My domain is hosted on endor.tchmachines.com and I use endor.* as the server address to access my email over pop, obviously using SSL for security. Everything was cool. A couple of days ago my email client (thunderbird) started giving me a popup that the SSL certificate for endor cannot be verified because the "issuer" is unknown and querying if it should accept the certificate. So, two questions:
1) Did the SSL certificate change for endor? The certificate thunderbird sees has an issue date of 2/8/08. I am a little concerned because I am traveling internationally and using unknown networks.
2) How can any TCH customer validate SSL certificates for the various servers? I realize that this would normally be done at a protocol level between an user's client software (web browser, email software, etc) and the TCH server. Are the public keys posted somewhere for eyeball verification if automatic verification fails? Alternately, can you help set things up so that automatic verification of a certificate works using the appropriate protocols?
A screen shot of thunderbird's pop up is attached.
Thanks!