All Products Community Forum

Доброго времени суток! Уважаемые друзья, хочу сообщить, что у нас мало времени! В ближайшие месяцы появится опасность взлома квантовыми компьютерами корневых сертификатов сервер-клиент, ключи обмена и другие ранее считавшиеся не возможными взломами обычными средствами и вычислительными мощностями. Пожалуйста, добавьте проверки на квантово-устойчивую гибридную криптографию при сканировании браузера и сервера.

Thank you. I’m not a technical person and so could you please share the specific and safe steps which will resolve both the error state shown, and the TLS logging issue without creating any other unintended consequences. I don’t want create any additional problems while trying to address these two issues. Thank you

Hi there.

I'm in Alberta, where we have recently changed timezones. Note that the CLOCK has not changed yet, as we are still before the date in November when we would "fall back". We were UTC-6 summer and UTC-7 winter. Windows called this "Mountain Time (USA and Canada), but now the "Mountain Time (Alberta)" timezone is in Windows after the 2026-09 Preview Update (KB5124010) (26300.9550).

When connecting to Shaw.ca's IMAP servers, the certificates that were valid prior to the Windows update are now reported as invalid. This has been confirmed across two separate PCs with different email accounts. The data for the certificate LOOKS valid (see screenshot) and is the same before and after the timezone change.

The failure occurred on the latest ESR release of Thunderbird, as well as 156.0 and 157.0 non-ESR.

Thanks :)

We are not getting emails because we keep getting an error message which reads The certificate for imap.shaw.ca does not come from a trusted source.

Hi Amazing Friends

I am proud Mozillian from India. I served as Chair, Mozilla Reps Council twice in the past, good to connect you once again.

I need your expert help on following.

One of my friend is facing an issue with the latest Firefox 157 browser. Firefox is displaying the following warning while accessing the Kotak Bank website

“Your connection may not be private. An app or service may see your encrypted traffic from this site.”

The Firefox explanation indicates that the issue is related to TLS Logging / SSLKEYLOGFILE being enabled.

She has Norton 360 anti-virus and suspecting that if the antivirus/security may be involved in inspecting encrypted HTTPS traffic.

We would particularly like to understand:

Why Firefox 157 is detecting TLS key logging on system, which application or service is setting/using SSLKEYLOGFILE, whether Norton 360 is enabling it, and whether there is a safe Firefox or Windows configuration change that can eliminate the warning without weakening HTTPS security.

We would appreciate the opportunity if some of you can help at your earliest convenience.

Thank you very much for your help.

Regards,

Shahid

I can't find the certificate in order to delete/distrust it. Its name is my mail server. Organization: Lumen Technologies, Monroe, Louisiana

Subject Name Country US State/ProvinceLouisiana LocalityMonroe Organization Common Name Lumen Technologies, Inc. mail.centurylink.net Issuer Name Country Organization Common Name US DigiCert Inc DigiCert Global G2 TLS RSA SHA256 2020 CA1 Validity Not BeforeWed, 27 Aug 2025 00:00:00 GMT Not AfterSun, 27 Sep 2026 23:59:59 GMT

Firefox new today stopped from loading some of my own websites that are http. Some http sites still work. Sends me to my hosting site https://www.forexample.org/login_up.php Cleared all history and caches. No change. Turned off http to https. No change. Again, just started today with no other changes on my part.

I have been using the site codeskulptor.org for years. Creating images and saving them easily. Lately I have been getting a little shield with a red cross thru it up in the front of the url bar for the page images i wish to save but am not able to as easily as before. I would like Mozilla to approve the pages i spin off as images in new tabs from codeskulptor.org.

Thank you, Ben Winsor

OpenKeychain is a free and open-source Android app that implements the OpenPGP standard. It lets you manage cryptographic keys and use them to encrypt, decrypt, sign, and verify text, files, and messages so that only the intended recipients can read them and so that authenticity can be checked.

It is no longer actively developed for new features (maintenance mode with security fixes only), though a maintained hard fork called OpenKeyRing exists that continues development and adds features such as S/MIME support.

Hi, I’ve been using Thunderbird Desktop for years with S/MIME encryption. Since S/MIME is not currently supported in Thunderbird Mobile, I can’t use it on my mobile device.

Is S/MIME support planned for a future release?

Thanks.

Hallo, my setup is some server (keycloak) with mTLS needing keypairs just for allowance for the machines in the enterprise. But as far as i know, i need to setup personal keypairs for the users, not just the machines. How do i push a ".p12" keypair into the browsers trust stores? Is there a way via GPOs? As far as i have read the https://firefox-admin-docs.mozilla.org/reference/policies/, there is no support for ".p12" files?

The only way i got told from AI is via a script. If i could just stuff that ".p12" file into some place in the GPO, i would be perfectly happy... (?)