Thunderbird Support Forum

Microsoft sent email last night announcing the end of "Normal Password" for Hotmail, and warning that Hotmail would REQUIRE "modern authrentication" beginning 9/16. I have personal desktop subscription to Microsoft 365. I have set Microsoft account to 2FA and checked in Tbird that cookies are enabled.

I have spent hours and days trying & failing. With server imap-mail.outlook.com using OAUTH2, Thunderbird won't sync and shows message saying that server doesn't support the authentication protocol please enter another one. With 2FA still turned on and using Normal Password setting and entering an App Password from Microsoft, the Imap connection is fine about 85% of the time, needing re-entry of the App password about once a day or so (usually requires several tries until App Password gets accepted.)

The 0AUTH2 fails with Norton Smart Firewall turned Off or Turned On-makes no difference.

(Sending email with Outlook and 0AUTH2 DOES work okay.)

I've also tried Imap connection with a different server: Outlook.office365.com, using 0AUTH2.

In this case, Tbird shows me a Timeout error and never makes an Imap connection to the server.  

I've been limping along with the app password, and "normal password" authentication, but now Microsoft announces they will stop accepting connections that are not 0Auth2 ("modern authentication") from Tbird or any other software after 9/16. The clock is ticking. I've tried every remedy I've seen online from Tbird or from Microsoft. Nothing has yet allowed a QAUTH connection for Tbird to a hotmail IMAP server. Please help! !

Dear Sir or Madam,

I have just migrated Thunderbird to my new CUBI desktop running Windows 11. I get security errors when I launch Thunderbird. My email provider The Messaging Company advised me to change server settings, which are now shown in the Troubleshooting Information page as account1 (pop3) pop.themessagingco.com.au:995 SSL/TLS Normal password smtp.themessagingco.com.au:587 STARTTLS Normal password true.

On launching Thunderbird I get the message Secure connection failed live.mozillamessaging.com uses an invalid security certificate. The certificate is not trusted because the issuer certificate has expired. Error code: <a id="errorCode" title="SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE">SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE</a>

   This could be a problem with the server's configuration, or it could be someone trying to impersonate the server.
   If you have connected to this server successfully in the past, the error may be temporary, and you can try again later.

Or you can add an exception…

AND when I attempt to send an email I get warning that the SMTP server does not have a valid certificate. If I ask, in either case, to "Get Certificate" the response is that the site attempts to identify itself with invalid information.

I have "tried again later" over two weeks, and nothing has changed.

The Messaging Company is a fairly large email provider: it seems strange that its security is incomplete. However, I am not happy to just set an exception and over-ride these errors without doing all I can to check that there is not something screwy going on. I really value using Thunderbird, and The Messaging Company's advice that I should just use webmail is not at all satisfactory: I keep everything on my computer or backed up to a portable drive here.

Please: is there anything I can do or should know to fix this problem?

Best Regards, Margaret Mackisack

Hello,

When the primary password window opens and I click Cancel, can that window close AND can it prevent Thunderbird from opening?

Example: what if I bring my pc to a repair shop and they open thunderbird and click Cancel on the primary password window. They can See my previously viewed email. I do not want them to see those. Clicking Cancel AND closing Thunderbird would prevent them from seeing emails.

Could this be a future enhancement?

Thanks

Jim