Thunderbird Community Forum

I use both Thunderbird and Outlook for my cox.net email account. I can receive incoming emails using Thunderbird but cannot send emails, and I can both receive and send emails using Outlook. The server settings are identical for both Thunderbird and Outlook - imap with STARTTLS and port 993 and smtp with STARTTLS and port 587. When Thunderbird is unable to send an email, I get a balloon that indicates that the smtp server cannot recognize my email address, which is [email removed]@cox.net.

Tools>options>privacy & security>Passwords. Click 'show passwords' brings up the saved passwords in a separate box. Need ability to resize the box (and colums within the box). The columns are too small to see the entire contents of a column. Using TB 138.0

First, I annually donate to this site. Previously when I wanted sail@chartermi.net to prohibit emails I could select Block Sender. Then following your update now all I can do is Mark As Junk which doesn't work. How can I Block Sender?

Thomas Ehman sail@chartermi.net te@chartermi.net

Hi All, :-)

I *know* (from various on-line posts over the years) that the accepted wisdom is that Thunderbird does *not* cache the TLS Certificates of the MDA(s) that it connects too - however, I can come to no other conclusion but this based on the information and investigations I have been able to gather over the last several days.  :-(

Our MDA (Dovecot, with Postfix and back-ended by MariaDB) hosts a number of Email Domains, each with its own Let's Encrypt Certificate. Our Thunderbird clients correctly "obtain" (via SNI) the correct(?) TLS Certificate from the MDA for each given Email Domain - or at least, "obtains" the *old* (ie out of date / expired) Certs.

And here's the thing: I've just spent the last 2 days trying to work out why the "old" certs are still being "obtained".

I've:

• Gone over the Dovecot (and Postfix) configs - nothing, all correct
• Searched the Storage of the actual servers - only Certificates found are the *new* (ie renewed) ones
• Confirming that the Certificates located are correct by inspecting them (using Step-CLI) - yes, they are correct
• Cross-confirming (vi OpenSSH) that the correct (new) certificates are being server by Dovecot - yes, they are
• Checked that the "old" Certificates do not exist *anywhere* on the mail server, the local PCs (Rocky Linux with KDE), nor the database server (on the server or in the database itself)
• Cleaned the Thunderbird Certificate Stores of all but CA Certificates

And yet, Thunderbird bitches and complains that the MDA's Certificates are "out of date", and when I ask Thunderbird to show me the offending Cert it presents the correct (for the relevant Email Domain) but "old" (ie expired) Certificate.

So, could someone please help me out in working out WTF is going on?  :-)

And, FTR, I'm quite ready to "eat humble pie" if it turns out I've gone and Fire-trucked something - so feel free to tell me so if that's the case  :-)

Thanks in advance

Dulux-Oz

I am getting an annoying popup stating that Dan.Hromada@citizensforfreespeech.org is asking for my Google password....this email account is not associated at all with Google or Gmail. It's hosted on the organization's server. Please see the screenshot of the pop-up.

Thank you, Dan Hromada

To Support 2025-04-30

Thunderbird has now been supplied with openPGP for encryption, for users having that need for special purposes. Encryption is functioning perfectly between openPGP users. Many thanks. But there is really a need for using either normal mail or encrypted in connections to Support. Please show that this impressing facility is functioning inside your support_system ! Or parts of the system. Best Regards Boris Reimann DK boris@dsa-net.dk

I regularly send/receive encrypted email on Windows with Outlook but seeing as most of my work is done on my Ubuntu partition, I was interested in a Linux solution. I was able to connect to my exchange server using owl automagically and see my email, no problem. I had some experience getting smart-card readers working on Ubuntu so I already had some things in place using the OpenSC Security Device. TB was able to talk to my card reader, grab the certificates, and I was able to set my S/MIME digital signing and encryption certificates. It definitely works, I can decrypt messages that I had already received in the way I expect, it checks if I have a card inserted, asks for me PIN, and the message decrypts correctly as I would expect. The issue is that if I try to send a signed email to myself, I get the error, "Sending of the message failed. You specified that this message should be digitally signed, but the application either failed to find the signing certificate specified in your Mail & Newsgroup Account Settings, or the certificate has expired." A similar message is sent if I try to encrypt (but not sign) a message to myself but for the encryption certificate.

