'SSL certificate has been changed' notification driving me crazy...

[Kostya Vasilyev]

And just to clarify:

Google rotates their certs so often these days *not* because they get compromised somehow. Not at all.

The reasons are more obscure and have to do with something called "perfect forward security", they want to make sure that

is someone's able to intercept your "encrypted" traffic (at some point in time) and then was able to decrypt it (a very difficult task right now, pretty much impossible) -- then they won't be able to leverage this *hypothetically* already decrypted data at a different point in time in the future to make decryption of new data easier.

[btrc]

The cert rotation of Google is annoying me too. I also know the CertPatrol for Firefox, just stopped using it on Palemoon today...But in these days I was annoyed by Googles rotation as well. Looking at the lease time of the certs they even rotate certs with long time validity. My first idea was they have some load sharing to different worker servers and one day I have all certs accepted, but no, they are really rotating all the time.

I still think, watching the certs is a good thing as I'm sometimes on untrusted networks and most of my email servers don't rotate that often. If you have that option to ignore cert changes in Aquamail, please make it an account option and not a global one.

[mikeone]

The cert rotation of Google is annoying me too.

... If you have that option to ignore cert changes in Aquamail, please make it an account option and not a global one.

+1

[StR]

The cert rotation of Google is annoying me too.

... If you have that option to ignore cert changes in Aquamail, please make it an account option and not a global one.

+1

I am happily adding (once again for this suggestion) my
+1   

[Zilon]

Re: wording:

Maybe "SSL certificate change detection"?

German translation:

SSL-Zertifikatsänderungen erkennen

Hello,

in the current version this German translation appears at the former position of "Check network connection" instead of "SSL Validation." The latter is still the translation of "SSL Validation",i.e., "SSL Prüfung".

Regards,
Zilon

[mikeone]

@Zilon
Thank you!

EN
DE

Check for connection
Netzwerkverbindung prüfen

SSL certificate change detection
SSL-Zertifikatsänderungen erkennen

[Kostya Vasilyev]

Thank you @mikeone, like this?

   <string name="prefs_network_ssl_checking">SSL-Zertifikatsänderungen erkennen</string>
   <string name="prefs_network_ssl_checking_summary">Benachrichtigung bei Änderung des SSL Zertifikates</string>
   <string name="prefs_network_present_check">Netzwerkverbindung prüfen</string>
   <string name="prefs_network_present_check_summary">Überprüfung der Netzwerkverbindung (Ausschalten bei fehlerhaften Firmwares)</string>

[mikeone]

Thank you @mikeone, like this?

   <string name="prefs_network_ssl_checking">SSL-Zertifikatsänderungen erkennen</string>
   <string name="prefs_network_ssl_checking_summary">Benachrichtigung bei Änderung des SSL Zertifikates</string>
   <string name="prefs_network_present_check">Netzwerkverbindung prüfen</string>
   <string name="prefs_network_present_check_summary">Überprüfung der Netzwerkverbindung (Ausschalten bei fehlerhaften Firmwares)</string>

Yes that looks goodh