Ubuntu
mozilla-thunderbird package

  1. Bug #239360
  2. Comment #76

Comment 76 for bug 239360

Revision history for this message
In , Kai Engert (kaie) wrote :

(In reply to comment #75)
> Just to make sure:
> your detailed example is about "plaintext-phase-then-switch-to-ssl";
> but "cleartext-protocol-completely-wrapped-in-ssl" (as in bug 398534) (will)
> behave the same way ?

Yes, it will work, too. Mozilla's PSM layer will remember any such bad cert, regardless of the specific application protocol variation that triggered the connection. This includes any other variations like IRC/SSL or LDAP/SSL.