Re: ebay and SeaMonkey Browser Support

2018-06-11 Thread Henrik37 via support-seamonkey

Big Jim wrote:
As of June 19th, ebay states that they will no longer support the 
SeaMonkey browser because it is outdated and unsafe.  A paste of the 
message I received is below...


eBay

Oh No!

We noticed that you’re on an outdated web browser that may compromise 
your security as you shop online.


As of June 19, 2018 you will no longer be able to check out on eBay with 
your current browser.

Update to the latest version now so you can continue
to check out safely and securely.

Why must we continually put up with this!


I am using v.2.49.3 and have received the same message from e-Bay.  Is 
the e-Bay technical staff as uninformed as the JP Morgan/Chase Bank staff?


What can be done?
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


ebay and SeaMonkey Browser Support

2018-06-11 Thread Big Jim
As of June 19th, ebay states that they will no longer support the 
SeaMonkey browser because it is outdated and unsafe.  A paste of the 
message I received is below...


eBay

Oh No!

We noticed that you’re on an outdated web browser that may compromise 
your security as you shop online.


As of June 19, 2018 you will no longer be able to check out on eBay with 
your current browser.

Update to the latest version now so you can continue
to check out safely and securely.

Why must we continually put up with this!
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: why won't SM 2.49.3 remember where local folders are?

2018-06-11 Thread mozilla-lists . mbourne

sean wrote:

WaltS48 wrote:

On 6/10/18 3:07 PM, sean wrote:
Well... this has been long running. I can't recollect when it started 
but Seamonkey doesn't like it when I direct it to find Local Folders 
on a separate sata drive from the main C: drive I have many GB of 
mail history and really don't want it on my smallish C: drive in my 
latest re-installation of my desktop...


any ideas? am I correct this used to work?

sean


Don't know what you mean.

Need exact steps to reproduce.



my machine has a C: drive for programs, and an F: and G: drive for 
backup storage. In the past I have always directed the local folders to 
one or the other of the storage drives where all archives are kept.


for while now, whenever I reboot the machine, the local folders has lost 
contact with the path to the storage drive that is selected in Account 
Settings: /media/sean/7DCF1DCD6715DC30/local folders


Which operating system are you attempting to do this from? Mention of 
C:, F: and G: drives looks like Windows, but /media/sean/... looks like 
a Linux path. Your user-agent header also indicates that you're posting 
from Linux, although that may not be the system you're having problems with.


If Linux, it may be worth checking that the disk is mounted before 
starting SeaMonkey.


If you're attempting to share a single SeaMonkey profile between both 
Windows and Linux, that won't work - particularly in this case where 
there are paths which need to be specified differently on the two systems.


--
Mark.

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Disabling SSL/TLS protocols to safeguard payment data

2018-06-11 Thread Lee
On 6/11/18, Mason83  wrote:
> On 08/06/2018 21:02, Andy K wrote:
>
>> June 30, 2018 is the deadline for disabling SSL/early TLS and
>> implementing a more secure encryption protocol – TLS 1.1 or higher
>> (TLS v1.2 is strongly encouraged) in order to meet the PCI Data
>> Security Standard (PCI DSS) for safeguarding payment data.
>>
>> For Firefox and Seamonkey
>>
>> In about:config, set security.tls.version.min to 2 to prevent
>> protocols lower than TLS 1.1 from being used.
>>
>> Reference: http://kb.mozillazine.org/Security.tls.version.*
>
> FWIW, one of the largest banks in France seems to be stuck
> using TLS 1.0
>
> Trying to connect to https://particuliers.secure.lcl.fr/
> leads to this error message:
>
> """
> Secure Connection Failed
>
> An error occurred during a connection to particuliers.secure.lcl.fr.
>
> Peer using unsupported version of security protocol.
>
> Error code:  title="SSL_ERROR_UNSUPPORTED_VERSION">SSL_ERROR_UNSUPPORTED_VERSION
>
> The page you are trying to view cannot be shown because the authenticity of
> the received data could not be verified.
>
> Please contact the website owners to inform them of this problem.
> """
>
>
> https://www.ssllabs.com/ssltest/analyze.html?d=particuliers.secure.lcl.fr
>
> This server supports weak Diffie-Hellman (DH) key exchange parameters. Grade
> capped to B.   MORE INFO »
> The server supports only older protocols, but not the current best TLS 1.2.
> Grade capped to C.  MORE INFO »
> This server accepts RC4 cipher, but only with older protocols. Grade capped
> to B.  MORE INFO »
> This server does not support Forward Secrecy with the reference browsers.
> Grade capped to B.  MORE INFO »
> This server does not support Authenticated encryption (AEAD) cipher suites.
> Grade capped to B.  MORE INFO »
>
>
> When will these people take security seriously?

