From a7066554f0d95e15a225518eade1ad987aad9ba7 Mon Sep 17 00:00:00 2001 From: Samuel FORESTIER Date: Sat, 11 Jan 2025 19:21:01 +0000 Subject: [PATCH] Adds a page related to Proton Mail Bridge integration --- 3.2-Proton-Mail-Bridge-Users.md | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 3.2-Proton-Mail-Bridge-Users.md diff --git a/3.2-Proton-Mail-Bridge-Users.md b/3.2-Proton-Mail-Bridge-Users.md new file mode 100644 index 0000000..6eaab64 --- /dev/null +++ b/3.2-Proton-Mail-Bridge-Users.md @@ -0,0 +1,11 @@ +## About Proton Mail Bridge integration + +`thunderbird user.js` enforces certificate strict PKP (Public Key Pinning) verification. This breaks software performing MITM (such as a local antivirus), or even Proton Mail Bridge. + +When connecting Thunderbird **for the first time** to Proton Mail Bridge, this hardening measure (`1223`) must be relaxed : + +- `security.cert_pinning.enforcement_level` to `1` + +Once incoming/outgoing servers enrollment is done, you may switch back to template value : + +- `security.cert_pinning.enforcement_level` to `2`