Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

ADD A NEW IDEA

Security

Showing 273

Block unencrypted mail to specific domain

Need to block unencrypted email being sent to one specific domain.
almost 3 years ago in Domino / Security 1 Needs Clarification

Web site rules document allows to apply wildcard (*) for HTTP response codes with exceptional codes

This feature is created as requested by customer. There are many HTTP response codes, so it will be much more efficient if the feature of " internet site document allows to apply wildcard (*) for HTTP response codes with exceptional codes" can be ...
over 1 year ago in Domino / Security 0 Needs Review

Single sign-on for web access with Notes authentication

When creating a hybrid application that uses a Notes client and Web access, single sign-on is required. Currently, there is no way to pass the token with @urlopen or NotesHTTPRequest. I need a way to get the LtpaToken cookie using the Notes cl...
almost 3 years ago in Domino / Security 3 Needs Clarification

Specify TLS/SSL version used by certain port or protocol.

Some application only uses certain version of TLS/SSL. Due to vulnerabilities we don't want this TLS/SSL version to be available to all ports/protocol. We want an ability to specify which versions of TLS/SSL a port or protocol can and cannot use.
almost 3 years ago in Domino / Security 2 No Plans to Implement

To Disable Backward/Forward arrow from the iNotes browser window

Hello Team, This is regards with iNotes web Access. Currently we can see the Backward Arrow Active and end users are able to use Backward and forward arrow in the browser. Customer would like to Disable the Backward/Forward arrow from the Browser ...
over 1 year ago in Domino / Security 1 No Plans to Implement

Accept external emails for a restricted group document when the external user is added on the security tab of the group document properties.

Sending a message to a group will be rejected with the reason "Not authorized to send mail to this user or group", this happens if the setting in security tab of the group document properties is a specific internet address from the external non-do...
over 4 years ago in Domino / Security 1 No Plans to Implement

Disabling wink to be used as a potential attack vector

Seeing more and more attempts to use Wink as an attack vector (see example below). Looking into possibility to disable wink so that it wont cause any potential security risk. 03/17/2022 10:04:27 AM HTTP JVM: 1399490 [Thread-11] INFO org.apache.win...
over 1 year ago in Domino / Security 2 Already Exists

Router does not obey the Reader field if the Reader Access and above is restricted for Person Document

1) A person document is restricted via Person Document Properties>>Access>>Unchecking "All Reader and above" field. Anonymous is not selected. 2) An email is sent from Notes client/iNotes to the restricted user's internet address by us...
about 3 years ago in Domino / Security 3 Assessment

Domino to have permissions policy header

There are customers who are experiencing permissions-policy vulnerability. This is the former "Feature Policy" with new specs. Can domino have the same to mitigate vulnerabilities related to it?
over 1 year ago in Domino / Security 3 Needs Clarification

Rate limiting protections for Domino

An authentication endpoint without rate limiting protections can be susceptible to innumerable amounts of credential stuffing and eventual guessing of set of credentials used for authentication. API endpoints can also be used to attack further inf...
over 1 year ago in Domino / Security 1 Needs Clarification