Security

Showing 244

Allow HTTP Basic Authentication with Umlauts using UTF-8

Currently Domino HTTP Basic Authentication Passwords need to be encoded in ISO-8859-1.Many other systems allow to use UTF.8. The standard is unclear but there is a specification where you can announce which encoding the server expects. See https:/...

about 4 years ago in Domino / Security 2 Assessment

14 VOTE

Additional Option required to access database on other Domino Server by Agent Signer ID.

Agent Manager task is currently responsible for execution of all scheduled agents that run on Domino Server. The agent manager is one of the Domino server processes. When any scheduled agent needs to access some other database present on another D...

9 months ago in Domino / Security 1 Already Exists

12 VOTE

Scrub logs ( anonymize ) before sending it to support "Tell Domino Support"

This is a new feature in Domino V12.0.2 ( now in beta ) It's a great feature, but some companies have strict policies for sending logs to vendors. No server names No ipaddresses No user-names/-information No domain information Nothing what could ...

8 months ago in Domino / Security 0 Assessment

4 VOTE

Add - SHA 256+ option in configuring password.

moving away from having SHA1 on an approved list. So it will not longer be allowed as part of FIPS-140 compliance. Customer needs additional option to configure password hashing.

3 months ago in Domino / Security 1 Assessment

6 VOTE

Update OpenJDK that comes with Domino 12

Due to recent multiple vulnerabilities relating to OpenJDK (JRE), Domino servers are being reported as vulnerable. Domino v11 comes with JRE 11, while Domino v12 comes with JRE 11.0.2 which is one of the reported versions affected by this vulnearb...

4 months ago in Domino / Security 1 Assessment

6 VOTE

Single user recall action causes confusion on message addressed to multiple users

When an user does recall to one user from a message that has been sent to multiple people and one of them responds to all, it also includes the person who was recalled, bringing confusion and the user thinks that it has been an error and has not r...

4 months ago in Domino / Security 2 No Plans to Implement

71 VOTE

Domino Inbound SMTP STARTTLS -- Log TLS Version and used Cipher

Most other applications add the TLS Version and used cipher to the received header.Example: from xyz.acme.local (10.100.1.234) by abc.acme.local (10.100.109.233) with Acme SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P...

over 4 years ago in Domino / Security 3 Assessment

24 VOTE

Integrate SafeLinx and Domino MFA/2FA/TOTP implementation

SafeLinx is able to to provide MFA <https://help.hcltechsw.com/safelinx/1.2/adminguide/using_radius_authentication_profiles.html> and Domino 12 now also has MFA functionality <https://help.hcltechsw.com/domino/12.0.0/admin/conf_totp_overv...

over 1 year ago in Domino / Security 0 Assessment

47 VOTE

Support FIDO2 for Two-Factor Authentication in Nomad/Notes/Traveler/Web

FIDO2 enables users to leverage common devices to easily authenticate to online services in both mobile and desktop environments. The FIDO2 specifications are the World Wide Web Consortium’s (W3C) Web Authentication (WebAuthn) specification and FI...

over 3 years ago in Domino / Security 2 Assessment

63 VOTE

Improve SAML - We need act also as a Idp Provider

Currently, Domino can use SAML for authentication, but NOT to act as an IdP provider. There is a lot of product on cloud that in order to do SSO, they do require an IdP, an your are forced to use ADFS or Tivoli for that. On the same way that Domin...

over 4 years ago in Domino / Security 7 Assessment

Please enter your email address

FILTER BY CATEGORY