Thunderbird Community Forum

When I attempt to print an email that has remote content and I have blocked remote content, Thunderbird's print function fails. When printing with plain text it just hangs as the automatic content downloading notice pop-up spins trying to download alternates between 0 and 1 bytes. Changing the view to simple html or original html does not resolve the problem. When viewing in original html you can see the yellow warning banner stating "To protect your privacy Thunderbird has blocked remote content in this message."

I have blocked remote content through View --> unchecking "Display Attachment Inline"

under

Tools -> Settings -> Privacy & security --> unchecking "Allow remote content in message"

The solution of just allowing the content will not work since that open the security hole trying to be closed. Formerly this worked, it seems like something in a recent update gets the routine stuck in a loop as it will not allow printing if there is remote content. Thunderbird hangs and needs to be manually terminated. This appears to have stopped working in the last couple of months.

exceptions. To do this, go to Tools > Options > Privacy and check the box for "Allow remote content in messages".

I've finished setting up the S/MIME encryption in Thunderbird, and imported all the certificates needed. When people with the certificates emailed me, I could receive and read all the emails. However, when I replied to the same people, I got the error message saying 'End-to-end encryption requires resolving cerficiate issues'. My colleagues imported the same certificates without any issues. Do you have any suggestions for me to solve the issue? Thank you very much!

I do not have a junk folder in my left pane and have not created one in account settings. I have it enabled but fearing missing something important, I just delete them when flagged.

I have never heard from anyone telling me that their e-mails are not getting through.

The one thing I do notice is that when I create new accounts on web sites, I often do not get the confirmation e-mails.

I am being plagued with about 50 daily pornographic junk emails. Most go into Spam but a few end up in Inbox. I would like to block each one so that it cannot get through again. A long and tedious task but I am prepared to do it. How do I go about blocking a junk email?

I am being plagued with about 50 daily pornographic junk emails. Most go into Spam but a few end up in Inbox. I would like to block each one so that it cannot get through again. A long and tedious task but I am prepared to do it. How do I go about blocking a junk email?

settings for smtp server for cox.net account using Thunderbird server name smtp.cox.net port 465 but I have also tried 587 connection security STARTTLS no authentication method user name [removed]

settings are the same for account using Outlook, which does allow me to send emails

I use both Thunderbird and Outlook for my cox.net email account. I can receive incoming emails using Thunderbird but cannot send emails, and I can both receive and send emails using Outlook. The server settings are identical for both Thunderbird and Outlook - imap with STARTTLS and port 993 and smtp with STARTTLS and port 587. When Thunderbird is unable to send an email, I get a balloon that indicates that the smtp server cannot recognize my email address, which is [email removed]@cox.net.

Tools>options>privacy & security>Passwords. Click 'show passwords' brings up the saved passwords in a separate box. Need ability to resize the box (and colums within the box). The columns are too small to see the entire contents of a column. Using TB 138.0

First, I annually donate to this site. Previously when I wanted sail@chartermi.net to prohibit emails I could select Block Sender. Then following your update now all I can do is Mark As Junk which doesn't work. How can I Block Sender?

Thomas Ehman sail@chartermi.net te@chartermi.net

Hi All, :-)

I *know* (from various on-line posts over the years) that the accepted wisdom is that Thunderbird does *not* cache the TLS Certificates of the MDA(s) that it connects too - however, I can come to no other conclusion but this based on the information and investigations I have been able to gather over the last several days.  :-(

Our MDA (Dovecot, with Postfix and back-ended by MariaDB) hosts a number of Email Domains, each with its own Let's Encrypt Certificate. Our Thunderbird clients correctly "obtain" (via SNI) the correct(?) TLS Certificate from the MDA for each given Email Domain - or at least, "obtains" the *old* (ie out of date / expired) Certs.

And here's the thing: I've just spent the last 2 days trying to work out why the "old" certs are still being "obtained".

I've:

• Gone over the Dovecot (and Postfix) configs - nothing, all correct
• Searched the Storage of the actual servers - only Certificates found are the *new* (ie renewed) ones
• Confirming that the Certificates located are correct by inspecting them (using Step-CLI) - yes, they are correct
• Cross-confirming (vi OpenSSH) that the correct (new) certificates are being server by Dovecot - yes, they are
• Checked that the "old" Certificates do not exist *anywhere* on the mail server, the local PCs (Rocky Linux with KDE), nor the database server (on the server or in the database itself)
• Cleaned the Thunderbird Certificate Stores of all but CA Certificates

And yet, Thunderbird bitches and complains that the MDA's Certificates are "out of date", and when I ask Thunderbird to show me the offending Cert it presents the correct (for the relevant Email Domain) but "old" (ie expired) Certificate.

So, could someone please help me out in working out WTF is going on?  :-)

And, FTR, I'm quite ready to "eat humble pie" if it turns out I've gone and Fire-trucked something - so feel free to tell me so if that's the case  :-)

Thanks in advance

Dulux-Oz

I am getting an annoying popup stating that Dan.Hromada@citizensforfreespeech.org is asking for my Google password....this email account is not associated at all with Google or Gmail. It's hosted on the organization's server. Please see the screenshot of the pop-up.

