Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I just updated to Thunderbird 3.1 and now when I attempt to add in a new email account for one of my domains I get mail.server.example potentially vulnerable to CVE-2009-3555.

Now reading up on it here I have done the given settings that are in the config editor for TBird because of this error: I added my mail server to security.ssl.renego_unrestricted_hosts and set security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref to true and false. But then the account creator basically breaks.

So how can I either A: make TBird ignore this or B: Add an account another way. I have a few other email accounts hosted from this server and they are working fine.

I understand in the end the server needs to be updated but that is currently an unrealistic option.

share|improve this question describes this behavior in detail. The behavior is common Firefox and Seamonkey (and possibly other products built on the same codebase). discusses the issue with regard to Firefox but the solutions mentioned should be applicable to Thunderbird as well.

See also!/kaiengert/status/47606502332178432

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.