Security Exceptions
Let be dust off the blog here for a sec…. ok, GO!
I’ve been “guniea-pigged” into a new e-mail system to help work out the kinks before it gets deployed organization-wide. It’s a pretty standard system which I access via POP and SMTP directly. I noticed right away that the SSL cert’s weren’t quite right. In particular, the one that is being used for POP had expired and was issued on a different domain. Like the great app that it is, Thunderbird pitched a fit making me say “Yes, I know this might suck, but I’ll do it anyway” to using an expired and possibly-bogus cert. Since I knew it was OK, I clicked yes and all was well. The problem is that, in Thunderbird 2.0.0.x, there is no “Remember my choice” kind of checkbox that I know I’ve become accustomed to seeing. I went hunting and came across a plugin (ugh) that introduces this functionality:
Remember Mismatched Domains – Thunderbird Addons
I installed the plugin without issue and all is well. I don’t recall having issues with SMTP authenticating properly, but I imagine there was a checkbox there (yay inconsistencies).
This only satisfied me enough to check my e-mail and close the app down. I looked into it a little further to discover that this is a core issue in the Gecko engine. The first record I found (didn’t look too hard) was during the Thunderbird 0.7 days (seems like ancient history). I followed the trail some more to find that the issue is resolved and *should* be in all the next releases build on Gecko 1.9. I’m assuming this is already taken care of in the Firefox 3.0.x builds. So, I will use my plugin until Mozilla Messaging gets Thunderbird 3 up to release status (in beta last I checked).
References