Все продукты: форум сообщества

Hi Amazing Friends

I am proud Mozillian from India. I served as Chair, Mozilla Reps Council twice in the past, good to connect you once again.

I need your expert help on following.

One of my friend is facing an issue with the latest Firefox 157 browser. Firefox is displaying the following warning while accessing the Kotak Bank website

“Your connection may not be private. An app or service may see your encrypted traffic from this site.”

The Firefox explanation indicates that the issue is related to TLS Logging / SSLKEYLOGFILE being enabled.

She has Norton 360 anti-virus and suspecting that if the antivirus/security may be involved in inspecting encrypted HTTPS traffic.

We would particularly like to understand:

Why Firefox 157 is detecting TLS key logging on system, which application or service is setting/using SSLKEYLOGFILE, whether Norton 360 is enabling it, and whether there is a safe Firefox or Windows configuration change that can eliminate the warning without weakening HTTPS security.

We would appreciate the opportunity if some of you can help at your earliest convenience.

Thank you very much for your help.

Regards,

Shahid

Thunderbird email says the certificate for my Shaw email server does not come from trusted source. The certificate looks fine. I cannot get Thunderbird to "Add exception". The certificate issue seems to be an intermittent problem since yesterday lunchtime. It started working again yesterday afternoon, but stopped working at lunchtime today. How do I stop this error?

Hi,

I remember i tried 7y. ago a email certificate signed with SHA3, it was not OK.

I tried again now, and it is still blocked.

1) the certs can be added in the account settings > S/MIME for signature and ciphering, with a warning. 2) then creating a new email, the recipients certificates are not detected (while configured in another account on the same thunderbird client), and forcing ciphering is not allowed with the error message

"Sending of the message failed. This message cannot be digitally signed because the signing certificate selected in your End-to-End Encryption settings is not valid for this operation. (The certificate was signed using a signature algorithm that is disabled because it is not secure.)"

"Unable to save your message as a draft. This message cannot be digitally signed because the signing certificate selected in your End-to-End Encryption settings is not valid for this operation. (The certificate was signed using a signature algorithm that is disabled because it is not secure.)"

Even, when using only ciphering, and no signature in S/MIME.

The parameter mail.smime.accept_insecure_sha1_message_signatures do not change the bahavior.

-> Can Thunderbird allow SHA3 usage, please ?

Even if thunderbird does not want to generalize it, mozilla may create a parameter by default false

mail.smime.accept_sha3_message_signatures

Best Regards, Gwenolé

I am using an email server that currently is using certificates that have expired. That problem is being worked on. In the meantime, whenever I access the server to open a folder, I get a pop-up notification telling me that the certificate has expired. I go ahead and confirm the security exception and check the box to permanently store the exception. Trouble is this ISN'T being persisted, when I open a different folder I have to go through this process again in order to access my emails in that folder.

Me thinks you got a bug in your software Kemosabe!

I can't get my e-mails today. I got a message saying The certificate for pop.centurylink.net is not valid for that server. Someone could be trying to impersonate the server and you should not continue.

Why did I get this message? I never saw this before. I like to get my e-mails. I tried reseting my router and turned off my computer and it still says the same thing. What do I do and how will I see your reply if I can't get the e-mails? Please fix this. My e-mail is toosmiley@centurylink.net

Thank you

I can't find the certificate in order to delete/distrust it. Its name is my mail server. Organization: Lumen Technologies, Monroe, Louisiana

Subject Name Country US State/ProvinceLouisiana LocalityMonroe Organization Common Name Lumen Technologies, Inc. mail.centurylink.net Issuer Name Country Organization Common Name US DigiCert Inc DigiCert Global G2 TLS RSA SHA256 2020 CA1 Validity Not BeforeWed, 27 Aug 2025 00:00:00 GMT Not AfterSun, 27 Sep 2026 23:59:59 GMT

Firefox new today stopped from loading some of my own websites that are http. Some http sites still work. Sends me to my hosting site https://www.forexample.org/login_up.php Cleared all history and caches. No change. Turned off http to https. No change. Again, just started today with no other changes on my part.

I have been using the site codeskulptor.org for years. Creating images and saving them easily. Lately I have been getting a little shield with a red cross thru it up in the front of the url bar for the page images i wish to save but am not able to as easily as before. I would like Mozilla to approve the pages i spin off as images in new tabs from codeskulptor.org.

Thank you, Ben Winsor

OpenKeychain is a free and open-source Android app that implements the OpenPGP standard. It lets you manage cryptographic keys and use them to encrypt, decrypt, sign, and verify text, files, and messages so that only the intended recipients can read them and so that authenticity can be checked.

It is no longer actively developed for new features (maintenance mode with security fixes only), though a maintained hard fork called OpenKeyRing exists that continues development and adds features such as S/MIME support.

Hi, I’ve been using Thunderbird Desktop for years with S/MIME encryption. Since S/MIME is not currently supported in Thunderbird Mobile, I can’t use it on my mobile device.

Is S/MIME support planned for a future release?

Thanks.

Hallo, my setup is some server (keycloak) with mTLS needing keypairs just for allowance for the machines in the enterprise. But as far as i know, i need to setup personal keypairs for the users, not just the machines. How do i push a ".p12" keypair into the browsers trust stores? Is there a way via GPOs? As far as i have read the https://firefox-admin-docs.mozilla.org/reference/policies/, there is no support for ".p12" files?

The only way i got told from AI is via a script. If i could just stuff that ".p12" file into some place in the GPO, i would be perfectly happy... (?)

In Plain English how to use and secure encryption on all outgoing emails please and whether or not to use this great advantage. Many thanks to all those who contribute to this work, PB

Hi,

I have exported a from my Debian linux GnuPG private ed25519 keyring a private armor format private.asc file for upload into my mobile OpenKeyChain (showing healthy) and imported on my mobile thunderbird version 21.1 the private key from OpenKeyChain.

When receiving an encrypted email, my thunderbird PC version decrypts while my Mobile thunderbird show an error in decryption operation: I can read encrypted email on my PC, not on my mobile.

When I send a encrypted message From my mobile TB exact identical key to another of my email addresses, the email received into my mobile TB is automatically showing decrypted. This email is also decrypted on my PC thunderbird.

The TB account on both devices are the same. The private key is the same. The email provider is the same. The email addresses are identities of the the same key.

I have had this problem before. I have resolved this in the past and can no longer figure out how.

Any intuition? cheers.

Firefox for Android has a Custom Tabsl browser for apps to use fdor in app browsing. When clicking on the top the site security symbol while in an app using the cusotm tabls it will open up custom tabs with an address bar instyead of just displaying the security certificate details. This is a bug and should not happen. It should NOT hamper the in app experience. If somebody clicks ont he certificate details it should show up as a popup like Fireox focus does and all other custom tab browsers. Please fix.

Please see attached images that show my settings for DNS over HTTPS set to cloudflare (default) i have to add exceptions to this for multiple sites that do not open. these websites either show me SSL errors or they completely stop opening entirely. what could be the issue here? the websites open completely fine once i turn off this feature or use another browser.

Suddenly this week all links from/for various sources/websites have stopped working in Firefox: "Error Code: SSL_ERROR_RX_RECORD_TOO_LONG".

Links from common trusted sources that I access regularly no longer work. All display the same error message seen above. So it seems like a change by Firefox and not the websites. New York Times Economist USAA Comcast

Recent Mozilla/Firefox Update installed & restarted

MacBook Air macOS 15.77 (24G720)