Closed Bug 1716320 Opened 4 years ago Closed 4 years ago

Thunderbird refuses to connect to gmail

Categories

(Thunderbird :: Security, defect)

defect

Tracking

(Not tracked)

RESOLVED INVALID

People

(Reporter: beacon, Unassigned)

References

()

Details

(Whiteboard: [support])

User Agent: Mozilla/5.0 (X11; Linux x86_64; rv:90.0) Gecko/20100101 Firefox/90.0

Steps to reproduce:

Start Thunderbird

Actual results:

Connected to most sites. Did not connect to gmail (imap) saying security was too low. live.thunderbird.net uses security technology that is outdated and vulnerable to attack. An attacker could easily reveal information which you thought to be safe. The website administrator will need to fix the server first before you can visit the site. Error code: NS_ERROR_NET_INADEQUATE_SECURITY

Expected results:

Connect to all ites

Thunderbird version 78.11.0 running on Debian Bullseye

Component: Untriaged → Security
Version: 7 Branch → 78

Sounds like you have network issues, and or getting MITM attacked by antivirus/firewall/something else.
I just checked the security of live.thunderbird.net in firefox: no problems, running TLS 1.3.

Whiteboard: [support]

That is very strange because the Thunderbird version prior to the current one does not exhibit that problem. The problematic one is running on my Debian Bullseye. I have two other Linux installations Fedora and Mint and neither has the problem as they are running the version prior to the one on Debian.
There is also at least one other Thunderbird user with the same problem. The problem is not with live.thunderbird.net, it is connecting with Google.

Just out of interest, are you using oAth to connect to the gmail server?

This sounds like more of a web page (oAuth authentication pages) than a mail one. Given we are talking about Linux and it's may personal builds with their own modified defaults. Perhaps try changing the preference network.http.spdy.enabled.http2 to False in the config editor and see how that works out.

I have tagged the two ongoing discussions in the support forum for this topic and linked to them in the bug URL.

But since you mention that you get some (false) complaint about the security of live.thunderbird.net it seems obvious there's something messing with your computer/network. Could easily be malware.

I had the same problem. Also people here: https://support.mozilla.org/en-US/questions/1340621

Fixed with the recommended solution in that link

So setting network.http.spdy.enabled.http2 to true.
That's the default. No idea how that would have changed.

Status: UNCONFIRMED → RESOLVED
Closed: 4 years ago
Resolution: --- → INVALID
You need to log in before you can comment on or make changes to this bug.