Security

Showing 243

Allow mails from specific IP Addresses to be sent to Groups

Deny mails from outside to be sent to specific groups - You can following this path: From the Admin client - Configuration tab - Messaging - Router/SMTP - SMTP inbound controls - Inbound Intended Recipient Control - Deny messages intended for the...

over 4 years ago in Domino / Security 0 Under Consideration

1 VOTE

Support PEM in addtion to KYR for Lotus Script/Java AddInternetCertificateToUser()

There are a couple of use-cases where importing certificates into a person document are important. Beside this Lotus Script method the only other method would be the C-API (SECNABAddCertificate() which only supports DER format by the way). Now tha...

about 1 month ago in Domino / Security 0 Needs Review

1 VOTE

Samesite attributes to be strict or lax for the sessionID this is usually found on the application that uses XPAGES.

After following the article below, only DomAuthSessId can only be setup to strict or lax. The samesite attributes of the sessionID have no value. https://help.hcltechsw.com/domino/12.0.0/admin/conf_samesite_cookie.html

3 months ago in Domino / Security 2 Already Exists

1 VOTE

Url scanning blocks ipadress

Add functionlity as with ip adress trying to login with multiple usernames. If an ipadress is trying different non existing url:s that ip will be blocked for x amount of time. Also that url:s can be ”blacklisted” so if an user is trying to access ...

4 months ago in Domino / Security 0 Under Consideration

1 VOTE

Check and monitor Domino time vs NTP servers

Correct Domino time becomes more and more important. Usually the OS is already using NTP servers. Domino only updates Domino time from system time when jumping to a future date, but only in small steps. Having this in mind the time could be still ...

5 months ago in Domino / Security 1 Under Consideration

1 VOTE

Web site rules document allows to apply wildcard (*) for HTTP response codes with exceptional codes

This feature is created as requested by customer. There are many HTTP response codes, so it will be much more efficient if the feature of " internet site document allows to apply wildcard (*) for HTTP response codes with exceptional codes" can be ...

5 months ago in Domino / Security 0 Needs Review

1 VOTE

To Disable Backward/Forward arrow from the iNotes browser window

Hello Team, This is regards with iNotes web Access. Currently we can see the Backward Arrow Active and end users are able to use Backward and forward arrow in the browser. Customer would like to Disable the Backward/Forward arrow from the Browser ...

6 months ago in Domino / Security 1 No Plans to Implement

1 VOTE

Disabling wink to be used as a potential attack vector

Seeing more and more attempts to use Wink as an attack vector (see example below). Looking into possibility to disable wink so that it wont cause any potential security risk. 03/17/2022 10:04:27 AM HTTP JVM: 1399490 [Thread-11] INFO org.apache.win...

6 months ago in Domino / Security 2 Already Exists

1 VOTE

Domino to have permissions policy header

There are customers who are experiencing permissions-policy vulnerability. This is the former "Feature Policy" with new specs. Can domino have the same to mitigate vulnerabilities related to it?

7 months ago in Domino / Security 3 Needs Clarification

1 VOTE

Rate limiting protections for Domino

An authentication endpoint without rate limiting protections can be susceptible to innumerable amounts of credential stuffing and eventual guessing of set of credentials used for authentication. API endpoints can also be used to attack further inf...

7 months ago in Domino / Security 1 Needs Clarification

Please enter your email address

FILTER BY CATEGORY