Thunderbird 52.2.1 mail exchange with Yahoo! accounts

[PeterNZM]

1) My family have a variety of Yahoo e-mail accounts for which we send and receive e-mails regularly and cleanly.
Have done so for years even.

Today 18 July 2017 all of them call for a new password to be entered, but the passwords are already correct, and we can go on the net log into those yahoo accounts with the passwords from TB with absolutely no problem.
We've even "authorised" Yahoo to accept "Allow apps that use less secure sign in" yet still TB calls for a new password, we enter and save it, only to find a few minutes later we get the same request!!
We are retired and newbies on these matters.

Can anyone detail precisely what exactly what we need to do??

2) PS One TB bug that gets us is when say a junk or spam e-mail comes in and we try and delete it TB goes AWOL, the screen display whitens and the message comes up TB not responding.
This can go on for quite some time, we've found if we close TB down and then restart it then it will quite easily delete the offending e-mail!!
Any suggestions on this?

Thanks for your help.

[Jinxed]

I'm having the exact same issue, and it just started today as well. It was working fine up until about 5-6pm PST, then suddenly started to prompt for new passwords. I've tested my logins via a linux terminal, just to be sure. Seems it's an issue inside TB, and how its interpreting the login sequence. Maybe yahoo changed something? (that's usually the case)

openssl s_client -crlf -connect imap.mail.yahoo.com:993
tag login username@yahoo.com <password>

All my tests came back positive, I can login without any issues via terminal. Just TB having the issue.
Thankfully I'm not alone. I was just going to post about this when I saw your thread.

[Jinxed]

If anyone up there in dev is listening in, here's the new OpenSSL replies yahoo is giving out upon connect.

Code: Select all

CONNECTED(00000003)
depth=3 C = US, O = "VeriSign, Inc.", OU = Class 3 Public Primary Certification Authority
verify return:1
depth=2 C = US, O = "VeriSign, Inc.", OU = VeriSign Trust Network, OU = "(c) 2006 VeriSign, Inc. - For authorized use only", CN = VeriSign Class 3 Public Primary Certification Authority - G5
verify return:1
depth=1 C = US, O = Symantec Corporation, OU = Symantec Trust Network, CN = Symantec Class 3 Secure Server CA - G4
verify return:1
depth=0 C = US, ST = California, L = Sunnyvale, O = Yahoo Inc., OU = Information Technology, CN = *.imap.mail.yahoo.com
verify return:1
---
Certificate chain
 0 s:/C=US/ST=California/L=Sunnyvale/O=Yahoo Inc./OU=Information Technology/CN=*.imap.mail.yahoo.com
   i:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
 1 s:/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
   i:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
 2 s:/C=US/O=VeriSign, Inc./OU=VeriSign Trust Network/OU=(c) 2006 VeriSign, Inc. - For authorized use only/CN=VeriSign Class 3 Public Primary Certification Authority - G5
   i:/C=US/O=VeriSign, Inc./OU=Class 3 Public Primary Certification Authority
---
Server certificate
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
subject=/C=US/ST=California/L=Sunnyvale/O=Yahoo Inc./OU=Information Technology/CN=*.imap.mail.yahoo.com
issuer=/C=US/O=Symantec Corporation/OU=Symantec Trust Network/CN=Symantec Class 3 Secure Server CA - G4
---
No client certificate CA names sent
Peer signing digest: SHA512
Server Temp Key: ECDH, P-256, 256 bits
---
SSL handshake has read 4758 bytes and written 431 bytes
---
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
    Protocol  : TLSv1.2
    Cipher    : ECDHE-RSA-AES256-GCM-SHA384
    Session-ID: 596DCE396EA8E1946DA6C3AE44408DB232D9E28924F94C8B3F7AFFD989E4C64D
    Session-ID-ctx: 
    Master-Key: 84BB0B0842DE7A07AA1A578DC3D02EFBB11E04D1FA502D00D0E385EB8D36C66E3CFC8A42CF57812BD5F144841AD63FD1
    Key-Arg   : None
    PSK identity: None
    PSK identity hint: None
    SRP username: None
    Start Time: 1500368441
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
---
* OK [CAPABILITY IMAP4rev1 ID MOVE NAMESPACE X-ID-ACLID UIDPLUS LITERAL+ XYMHIGHESTMODSEQ SASL-IR AUTH=PLAIN AUTH=LOGIN AUTH=XYMLOGIN AUTH=XYMPKI AUTH=XYMCOOKIEB64 AUTH=XOAUTH2 AUTH=OAUTHBEARER] IMAP4rev1 Hello