When they're forced to?

On a related note, how are the https intercepting anti-virus vendors
doing these days?
I haven't found anything later than Feb 2017:
https://www.zdnet.com/article/google-and-mozillas-message-to-av-and-security-firms-stop-trashing-https/
   'In an evaluation of antivirus products that feature TLS
interception, only Avast AV 11 and AV 10 score an A grade, while all
others score a C or F. They award a C to products containing a known
TLS vulnerability, such as BEAST, FREAK, and Logjam; or an F for
products with a severely broken connection due to weak ciphers or not
validating certificates."

If you're concerned about online banking, it might be worth to checking
  https://www.ssllabs.com/ssltest/viewMyClient.html

Lee
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


calendar selection on invite

2018-06-11 Thread Martin Freitag
Hello,

When one receives an email with an appointment (ICS), Lightning will
show a blue "banner" to add the appointment.
(In about:config it's necessary to have
calendar.google.enableEmailInvitations = true
to have direct write access to Google Calendar via invitations.)

Unfortunately, after pressing the button in the blue banner only a
selection of possible calendars that SM considers "worthy" is shown.
Although I have two calendars of the same account using Provider for
Google Calendar (once the main calendar and an additional one), only one
of them is "worthy" of this function. (and a local calendar, which is
not the topic here)

Meanwhile I had read that it is because a calendar needs to be linked to
the e-mail account.
Unfortunately, under right-click => properties the GUI offers an e-mail
selection only for the "worthy" calendar (there I cannot select an
e-mail for the target calendar, the option is simply missing).
Therefore I tried manual setting of
calendar.registry.{calender-id}.imip.identity.key
with the ID of the email account, but this brought no change.

Does anyone have any idea if something else is linked or activated
elsewhere?
kind regards

Martin
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


How to move a data folder from hard drive to SD card or to CD-R?

2018-06-11 Thread Mort Linder

Hi,

I have a data folder consisting of over 400 important e-mails, on my 
hard drive, Windows 7 Pro 64 bit. I want to back up this folder to 
either a CD-R or an SD card. However, whenever I try and click on either 
my Roxio CD software or an  inserted SD card, clicking on the folder 
makes the folder disappear from the screen..


Can anyone advise me as to how I can copy this folder to either CD-R or 
SD card?  am running the latest SeaMonkey version.


Thanks,

Mort Linder

---
This email has been checked for viruses by Avast antivirus software.
https://www.avast.com/antivirus

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Disabling SSL/TLS protocols to safeguard payment data

2018-06-11 Thread Daniel

Mason83 wrote on 11/06/18 22:39:

On 11/06/2018 14:32, Daniel wrote:

Mason83 wrote on 11/06/18 19:31:

On 08/06/2018 21:02, Andy K wrote:


June 30, 2018 is the deadline for disabling SSL/early TLS and
implementing a more secure encryption protocol – TLS 1.1 or higher
(TLS v1.2 is strongly encouraged) in order to meet the PCI Data
Security Standard (PCI DSS) for safeguarding payment data.

For Firefox and Seamonkey

In about:config, set security.tls.version.min to 2 to prevent
protocols lower than TLS 1.1 from being used.

Reference: http://kb.mozillazine.org/Security.tls.version.*


FWIW, one of the largest banks in France seems to be stuck
using TLS 1.0

Trying to connect to https://particuliers.secure.lcl.fr/
leads to this error message:

"""
Secure Connection Failed

An error occurred during a connection to particuliers.secure.lcl.fr.

