అన్ని ఉత్పత్తులు Community Forum

Hi there.

I'm in Alberta, where we have recently changed timezones. Note that the CLOCK has not changed yet, as we are still before the date in November when we would "fall back". We were UTC-6 summer and UTC-7 winter. Windows called this "Mountain Time (USA and Canada), but now the "Mountain Time (Alberta)" timezone is in Windows after the 2026-09 Preview Update (KB5124010) (26300.9550).

When connecting to Shaw.ca's IMAP servers, the certificates that were valid prior to the Windows update are now reported as invalid. This has been confirmed across two separate PCs with different email accounts. The data for the certificate LOOKS valid (see screenshot) and is the same before and after the timezone change.

The failure occurred on the latest ESR release of Thunderbird, as well as 156.0 and 157.0 non-ESR.

Thanks :)

Norton flags that the Thunderbird certificate has expired. Looked at instructions on the help, but most are to start from scratch. This is a new problem as of today, so fairly sure it isn't on my end, but cannot verify.

We are not getting emails because we keep getting an error message which reads The certificate for imap.shaw.ca does not come from a trusted source.

I am trying to send an S/MIME encrypted email from Thunderbird to:

jobcenter-chemnitz.netzwerkpartner@jobcenter-ge.de

The recipient certificate is provided by the official certificate directory of the German Federal Employment Agency (Bundesagentur für Arbeit).

I downloaded the recipient certificate and successfully imported it into Thunderbird under:

Settings → Privacy & Security → Certificates → Manage Certificates → People

The certificate is displayed correctly there. The email address contained in the certificate is:

jobcenter-chemnitz.netzwerkpartner@jobcenter-ge.de

The certificate is valid from July 29, 2026 to July 29, 2028 and includes E-mail Protection and Key Encipherment.

The required CA certificates are also installed:

BA-Class-1-Root-CA-4:PN BA-VPS-CA-11:PN

However, when I compose an encrypted email to this exact address, Thunderbird reports:

“You have selected to encrypt this message, but the application failed to find an encryption certificate for jobcenter-chemnitz.netzwerkpartner@jobcenter-ge.de.”

Under S/MIME → Recipient Certificates, Thunderbird also shows the certificate as “Not found”.

I have already tried:

deleting and re-importing the recipient certificate completely restarting Thunderbird after importing it manually typing the recipient address in lowercase without using autocomplete checking the complete CA certificate chain temporarily disabling OCSP

None of these changed the result.

My own personal S/MIME certificate works correctly. As a test, I can compose an encrypted email to my own email address without any certificate error. Therefore, the basic S/MIME configuration and my own certificate appear to be working.

When I reproduce the problem with the Thunderbird Error Console open, I get:

NS_ERROR_ILLEGAL_VALUE (0x80070057)

related to:

nsIMsgComposeSecure.beginCryptoEncapsulation

This seems similar to Mozilla Bug 2021265, where a manually imported recipient certificate is visible in Certificate Manager but is not found when composing an encrypted message.

Is this a known issue in Thunderbird 140 ESR, and is there a workaround for using this manually imported recipient certificate?

Hi Amazing Friends

I am proud Mozillian from India. I served as Chair, Mozilla Reps Council twice in the past, good to connect you once again.

I need your expert help on following.

One of my friend is facing an issue with the latest Firefox 157 browser. Firefox is displaying the following warning while accessing the Kotak Bank website

“Your connection may not be private. An app or service may see your encrypted traffic from this site.”

The Firefox explanation indicates that the issue is related to TLS Logging / SSLKEYLOGFILE being enabled.

She has Norton 360 anti-virus and suspecting that if the antivirus/security may be involved in inspecting encrypted HTTPS traffic.

We would particularly like to understand:

Why Firefox 157 is detecting TLS key logging on system, which application or service is setting/using SSLKEYLOGFILE, whether Norton 360 is enabling it, and whether there is a safe Firefox or Windows configuration change that can eliminate the warning without weakening HTTPS security.

We would appreciate the opportunity if some of you can help at your earliest convenience.

