Re: Invalid SSL Certificate Message

[BKAM]

Hello,
let me dig this thread out of it's tomb -I got a problem related to this topic:
since yesterday, I got the message that the SSL certificate has changed, and the former and the actual certificates are shown to check and agree. But the MD5 and SHA1 fingerprints do not match the ones my e-mail provider sent to me, and it does not match the one I found in Thunderbird's certificate manager.

So I wonder what to do...?

[Martin, Aqua Mail Support]

Hi,

Please contact your mail provider and ask that they confirm which certificate is authentic. If it turns out the new certificate is not, it likely means you accessed some sketchy public Wi-Fi and no harm was done, as long as you didn't accept the cert change. You should nonetheless read up on MitM attacks and take the necessary steps to protect your devices.

Martin