I don't understand this message, as TB can definitely see my card, ask my card for my private key, and use it to decrypt messages, so I believe my E2E settings are correct. Neither certificate is expired, both expire sometime in 2027. I even added my companies root certificate to my Certificate Authorities in TB, so I don't believe it's an issue with my certificate being deemed invalid, and the error message certainly doesn't suggest as much. I've also tried both of my card-readers in case something was only looking at the first one, but both can be signed into correctly but neither let me send signed/encrypted email. The only clues I can see are the console error in my terminal when the message fails to send...

console.error: mailnews.send: "Sending failed; , exitCode=2147500037, originalMsgURI="

Also when I open a remote debugging session, this is the error shown...

mailnews.send: NS_ERROR_FAILURE: Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIMsgComposeSecure.beginCryptoEncapsulation]

   _startCryptoEncapsulation resource:///modules/MimeMessage.jsm:510
   _writePart resource:///modules/MimeMessage.jsm:558

Does anyone know what I might be doing wrong and nudge me in the correct direction?

My e-mail appears to have been hacked, resulting in the loss of $3000. A second attempt to hack the account, by intercepting an e-mail sent to me and replacing the bank details, was interrupted by the bank, which froze my account until the situation was resolved. That would have caused the loss of almost $7000, had the fraud been successful. I don't want to change my e-mail address, but I would like to improve the security of my account. Can you please advise what I should do.

Thanks and regards,

Bruce Acheson

I am considering moving over and using thunderbird as a desktop email client principaly to archieve my emails per the advice in the book. The book advices from a privacy and sercuity perspective that a email clinet such as thunderbrid should only be used to archive emails and not to send them. I dont think this is a big risk and I am considering using thinderbird to send emails as well, not just from a browser.

Are you able to clarify and provide further insight on this ? What are the privacy and security risks of sending an email this way ? Please see extracts from book below.

I do not recommend using them for daily access to these services, or to send email messages, but only as an archiving solution to make sure you always have a copy of your data offline.

I use this only as an offline backup of all email in the event I cannot access my Proton Mail account online. I never send email from this application.

A decade ago, my main concern about email privacy would have been exposure of a true IP address. Most of us still used email clients which shared the local IP address within the email headers of every sent message. he risk today is minimal. If you send an email from within a web browser through a service such as Proton Mail, Tuta, Fastmail, Gmail, etc., the recipient should only see the IP address of the email server. Your true home IP address should not be exposed. If you send an email from an email client while using these services, you are also usually protected. The emails bounce through the service provider's servers before going out and only includes those addresses. However, sending email through a client configured for corporate email may expose your true IP address. As an example, sending an email from your employer's provided address through a traditional emailclient from home could expose these sensitive details.

Hi guys,

I'm communicating with some colleagues using S/MIME encrypted messages. I have already imported all the necessary licenses, and all licenses are valid until 2034. I can receive and read all the encrypted messages they sent me, but every time I try to reply or send them (the same people) encrypted messages, the error pops up saying 'End-to-end encryption requires resolving certificate issues'. I already checked all the licenses but couldn't find any issues. Can you suggest some ways to resolve it? Thank you!

I'm trying to send encrypted email to a recipient who I have a certificate for, but Thunderbird states:

End-to-end encryption requires resolving certificate issues for ....

That's rather unhelpful - what issues exactly? I've imported the CA certs into the system and they are shown in TB. openssl verify on the cert returns OK. I'm at a loss as to what might be the issue.

Hi There Mozilla Peeps,

I have Norton security on my computer and I recently signed up for an advanced email scanning service, but when I try to connect it it says it doesn't work with Thunderbird. Is there a fix for this?

Thank you!

SMachine

Hello, I have had very good luck with junk being identified and moved to the junk folder, but now, while everything is still being identified as junk, it no longer moves to the junk folder. I have not changed settings and ocasionally some junk messages do go to the folder but then it stops and reverts to junk being identified but remaining in my inbox. Is there something I can try to get it working like it used to?

I keep getting someone or something trying to access my Email and having to confirm exceptions all the time. The slight change to the Email address always appears to be the same. Can you please stop this hapening. Thank You Les Nowak

Have two accounts in Thunderbird, for one configured PGP-Encryption, for another wanted to setup S/MIME with a certificate, however, I'm missing end-to-end encryption menu in this account setup (only the first one has it). Do I miss some check-box somewhere?