531569 - Thunderbird's SSL certificate warning dialog talks about web sites instead of mail servers

Status: RESOLVED DUPLICATE of bug 378004

(Thunderbird :: Security, defect)

Description

[Daniel Holbert [:dholbert]]

Attachment: screenshot

Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.5) Gecko/20091124 Shredder/3.0.1pre

See attached screenshot of the broken-SSL-cert warning in a Thunderbird 3.0.1 nightly. (snapped today during Mozilla's zimbra upgrade)

The dialog's language refers to web sites, rather than to mail servers.

In particular:
> You are abbout to override how Shredder identifies this _site_.
> Legitimate banks, stores, and other public _sites_ will not ask you to do this.
> This _site_ attempts to identify itself with invalid information.

Note in particular that the hint about "legitimate banks, stores and other public sites" is confusing at best, in the context of a mail app trying to connect to a mail server.