Closed Bug 510756 Opened 15 years ago Closed 15 years ago

Certificate needs confirmation at each connections

Categories

(Thunderbird :: Security, defect)

Product:
Thunderbird
Component:
Security
Platform:
x86
Windows XP
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED INVALID

People

(Reporter: supportdoc, Unassigned)

Details

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.1.2) Gecko/20090729 Firefox/3.5.2
Build Identifier: version 2.0.0.22 (20090605)

When Thunderbird is used to connect in SSL Mode there is a message that the server Certificate is perhaps not the right ... this comes at each new session. You must made that the handling of this is better. And there are also Windows who shows when a server connection was not possible ... there is no need to confirm thois with "ok" ... change the handling of multiple accounts in a version like Outlook ... 
connect to xxx. 
ok,  
connect to ccc 
not ok ...

and please change the account handling in a tabelle (like excel with auto complete lignes ... myser  becomes myserver) and give the possibility to sort the accounts.  



Reproducible: Always

Steps to Reproduce:
1.see details
2.
3.
Actual Results:  
see ndetails

Expected Results:  
less time loose
The idea behind using certificate is to make sure that things are right. If your mail server is miss configured (not using the right cert) it's normal that TB asks for confirmation before each connection. This prevents people from setting servers that are not the one you think you are connecting to.

Can you raise a new issue for the account setting ?

Closing this as invalid as it makes sens to prompt each time the SSL cert mismatches the server - it's the purpose of it.
Status: UNCONFIRMED → RESOLVED
Closed: 15 years ago
Component: Account Manager → Security
QA Contact: account-manager → thunderbird
Resolution: --- → INVALID
Summary: not needed questions → Certificate needs confirmation at each connections
Version: unspecified → 2.0
Hi,

zthankyou for your message.

the certificate is not "false" ... please create a email account for test22@123sos.com  with SSL   mail server    mail.123sos.com  
user name    test22@123sos.com   pass   test22    ... and you will see that he ask on every new session to confirm the same certificate. 

John
Status: RESOLVED → UNCONFIRMED
Resolution: INVALID → ---
(In reply to comment #2)
> Hi,
> 
> zthankyou for your message.
> 
> the certificate is not "false" ... please create a email account for
> test22@123sos.com  with SSL   mail server    mail.123sos.com  
> user name    test22@123sos.com   pass   test22    ... and you will see that he

I will , imap or pop3 ?
Confirming it's invalid. You are telling Thunderbird to talk to mail.123sos.com, and the server certificate is issued for svr103.edns1.com. This will prompt a message each time as there is no way for thunderbird to know that the server is miss configured.
Status: UNCONFIRMED → RESOLVED
Closed: 15 years ago → 15 years ago
Resolution: --- → INVALID
Hi Ludovic,

pop3    and then check SSL for the outgoing mail. I have not tried if there is also the same problem in IMAP  (but the account works for both).



John
(In reply to comment #5)
> Hi Ludovic,
> 
> pop3    and then check SSL for the outgoing mail. I have not tried if there is
> also the same problem in IMAP  (but the account works for both).

So When I tried pop I ended up in what I described in comment #4 which is the expected behavior. Your mail server certificate is not correct and that could be because of a security breach - there is no way for TB to know this, hence the error message being displayed each time.
You need to log in before you can comment on or make changes to this bug.