Peer using unsupported version of security protocol.

Error code: SSL_ERROR_UNSUPPORTED_VERSION

The page you are trying to view cannot be shown because the authenticity of the 
received data could not be verified.

  Please contact the website owners to inform them of this problem.
"""


So that's what it means!! ;-)

Each day, when I download my e-mails, SM usually filters most of them
into the Trash folder (as I've set things up!). I then go through my
Trash folder and send copies of those e-mails to Spamcop.net and, often,
SM gives me a screen the same as yours, Mason. When I then re-send the
e-mail, things usually work fine!!

Last week, I asked my ISP what was going on, and he said it was an error
on their server, then I mentioned that it usually worked second time
around. He replied that, second time around, it was probably getting to
a different server!

Mason, did you try logging on again, i.e. clicking the "Resend" button
on that Error screen?? If so, does it work, second time around??


I'm afraid there is nothing to "Resend" as I was just trying to load
a web page, at URL https://particuliers.secure.lcl.fr/

I suppose I can "Reload" but I suspect it will always fail (until
TLS 1.0 is re-enabled).

Regards.

Ah!! Valid Point! I'm trying to send stuff to a website, you're just 
trying to get to a website!


--
Daniel

User agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 
SeaMonkey/2.49.1 Build identifier: 20171016030418


User agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 
SeaMonkey/2.49.1 Build identifier: 20171015235623

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Disabling SSL/TLS protocols to safeguard payment data

2018-06-11 Thread Mason83
On 11/06/2018 14:32, Daniel wrote:
> Mason83 wrote on 11/06/18 19:31:
>> On 08/06/2018 21:02, Andy K wrote:
>>
>>> June 30, 2018 is the deadline for disabling SSL/early TLS and
>>> implementing a more secure encryption protocol – TLS 1.1 or higher
>>> (TLS v1.2 is strongly encouraged) in order to meet the PCI Data
>>> Security Standard (PCI DSS) for safeguarding payment data.
>>>
>>> For Firefox and Seamonkey
>>>
>>> In about:config, set security.tls.version.min to 2 to prevent
>>> protocols lower than TLS 1.1 from being used.
>>>
>>> Reference: http://kb.mozillazine.org/Security.tls.version.*
>>
>> FWIW, one of the largest banks in France seems to be stuck
>> using TLS 1.0
>>
>> Trying to connect to https://particuliers.secure.lcl.fr/
>> leads to this error message:
>>
>> """
>> Secure Connection Failed
>>
>> An error occurred during a connection to particuliers.secure.lcl.fr.
>>
>> Peer using unsupported version of security protocol.
>>
>> Error code: > title="SSL_ERROR_UNSUPPORTED_VERSION">SSL_ERROR_UNSUPPORTED_VERSION
>>
>> The page you are trying to view cannot be shown because the authenticity of 
>> the received data could not be verified.
>>
>>  Please contact the website owners to inform them of this problem.
>> """
> 
> So that's what it means!! ;-)
> 
> Each day, when I download my e-mails, SM usually filters most of them 
> into the Trash folder (as I've set things up!). I then go through my 
> Trash folder and send copies of those e-mails to Spamcop.net and, often, 
> SM gives me a screen the same as yours, Mason. When I then re-send the 
> e-mail, things usually work fine!!
> 
> Last week, I asked my ISP what was going on, and he said it was an error 
> on their server, then I mentioned that it usually worked second time 
> around. He replied that, second time around, it was probably getting to 
> a different server!
> 
> Mason, did you try logging on again, i.e. clicking the "Resend" button 
> on that Error screen?? If so, does it work, second time around??

I'm afraid there is nothing to "Resend" as I was just trying to load
a web page, at URL https://particuliers.secure.lcl.fr/

I suppose I can "Reload" but I suspect it will always fail (until
TLS 1.0 is re-enabled).

