Security

Showing 312

block emails coming from the Internet that have a null sender address (i.e. <>) in the “MAIL FROM” field.

block emails coming from the Internet that have a null sender address (i.e. <>) in the “MAIL FROM” field. we should configure our anti-spam gateway to check if the “MAIL FROM” header is the same as the email’s “From:” address for all incomin...

over 6 years ago in Domino / Security 1 Under Consideration

10 VOTE

ID Vault can collect Notes ID from different Domino Domains

Currently, ID vault only support consolidation of Notes in single domain. All replicas of a vault must be located within a single Domino® domain and all vault users must have home servers in that domain. Note, though, that users under different o...

over 6 years ago in Domino / Administration / Security 0 Under Consideration

9 VOTE

DKIM domino support on OS400 (IBM i) & AIX operating System.

It's nice to have DKIM support since 12.0.1 on Windows and Linux. HCL documentation states that Only Linux and Windows are supported. https://help.hcltechsw.com/domino/12.0.0/admin/conf_dkimsigning.html Can you please also provide this for operati...

almost 3 years ago in Domino / Security 1 Needs Clarification

9 VOTE

Internet Lockout not per server, but per website or per domain.

When you have a clustered Domino backend for hosting websites or web-apps, and you have a loadbalancer in front of them......and internet lockout only occurs per server.....it's possible that you end up on another cluster-member and can continue t...

over 3 years ago in Domino / Security 2 Assessment

9 VOTE

Force logout web mail users (i.e. Verse & iNotes)

Customer wants to apply a force logout to users whose accounts are compromised. Changing their password or restarting http task does not automatically logout the user. Waiting for token expiration could be risky if set for a long duration. Current...

over 3 years ago in Domino / Security 1 Under Consideration

9 VOTE

HTTP Cookie limit

When there are more than 4k worth of cookie data passed to Domino, Domino does not capture the information in the CGI variable HTTP_cookie.

over 3 years ago in Domino / Security 0 Under Consideration

9 VOTE

Support for CSRF Tokens in domino

The security landscape is changing all the time, and one of the new things that customers and security experts are asking for is anti forgery tokens that is sent with forms up to prevent forgery data sent back from clients. It would be good if dom...

almost 4 years ago in Domino / Security 3 Already Exists

9 VOTE

Allow Editor and below access in ACL to modify Soft Deletion settings in Mail File Preferences

A Mail Settings was created to delete trash folder in certain number of hours and was set as "Initial Value". This settings was assigned to users under Policy Assignment of the Mail Policy. Users that has an "Editor" and below access in the ACL of...

over 4 years ago in Domino / Security 3 Under Consideration

9 VOTE

Require SSL/TLS certificate mandatory in Domino implemetation.

While setting up Domino, SSL/TLS implemetation must be mandatory atleast for HTTP.

over 4 years ago in Domino / Security 0 Assessment

9 VOTE

DFR - Domino needs to add a referencing to the orignal message ID when sending a DFR to the sender.

In the example below we can observe that the bounce message has its own message ID along with the references and in-reply-to which are the original message ID". Currently, message goes to Spam folder and not to the user's mailbox. The third party ...

about 5 years ago in Domino / Security 0 Under Consideration

Please enter your email address

FILTER BY CATEGORY