Thank you, Dan Hromada

To Support 2025-04-30

Thunderbird has now been supplied with openPGP for encryption, for users having that need for special purposes. Encryption is functioning perfectly between openPGP users. Many thanks. But there is really a need for using either normal mail or encrypted in connections to Support. Please show that this impressing facility is functioning inside your support_system ! Or parts of the system. Best Regards Boris Reimann DK boris@dsa-net.dk

I regularly send/receive encrypted email on Windows with Outlook but seeing as most of my work is done on my Ubuntu partition, I was interested in a Linux solution. I was able to connect to my exchange server using owl automagically and see my email, no problem. I had some experience getting smart-card readers working on Ubuntu so I already had some things in place using the OpenSC Security Device. TB was able to talk to my card reader, grab the certificates, and I was able to set my S/MIME digital signing and encryption certificates. It definitely works, I can decrypt messages that I had already received in the way I expect, it checks if I have a card inserted, asks for me PIN, and the message decrypts correctly as I would expect. The issue is that if I try to send a signed email to myself, I get the error, "Sending of the message failed. You specified that this message should be digitally signed, but the application either failed to find the signing certificate specified in your Mail & Newsgroup Account Settings, or the certificate has expired." A similar message is sent if I try to encrypt (but not sign) a message to myself but for the encryption certificate.

I don't understand this message, as TB can definitely see my card, ask my card for my private key, and use it to decrypt messages, so I believe my E2E settings are correct. Neither certificate is expired, both expire sometime in 2027. I even added my companies root certificate to my Certificate Authorities in TB, so I don't believe it's an issue with my certificate being deemed invalid, and the error message certainly doesn't suggest as much. I've also tried both of my card-readers in case something was only looking at the first one, but both can be signed into correctly but neither let me send signed/encrypted email. The only clues I can see are the console error in my terminal when the message fails to send...

console.error: mailnews.send: "Sending failed; , exitCode=2147500037, originalMsgURI="

Also when I open a remote debugging session, this is the error shown...

mailnews.send: NS_ERROR_FAILURE: Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) [nsIMsgComposeSecure.beginCryptoEncapsulation]

   _startCryptoEncapsulation resource:///modules/MimeMessage.jsm:510
   _writePart resource:///modules/MimeMessage.jsm:558

Does anyone know what I might be doing wrong and nudge me in the correct direction?

My e-mail appears to have been hacked, resulting in the loss of $3000. A second attempt to hack the account, by intercepting an e-mail sent to me and replacing the bank details, was interrupted by the bank, which froze my account until the situation was resolved. That would have caused the loss of almost $7000, had the fraud been successful. I don't want to change my e-mail address, but I would like to improve the security of my account. Can you please advise what I should do.

Thanks and regards,

Bruce Acheson

I am considering moving over and using thunderbird as a desktop email client principaly to archieve my emails per the advice in the book. The book advices from a privacy and sercuity perspective that a email clinet such as thunderbrid should only be used to archive emails and not to send them. I dont think this is a big risk and I am considering using thinderbird to send emails as well, not just from a browser.

Are you able to clarify and provide further insight on this ? What are the privacy and security risks of sending an email this way ? Please see extracts from book below.

I do not recommend using them for daily access to these services, or to send email messages, but only as an archiving solution to make sure you always have a copy of your data offline.

I use this only as an offline backup of all email in the event I cannot access my Proton Mail account online. I never send email from this application.

A decade ago, my main concern about email privacy would have been exposure of a true IP address. Most of us still used email clients which shared the local IP address within the email headers of every sent message. he risk today is minimal. If you send an email from within a web browser through a service such as Proton Mail, Tuta, Fastmail, Gmail, etc., the recipient should only see the IP address of the email server. Your true home IP address should not be exposed. If you send an email from an email client while using these services, you are also usually protected. The emails bounce through the service provider's servers before going out and only includes those addresses. However, sending email through a client configured for corporate email may expose your true IP address. As an example, sending an email from your employer's provided address through a traditional emailclient from home could expose these sensitive details.

Hi guys,

I'm communicating with some colleagues using S/MIME encrypted messages. I have already imported all the necessary licenses, and all licenses are valid until 2034. I can receive and read all the encrypted messages they sent me, but every time I try to reply or send them (the same people) encrypted messages, the error pops up saying 'End-to-end encryption requires resolving certificate issues'. I already checked all the licenses but couldn't find any issues. Can you suggest some ways to resolve it? Thank you!

I'm trying to send encrypted email to a recipient who I have a certificate for, but Thunderbird states:

End-to-end encryption requires resolving certificate issues for ....

That's rather unhelpful - what issues exactly? I've imported the CA certs into the system and they are shown in TB. openssl verify on the cert returns OK. I'm at a loss as to what might be the issue.

Hello

I've been setting up Thunderbird on MacOS. I was adding few Gmail accounts. Every account was using 2FA so I had to enter new verification code each time. When I was adding 3rd or 4th account and was entering Google verification code into the form it suggested one of the codes I used before. Codes had same first two numbers so I guess I know why this form suggested one of the old codes but where does Thunderbird store these codes? I've deleted search history and cache in Thunderbird and attempted adding another gmail account but this time when I was asked for 2FA code I started with older verification codes and this form remembered all of them. Is there a way to remove them? Where does Thunderbird store these codes?

Thanks for any suggestions