(In reply to Brian Smith (:briansmith, was :bsmith; NEEDINFO? for response) from bug 1025332 comment 9) > In fact, David, I suggest that you follow this up by removing the "Add > Exception" button from the Server tab of the certificate manager, making the > SSLStatus argument mandatory, and then removing the XHR from the dialog box > completely, along with removing the UI elements that allow the user to > change the hostname, etc. This will make the UI in Firefox (and probably > Thunderbird) much more sensible. In Firefox, the "Add Exception" button > isn't necessary because if the user wants to add an exception, he/she can > just put the URL into the address bar and deal with the error-page-based UI.

> This will make the UI in Firefox (and probably Thunderbird) much more sensible. How is this going to help Thunderbird? You can't just paste a URL into a browser window there, but personal/institutional mail servers with self-signed certs are common.

I think Thunderbird automatically opens up the "add exception" dialog whenever it encounters a certificate error.