argument error: malformed S/MIME encoded PKCS#7 object 2. 1 had this error: no attachment on their end

PKI Certificate is installed in Thunderbird.

I have suddenly started to receive this message when I open Thunderbird "Certificate for IMAP Gmail does not come from a trusted source". When I click on this message I get the attached screenshot.

I've gone through the forums by I can't understand what it is written. It seems like everything that is written is designed for people who have a good understanding of technology. I don't but I was able to determine that the OAuth is properly set.

I am using 128.14.0esr (64-bit) Thunderbird for Linux Mint mint-001 - 1.0 Updates disabled by system administrator Currently on the esr update channel