Security

Showing 52

Totally remove SentBy and OnBehalfOf when sending from a shared mailbox

The Dutch Government needs to have this option when sending outbound mail. When using shared mailboxes, the mail system automatically adds a “Sent by …” field that reveals the individual sender’s identity. As this constitutes personal data, it rai...

25 days ago in Domino / Security 0 Needs Review

17 VOTE

Server-Rules for E-Mail-Header

Our provider uses anti-spam software that writes the SPAM probability in the email header. Example: X-Spam-Level: ***** There should be a central way to evaluate the email header in Domino, for example to add a keyword to the subject line of affec...

over 1 year ago in Domino / Security 2 Needs Review

3 VOTE

Enhance OIDC to support dynamic custom claims

When using OIDC in Domino as a provider, need to be able to limit who can authenticate with each registered client application. Also, there needs to be an available ability to include the groups an authenticating user is in as part of the custom "...

3 months ago in Domino / Security 0 Needs Review

23 VOTE

Authenticated Received Chain (ARC) signing support

After the integration of the DKIM signature key, SPF evaluation, it would be interesting to complete the support for the anti-spam scheme through the integration of ARC signatures (RFC 8617), which for example solve the problem of message forwardi...

almost 2 years ago in Domino / Security 0 Needs Review

2 VOTE

Ability to generate new private key when renewing Certificate.

DOMINO 12.0.2FP3 Customer use a 3rd party CA. There is no issue creating new certificates. Issue is with renewal. Our CA does not allow reuse of the private key when pasting in the CSR. I am unable to generate a new key pair in the certstore.nsf c...

2 months ago in Domino / Security 1 Needs Review

8 VOTE

Document that describes Domino HTTP security settings

There's a document created years ago: https://www.caicorp.com/2017/11/22/adding-security-http-response-headers-to-ibm-lotus-domino-server-to-get-an-a-rating/ HCL should have a similar document with more security settings.

about 1 year ago in Domino / Security 1 Needs Review

5 VOTE

Add Quantum-Resilient Cryptography

This idea requests to add Quantum-Resilient Cryptography (QC or PQC) for: Encryption of NRPC-based traffic, Internet Protocols (https, smtps, imaps, ldaps, etc.), S/MIME encryption Everything else not listed here, The security risk is th...

9 months ago in Domino / Security 3 Needs Review

6 VOTE

Password policy functioning improvements with "Check vault first then directory"

ID vault is implemented on the server and in configuration document "Check vault first then directory" is enabled. All users authenticate to the server through ID vault successfully. Use case: The web user is able to login even though the warning ...

about 1 year ago in Domino / Security 0 Needs Review

11 VOTE

Automatically add "secure" flag to all cookies, when https is used

When a Domino server serves http requests through encrypted https, it should automatically add the " secure " flag to all cookies. There should be a global flag to enable/disable this feature. (default: enabled) In reality, most Domino servers wit...

almost 2 years ago in Domino / Security 0 Needs Review

3 VOTE

View user log in information with IP address

By adding the ini parameter - log_sessions=2 users login information will also add the IP address from where the notes client is accessed We can see the data in the console.log or log.nsf It will be better if there is a seperate view to display th...

8 months ago in Domino / Security 0 Needs Review

Please enter your email address

FILTER BY CATEGORY