We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was closed and archived. Please ask a new question if you need help.

Thunderbird Gmail OAuth2 failing with Thunderbird detected a potential security threat and did not continue to accounts.google.com

  • 2 replies
  • 0 have this problem
  • 1 view
  • Last reply by matt193

matt193
matt193
more options

TB version: 115.1.0 (64-bit) Windows 10 (corporate laptop)

Fresh laptop, fresh install of TB.

When trying to connect email@example.com (not really my email), TB correctly detects that my domain is hosted at Google, configures IMAP and SMTP for OAuth2, and pops up the window to authenticate.

Instead of an authentication prompt, I'm met with this error:

URL: https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=<CHOMP>aq8lmia8j<CHOMP>.apps.googleusercontent.com&redirect_uri=http%3A%2F%2Flocalhost&scope=https%3A%2F%2Fmail.google.com%2F+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcarddav+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcalendar&login_hint=user%40example.com

Text: Did Not Connect: Potential Security Issue

Thunderbird detected a potential security threat and did not continue to accounts.google.com because this website requires a secure connection.

TB version: 115.1.0 (64-bit) Windows 10 (corporate laptop) Fresh laptop, fresh install of TB. When trying to connect email@example.com (not really my email), TB correctly detects that my domain is hosted at Google, configures IMAP and SMTP for OAuth2, and pops up the window to authenticate. Instead of an authentication prompt, I'm met with this error: URL: https://accounts.google.com/o/oauth2/auth?response_type=code&client_id=<CHOMP>aq8lmia8j<CHOMP>.apps.googleusercontent.com&redirect_uri=http%3A%2F%2Flocalhost&scope=https%3A%2F%2Fmail.google.com%2F+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcarddav+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcalendar&login_hint=user%40example.com Text: Did Not Connect: Potential Security Issue Thunderbird detected a potential security threat and did not continue to accounts.google.com because this website requires a secure connection.

Chosen solution

This problem was solved after determining that my corporation has alternative root certs enabled on this device. The solution is:

  1. Go to "Settings"
  2. Search for "Config Editor"
  3. Click the "Config Editor" button
  4. Search for "security.enterprise_roots.enabled"
  5. Click the toggle/set the value to "true"
Read this answer in context 👍 1

All Replies (2)

matt193
matt193 Question owner
more options

Screenshot of the error attached.

matt193
matt193 Question owner
more options

Chosen Solution

This problem was solved after determining that my corporation has alternative root certs enabled on this device. The solution is:

  1. Go to "Settings"
  2. Search for "Config Editor"
  3. Click the "Config Editor" button
  4. Search for "security.enterprise_roots.enabled"
  5. Click the toggle/set the value to "true"