Security

Showing 312

Server-Rules for E-Mail-Header

Our provider uses anti-spam software that writes the SPAM probability in the email header. Example: X-Spam-Level: ***** There should be a central way to evaluate the email header in Domino, for example to add a keyword to the subject line of affec...

11 months ago in Domino / Security 2 Needs Review

2 VOTE

Add new audit function to trace activities executed with Domino Administrator Privilege

One of our customer in Japan wish HCL could add the following new audit function to trace activities executed with Domino Administrator Privilege: 1. The activity was executed from which PC (IP address, hostname) and when it was executed. 2. The d...

about 1 month ago in Domino / Security 0 Needs Review

32 VOTE

Periodic CScan on rest scan of databases

Scanning mail data in the mail flow is a great addition to the Domino 12. But this feature would be mainly useful for customers having no external SMTP gateway mail scan in place already. Scanning only on the company edge leaves the door open for ...

almost 2 years ago in Domino / Security 1 Assessment

5 VOTE

Add Quantum-Resilient Cryptography

This idea requests to add Quantum-Resilient Cryptography (QC) for: Encryption of Notes ID files, Encryption of NRPC-based traffic, Database Encryption, Internet Protocols (http, smtp, imap, ldap, etc.), Encryption of DAOS attachments, Everything e...

4 months ago in Domino / Security 2 Needs Review

110 VOTE

Enforce TLS

If your organization is required to use TLS for email sent to recipients in specific domains, you can configure outbound email to ensure that TLS (Transport Layer Security) is used for those domains. Enforced TLS forces a secure connection between...

almost 7 years ago in Domino / Security 10 Assessment

89 VOTE

Allow HTTP Basic Authentication with Umlauts using UTF-8

Currently Domino HTTP Basic Authentication Passwords need to be encoded in ISO-8859-1.Many other systems allow to use UTF.8. The standard is unclear but there is a specification where you can announce which encoding the server expects. See https:/...

over 6 years ago in Domino / Security 2 Assessment

22 VOTE

Authenticated Received Chain (ARC) signing support

After the integration of the DKIM signature key, SPF evaluation, it would be interesting to complete the support for the anti-spam scheme through the integration of ARC signatures (RFC 8617), which for example solve the problem of message forwardi...

over 1 year ago in Domino / Security 0 Needs Review

87 VOTE

SAML - provide support for Single Logout

The SAML Service Provider implemented in Domino 10 is much better than in the previous versions and integrates without a problem with all standard-complying IdPs. However, one important feature is missing and that is Single (a.k.a. Global) Logout....

over 6 years ago in Domino / Security 7 Planning to Implement

8 VOTE

Document that describes Domino HTTP security settings

There's a document created years ago: https://www.caicorp.com/2017/11/22/adding-security-http-response-headers-to-ibm-lotus-domino-server-to-get-an-a-rating/ HCL should have a similar document with more security settings.

8 months ago in Domino / Security 1 Needs Review

77 VOTE

Domino Inbound SMTP STARTTLS -- Log TLS Version and used Cipher

Most other applications add the TLS Version and used cipher to the received header.Example: from xyz.acme.local (10.100.1.234) by abc.acme.local (10.100.109.233) with Acme SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P...

almost 7 years ago in Domino / Security 3 Assessment

Please enter your email address

FILTER BY CATEGORY