Join the Mozilla’s Test Days event from Dec 2–8 to test the new Firefox address bar on Firefox Beta 134 and get a chance to win Mozilla swag vouchers! 🎁

Avatar for Username

Sykje yn Support

Mij stipescams. Wy sille jo nea freegje in telefoannûmer te beljen, der in sms nei ta te stjoeren of persoanlike gegevens te dielen. Meld fertochte aktiviteit mei de opsje ‘Misbrûk melde’.

Mear ynfo

Dizze konversaasje is argivearre. Stel in nije fraach as jo help nedich hawwe.

New Windows Security pop up with Thunderbird 91

  • 2 antwurd
  • 1 hat dit probleem
  • 1 werjefte
  • Lêste antwurd fan christ1

opoplawski1
opoplawski1
more options

With the update to TB 91, we are seeing the attached pop up when composing a signed or encrypted email. I find this a little surprising because we are storing our email certificates directly in TB rather than in the windows certificate store. Could anyone shed more light on the changes to the way TB is dealing with signing certificates? Thanks.

With the update to TB 91, we are seeing the attached pop up when composing a signed or encrypted email. I find this a little surprising because we are storing our email certificates directly in TB rather than in the windows certificate store. Could anyone shed more light on the changes to the way TB is dealing with signing certificates? Thanks.
Keppele skermôfbyldingen

Alle antwurden (2)

opoplawski1
opoplawski1 Fraacheigener
more options

Also, it seems like TB will try to make use of a smartcard if one is present even when configured to use a local TB cert for encryption.

christ1
christ1
  • Top 25 Contributor
more options

Try to set the pref security.enterprise_roots.enabled to false. For more information see https://bugzilla.mozilla.org/show_bug.cgi?id=1726442

Also, it seems like TB will try to make use of a smartcard if one is present even when configured to use a local TB cert for encryption.

If the private key is on the smartcard only, there's no way around that. The private key is needed to sign messages, and to read encrypted messages. If the private key is also present in the Thunderbird certificate store, then what is the point of using a smartcard at all?