155089 - Need a better way to associate a certificate to a mail account for authentication

Status: NEW

(MailNews Core :: Security: S/MIME, enhancement, P5)

Description

[Remi Cohen-Scali]

The way Mozilla/PSM associate a certificate to a mail/news account when one is
required by a server for authentication is really obscur. What I could notice is
that the last certificate added is sent when "Select Automaticaly" is selected
in "Client Certificate Selection". 
The "Ask Every Time" is functionnaly acceptable, but is really boring because
that specific window appears so often ...
I think that a way to specificaly assign a certificate to each authentication
need would be a nice feature. A default certificate (even may be the last added
:-) may be selected by the user.

Comment 1

[Stephane Saux]

Yes, it could be improved. Among the improvements would be a "remember this
decision".
Note that servers can help by being very selecting about which cert a client can
present (in terms of which CA signs the cert.)

Comment 2

[Kai Lahmann (is there, where MNG is)]

status of this?

Comment 3

[Charles Rosendahl]

changing to new.  maybe, some day, we might get around to it.

Comment 4

[John G. Myers]

Mass reassign ssaux bugs to nobody

Comment 5

[Nelson Bolyard (seldom reads bugmail)]

Mass change "Future" target milestone to "--" on bugs that now are assigned to
nobody.  Those targets reflected the prioritization of past PSM management.
Many of these should be marked invalid or wontfix, I think.

Comment 6

[Andrei Boros]

Consider this : 
2 mail accounts, 2 SMTP servers, each accepting SSL connections with authentication based on SSL certificate. 
Both certificates installed in TB, but there is no way in the UI to associate a certificate to a server connection. 

Consequently, only one account works, the other fails authentication because the wrong certificate is used. Apparently TB uses the first one it finds in the list (?) but unsure. 

Please reconsider priorities on this one. 

Note : problem is not Linux specific.