[PeterNZM]

I'm having the exact same issue, and it just started today as well. It was working fine up until about 5-6pm PST, then suddenly started to prompt for new passwords. I've tested my logins via a linux terminal, just to be sure. Seems it's an issue inside TB, and how its interpreting the login sequence. Maybe yahoo changed something? (that's usually the case)

openssl s_client -crlf -connect imap.mail.yahoo.com:993
tag login username@yahoo.com <password>

All my tests came back positive, I can login without any issues via terminal. Just TB having the issue.
Thankfully I'm not alone. I was just going to post about this when I saw your thread.

Thanks it is so frustrating!!
Peter

[tanstaafl]

I also started having problems with the password for my Yahoo IMAP account this evening. Yahoo has a long history of temporary problems with Thunderbird, especially with POP accounts, that they usually fix within a couple of days.

[douwe2]

Hello,

same problem here: since today (July 18) my Thunderbird is unable to connect.

Issue is on Windows 10 32-bit, Thunderbird v. 45.8.0 and (after update) Thunderbird v. 52.2.1; but also on my Ubuntu 17.04 computer, Thunderbird v. 52.2.1 (64-bit). My other email accounts (e.g. work, and gmail) do work well as they did on Thunderbird, so it seems a Yahoo issue.

See also this forum discussion on the Yahoo Help Center: https://forums.yahoo.net/t5/Password-an ... m-p/298597

Cheers,

[fdisk2k]

I'm also reporting the same issue, it started on Monday 17 at night (EST).

I've switched inside yahoo less secure login since a long time with no problems.

[Kjohrf]

Same problem here. Started yesterday evening. This has happened many times before. Usually lasts a day or two. I tried the "set up application specific password" instruction from my ISP (they use yahoo as their e-mail server). Didn't help. Very frustrated.

[leishirsute]

Same problem. See my post at:
http://forums.mozillazine.org/viewtopic ... &t=3031857

[Kjohrf]

I tried live chatting with frontier (they use yahoo for their e-mail) support. No help whatsoever (you'll have to contact Mozilla). I tried changing my password. That didn't help.

[leishirsute]

Here's s my very convoluted workaround (until this gets fixed?) so I can access my Yahoo imap email and subfolders in the seamonkey client.
I created a google gmail account. In the gmail account settings under Accounts I set for gmail to access my yahoo email address. I added the gmail account to my seamonkey client via IMAP. Now I can see all my Yahoo mail and IMAP subfolders under the gmail account.
This is a bit cumbersome but doesn't lock me out of my Yahoo email and subfolders.
I had to wait about 5 minutes while gmail imported all of the Yahoo email into its folder structure.

The more I review the fact that android email client and gmail can access my Yahoo IMAP accounts, I'm inclined to think this is a Seamonkey/Thunderbird problem that has been exposed with the recent Yahoo IMAP server repair.

[onix]

+1 to the list of users that can access using iPhone, https, etc. but not on Thunderbird 52.2.1 (32-bit) on Win10Pro 64-bit

[tanstaafl]

https://forums.yahoo.net/t5/Password-an ... 597/page/6 mentions:
it does not work for me either, and I'm using gnu Claws Mail with IMAP... So not just a Thunderbird problem.

[PeterNZM]

I suspect the problem is that Yahoo is "forcing" you out of using e-mail readers like Thunderbird, perhaps to further their own revenue gathering from advertising.

When I went online and logged in I was swamped with on-screen advertising:
A large section on the RHS of the screen had ongoing dynamic advertorials.
When I had emptied the Spam Folder - then a huge advertorial started to play.

Looks like Yahoo wants to stuff your e-mail account with revenue gathering advertising.

I don't think the problem will be fixed anytime soon, unless there is a huge consumer backlash.

[d1grizz]

Why would pop servers work and not IMAP?