Ideas

Showing 403 of 8851

Add logout endpoint to DRAPI's oauth system

The .well-known/openid-configuration in DRAPI does not show a logout endpoint. A client web application can use the /oauth/authorization and /oauth/token endpoints to authenticate and refresh the authorization token. A logout is currently only pos...

about 1 year ago in Domino / Security 0 Needs Review

3 VOTE

Nonce checking for Domino Web Application

iNotes has the nonce checking feature for security purpose. This feature is also needed when using web application on Domino Server side. Currently, a web user can post the data to Domino Web Server by using crafted HTML files created from the cl...

over 3 years ago in Domino / Security 0 Under Consideration

6 VOTE

Synchronizing of the User ID in mail files ($shimmerid) with the Internet password/ID vault

Synchronizing of the User ID in mail files ($shimmerid) with the Internet password/ID vaultID file can't be uploaded to mail file when SAML is enabled

almost 7 years ago in Domino / Security 0 Assessment

6 VOTE

Fallback to password authentication when SAML has been activated as

Fallback to password authentication when SAML has been activated as needed. Server should accept SAML and password authentication, depending on the policy

almost 7 years ago in Domino / Security 1 Under Consideration

6 VOTE

Make support for CRAM-MD5 authentication method for SMTP communication

Currently Domino supports only AUTH LOGIN as an authentication method for SMTP communication. It would be great id safer mathod like CRAM-MD5 would be also supported.

almost 7 years ago in Domino / Security 2 Under Consideration

4 VOTE

Allow bigger attachments for Outlook

Currently the effective attachment size for emails sent from Outlook via HTMO is under 20MB for sending (known limitation https://help.hcltechsw.com/traveler/11.0.0/htmo/3.0/use_HTMO_mail_issues.html) and almost 100MB for receiving attachments (th...

over 4 years ago in Traveler for Microsoft Outlook-HTMO 0 Under Consideration

6 VOTE

Allow delegates to view details on calendar entries

If a user adds another calendar in Outlook, he can see the blocked time slots, but all have the text "Busy" rather than the text related to the calendar entry. The owner has set permission "Details about my calendar entries" in "Access & Deleg...

almost 7 years ago in Traveler for Microsoft Outlook-HTMO 0 Under Consideration

6 VOTE

Internet password lockout whitelist

The internet passowrd lockout feature needs to be improved, like more logging, idea: DOMINO-I-389. It would be an improvment if there would be an option to add a whitelist for IP ranges. So if a user is locked out he could still login within an tr...

almost 7 years ago in Domino / Security 3 Under Consideration

6 VOTE

users locked out due to wrong password or wrong password strikes have their own Statistics in Domino, so later they can be monitored.

Another idea on Domino.ideas.aha.io is to log per protocol strikes and locks. If we can create new statistics this would help to monitor security with DDM or external solution Security Security.POP3.Strikes.Total = 30 Security.POP3.Locks.Total = 2...

almost 7 years ago in Domino / Security 0 No Plans to Implement

3 VOTE

SAML implementation, can be done safer?

1.) HCL Domino server 12.0.1 (and older) are missing SAML Artifact binding implementation/settings. It has just SAML POST binding :-( Hmm it also works SOAP and inside SAML POST binding, but SAML ARTIFACT binding didn't work for me at all. Is SAML...

over 3 years ago in Domino / Security 0 Needs Review

Please enter your email address

FILTER BY CATEGORY