464931 - Prompt to ssl client auth continues to pop up

Status: RESOLVED DUPLICATE of bug 431819

(Thunderbird :: Security, defect)

Description

[Michael Baffoni]

I have a SSL cert for signing my email, and it is not generated by my company.  However, when I login to IMAP/SSL it (appropriately) asks me if I want to submit my SSL cert for authentication.

What I expect is that when I dismiss the dialog and use simple authentication, I will never see that dialog box again for the current session.

However, every now and then (some kind of timeout?), the SSL cert dialog box comes up again.  Once I hit cancel, the cached simple authentication kicks in and I can again check email.  This is not only annoying, but I use my mail client overnight to do mail filtering on my account; however when the dialog box pops up, all activity stops, including filtering.

1) I believe this is a bug; once I successfully use a simple authentication login, it should not revert to attempting a cert-based authentication for the same session.

2) I would like, but I suppose it should be a separate enhancement request (please confirm), to be able to exclude specific servers (in account manager?) from offering cert-based authentication so it never asks me in the first place, let alone on reconnections.  However, if that is the most elegant manner for handling this bug, this should be considered.

Comment 1

[Magnus Melin [:mkmelin]]

The cert for signing is unrelated...

Comment 3

[[:Aureliano Buendía]]

Cleanup *dupeme* whiteboard flag from bugs that are marked as Resolved Duplicate!