Thank you very much for your help.

Regards,

Shahid

Thunderbird email says the certificate for my Shaw email server does not come from trusted source. The certificate looks fine. I cannot get Thunderbird to "Add exception". The certificate issue seems to be an intermittent problem since yesterday lunchtime. It started working again yesterday afternoon, but stopped working at lunchtime today. How do I stop this error?

Hi,

I remember i tried 7y. ago a email certificate signed with SHA3, it was not OK.

I tried again now, and it is still blocked.

1) the certs can be added in the account settings > S/MIME for signature and ciphering, with a warning. 2) then creating a new email, the recipients certificates are not detected (while configured in another account on the same thunderbird client), and forcing ciphering is not allowed with the error message

"Sending of the message failed. This message cannot be digitally signed because the signing certificate selected in your End-to-End Encryption settings is not valid for this operation. (The certificate was signed using a signature algorithm that is disabled because it is not secure.)"

"Unable to save your message as a draft. This message cannot be digitally signed because the signing certificate selected in your End-to-End Encryption settings is not valid for this operation. (The certificate was signed using a signature algorithm that is disabled because it is not secure.)"

Even, when using only ciphering, and no signature in S/MIME.

The parameter mail.smime.accept_insecure_sha1_message_signatures do not change the bahavior.

-> Can Thunderbird allow SHA3 usage, please ?

Even if thunderbird does not want to generalize it, mozilla may create a parameter by default false

mail.smime.accept_sha3_message_signatures

Best Regards, Gwenolé

I am using an email server that currently is using certificates that have expired. That problem is being worked on. In the meantime, whenever I access the server to open a folder, I get a pop-up notification telling me that the certificate has expired. I go ahead and confirm the security exception and check the box to permanently store the exception. Trouble is this ISN'T being persisted, when I open a different folder I have to go through this process again in order to access my emails in that folder.

Me thinks you got a bug in your software Kemosabe!

I can't get my e-mails today. I got a message saying The certificate for pop.centurylink.net is not valid for that server. Someone could be trying to impersonate the server and you should not continue.

Why did I get this message? I never saw this before. I like to get my e-mails. I tried reseting my router and turned off my computer and it still says the same thing. What do I do and how will I see your reply if I can't get the e-mails? Please fix this. My e-mail is toosmiley@centurylink.net

Thank you

I can't find the certificate in order to delete/distrust it. Its name is my mail server. Organization: Lumen Technologies, Monroe, Louisiana

Subject Name Country US State/ProvinceLouisiana LocalityMonroe Organization Common Name Lumen Technologies, Inc. mail.centurylink.net Issuer Name Country Organization Common Name US DigiCert Inc DigiCert Global G2 TLS RSA SHA256 2020 CA1 Validity Not BeforeWed, 27 Aug 2025 00:00:00 GMT Not AfterSun, 27 Sep 2026 23:59:59 GMT

Firefox new today stopped from loading some of my own websites that are http. Some http sites still work. Sends me to my hosting site https://www.forexample.org/login_up.php Cleared all history and caches. No change. Turned off http to https. No change. Again, just started today with no other changes on my part.

I have been using the site codeskulptor.org for years. Creating images and saving them easily. Lately I have been getting a little shield with a red cross thru it up in the front of the url bar for the page images i wish to save but am not able to as easily as before. I would like Mozilla to approve the pages i spin off as images in new tabs from codeskulptor.org.

Thank you, Ben Winsor

OpenKeychain is a free and open-source Android app that implements the OpenPGP standard. It lets you manage cryptographic keys and use them to encrypt, decrypt, sign, and verify text, files, and messages so that only the intended recipients can read them and so that authenticity can be checked.

It is no longer actively developed for new features (maintenance mode with security fixes only), though a maintained hard fork called OpenKeyRing exists that continues development and adds features such as S/MIME support.

Hi, I’ve been using Thunderbird Desktop for years with S/MIME encryption. Since S/MIME is not currently supported in Thunderbird Mobile, I can’t use it on my mobile device.

Is S/MIME support planned for a future release?

Thanks.