Regards.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Disabling SSL/TLS protocols to safeguard payment data

2018-06-11 Thread Daniel

Mason83 wrote on 11/06/18 19:31:

On 08/06/2018 21:02, Andy K wrote:


June 30, 2018 is the deadline for disabling SSL/early TLS and
implementing a more secure encryption protocol – TLS 1.1 or higher
(TLS v1.2 is strongly encouraged) in order to meet the PCI Data
Security Standard (PCI DSS) for safeguarding payment data.

For Firefox and Seamonkey

In about:config, set security.tls.version.min to 2 to prevent
protocols lower than TLS 1.1 from being used.

Reference: http://kb.mozillazine.org/Security.tls.version.*


FWIW, one of the largest banks in France seems to be stuck
using TLS 1.0

Trying to connect to https://particuliers.secure.lcl.fr/
leads to this error message:

"""
Secure Connection Failed

An error occurred during a connection to particuliers.secure.lcl.fr.

Peer using unsupported version of security protocol.

Error code: SSL_ERROR_UNSUPPORTED_VERSION

The page you are trying to view cannot be shown because the authenticity of the 
received data could not be verified.

 Please contact the website owners to inform them of this problem.
"""


So that's what it means!! ;-)

Each day, when I download my e-mails, SM usually filters most of them 
into the Trash folder (as I've set things up!). I then go through my 
Trash folder and send copies of those e-mails to Spamcop.net and, often, 
SM gives me a screen the same as yours, Mason. When I then re-send the 
e-mail, things usually work fine!!


Last week, I asked my ISP what was going on, and he said it was an error 
on their server, then I mentioned that it usually worked second time 
around. He replied that, second time around, it was probably getting to 
a different server!


Mason, did you try logging on again, i.e. clicking the "Resend" button 
on that Error screen?? If so, does it work, second time around??


P.S. Until yesterday, I did have TLS 1.0 enabled, along with 1.1 and 
1.2, but de-selected it yesterday, and the spamcop.net site still worked 
and/or failed today!!


--
Daniel

User agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:52.0) Gecko/20100101 
SeaMonkey/2.49.1 Build identifier: 20171016030418


User agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 
SeaMonkey/2.49.1 Build identifier: 20171015235623

___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey


Re: Disabling SSL/TLS protocols to safeguard payment data

2018-06-11 Thread Mason83
On 08/06/2018 21:02, Andy K wrote:

> June 30, 2018 is the deadline for disabling SSL/early TLS and
> implementing a more secure encryption protocol – TLS 1.1 or higher
> (TLS v1.2 is strongly encouraged) in order to meet the PCI Data
> Security Standard (PCI DSS) for safeguarding payment data.
> 
> For Firefox and Seamonkey
> 
> In about:config, set security.tls.version.min to 2 to prevent
> protocols lower than TLS 1.1 from being used.
> 
> Reference: http://kb.mozillazine.org/Security.tls.version.*

FWIW, one of the largest banks in France seems to be stuck
using TLS 1.0

Trying to connect to https://particuliers.secure.lcl.fr/
leads to this error message:

"""
Secure Connection Failed

An error occurred during a connection to particuliers.secure.lcl.fr.

Peer using unsupported version of security protocol.

Error code: SSL_ERROR_UNSUPPORTED_VERSION

The page you are trying to view cannot be shown because the authenticity of the 
received data could not be verified.

Please contact the website owners to inform them of this problem.
"""


https://www.ssllabs.com/ssltest/analyze.html?d=particuliers.secure.lcl.fr

This server supports weak Diffie-Hellman (DH) key exchange parameters. Grade 
capped to B.   MORE INFO »
The server supports only older protocols, but not the current best TLS 1.2. 
Grade capped to C.  MORE INFO »
This server accepts RC4 cipher, but only with older protocols. Grade capped to 
B.  MORE INFO »
This server does not support Forward Secrecy with the reference browsers. Grade 
capped to B.  MORE INFO »
This server does not support Authenticated encryption (AEAD) cipher suites. 
Grade capped to B.  MORE INFO »


When will these people take security seriously?

Regards.
___
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey