Author Topic: 'SSL certificate has been changed' notification driving me crazy...  (Read 21826 times)

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12742
Re: 'SSL certificate has been changed' notification driving me crazy...
« Reply #45 on: March 17, 2017, 07:47:39 pm »
And just to clarify:

Google rotates their certs so often these days *not* because they get compromised somehow. Not at all.

The reasons are more obscure and have to do with something called "perfect forward security", they want to make sure that

is someone's able to intercept your "encrypted" traffic (at some point in time) and then was able to decrypt it (a very difficult task right now, pretty much impossible) -- then they won't be able to leverage this *hypothetically* already decrypted data at a different point in time in the future to make decryption of new data easier.
Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

mssm

  • Newbie
  • *
  • Posts: 21
Re: 'SSL certificate has been changed' notification driving me crazy...
« Reply #46 on: March 23, 2017, 01:56:12 pm »
The cert rotation of Google is annoying me too. I also know the CertPatrol for Firefox, just stopped using it on Palemoon today...But in these days I was annoyed by Googles rotation as well. Looking at the lease time of the certs they even rotate certs with long time validity. My first idea was they have some load sharing to different worker servers and one day I have all certs accepted, but no, they are really rotating all the time.

I still think, watching the certs is a good thing as I'm sometimes on untrusted networks and most of my email servers don't rotate that often. If you have that option to ignore cert changes in Aquamail, please make it an account option and not a global one.

mikeone

  • Hero Member
  • *****
  • Posts: 2749
Re: 'SSL certificate has been changed' notification driving me crazy...
« Reply #47 on: March 23, 2017, 09:31:19 pm »
The cert rotation of Google is annoying me too.

... If you have that option to ignore cert changes in Aquamail, please make it an account option and not a global one.
+1

StR

  • Hero Member
  • *****
  • Posts: 1558
Re: 'SSL certificate has been changed' notification driving me crazy...
« Reply #48 on: March 24, 2017, 05:30:41 am »
The cert rotation of Google is annoying me too.

... If you have that option to ignore cert changes in Aquamail, please make it an account option and not a global one.
+1
I am happily adding (once again for this suggestion) my
+1   


Zilon

  • Newbie
  • *
  • Posts: 1
Re: 'SSL certificate has been changed' notification driving me crazy...
« Reply #49 on: April 20, 2017, 07:34:52 pm »
Re: wording:

Maybe "SSL certificate change detection"?
German translation:

SSL-Zertifikatsänderungen erkennen

Hello,

in the current version this German translation appears at the former position of "Check network connection" instead of "SSL Validation." The latter is still the translation of "SSL Validation",i.e., "SSL Prüfung".

Regards,
Zilon

mikeone

  • Hero Member
  • *****
  • Posts: 2749
Re: 'SSL certificate has been changed' notification driving me crazy...
« Reply #50 on: April 20, 2017, 08:46:29 pm »
@Zilon
Thank you!

EN
DE

Check for connection
Netzwerkverbindung prüfen

SSL certificate change detection
SSL-Zertifikatsänderungen erkennen

Kostya Vasilyev

  • Hero Member
  • *****
  • Posts: 12742
Re: 'SSL certificate has been changed' notification driving me crazy...
« Reply #51 on: April 21, 2017, 09:50:41 pm »
Thank you @mikeone, like this?

   <string name="prefs_network_ssl_checking">SSL-Zertifikatsänderungen erkennen</string>
   <string name="prefs_network_ssl_checking_summary">Benachrichtigung bei Änderung des SSL Zertifikates</string>
   <string name="prefs_network_present_check">Netzwerkverbindung prüfen</string>
   <string name="prefs_network_present_check_summary">Überprüfung der Netzwerkverbindung (Ausschalten bei fehlerhaften Firmwares)</string>

Creating debug logs for diagnostics: https://www.aqua-mail.com/troubleshooting/

The official FAQ: https://www.aqua-mail.com/faq/

Лог-файлы для диагностики: https://www.aqua-mail.com/ru/troubleshooting/

Вопросы и ответы: https://www.aqua-mail.com/ru/faq/

mikeone

  • Hero Member
  • *****
  • Posts: 2749
Re: 'SSL certificate has been changed' notification driving me crazy...
« Reply #52 on: April 21, 2017, 11:25:49 pm »
Thank you @mikeone, like this?

   <string name="prefs_network_ssl_checking">SSL-Zertifikatsänderungen erkennen</string>
   <string name="prefs_network_ssl_checking_summary">Benachrichtigung bei Änderung des SSL Zertifikates</string>
   <string name="prefs_network_present_check">Netzwerkverbindung prüfen</string>
   <string name="prefs_network_present_check_summary">Überprüfung der Netzwerkverbindung (Ausschalten bei fehlerhaften Firmwares)</string>
Yes that looks goodh