Security

Showing 312

Domino Inbound SMTP STARTTLS -- Log TLS Version and used Cipher

Most other applications add the TLS Version and used cipher to the received header.Example: from xyz.acme.local (10.100.1.234) by abc.acme.local (10.100.109.233) with Acme SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P...

almost 7 years ago in Domino / Security 3 Assessment

76 VOTE

Improve SAML - We need act also as a Idp Provider

Currently, Domino can use SAML for authentication, but NOT to act as an IdP provider. There is a lot of product on cloud that in order to do SSO, they do require an IdP, an your are forced to use ADFS or Tivoli for that. On the same way that Domin...

almost 7 years ago in Domino / Security 8 Assessment

58 VOTE

Security Audit Trail For Notes/Domino for Compliance purpose

There is a need to have Security Audit Trail For Notes/Domino for Compliance purpose. The security compliance team in any company would request for Audit trail especially the changes done with Full Admin Access rights. Below is required within Not...

about 6 years ago in Domino / Security 12 Under Consideration

2 VOTE

View user log in information with IP address

By adding the ini parameter - log_sessions=2 users login information will also add the IP address from where the notes client is accessed We can see the data in the console.log or log.nsf It will be better if there is a seperate view to display th...

3 months ago in Domino / Security 0 Needs Review

36 VOTE

Evolve management of Java Security Policy on Domino Server

Domino mandates java security controls to avoid code from performing privileged operation. Control of policies is defined by java.policy files. This is a burden for customer, partners and admins. The proposal is to implement a new Java policy prov...

almost 4 years ago in Domino / Security 0 Under Consideration

27 VOTE

API-Key Authentication for Domino Web Applications

Provide ability to create a API-Key records in names.nsf for third party applications to connect to Domino resources for various reasons (Mostly REST-API, Web agents, DAS, etc.) Right now customers provide a separate username password and the othe...

almost 3 years ago in Domino / Security 5 Under Consideration

61 VOTE

Central handling of SMIME Certificates

Make SMIME certificates managable by the admin. the user's are not able to do that. Maybe the certificate file can be imported in the persondocument in names.nsf or in ID-Vault, so that the server can decrypt / sign emails?

almost 7 years ago in Domino / Security 1 Assessment

13 VOTE

Domino should also support Passkey for users in secondary directories

Domino 14 introduces passkey support. This support is limited to users in the primary Domino directory. Many companies use Domino these days as an application platform with their (external) users in a secondary addressbook. It would be good if Dom...

over 1 year ago in Domino / Security 1 Under Consideration

5 VOTE

Password policy functioning improvements with "Check vault first then directory"

ID vault is implemented on the server and in configuration document "Check vault first then directory" is enabled. All users authenticate to the server through ID vault successfully. Use case: The web user is able to login even though the warning ...

7 months ago in Domino / Security 0 Needs Review

45 VOTE

Update Domino SAML IdP configuration when ADFS Token Signer Certificates has been changed

Once a year, ADFS must change it's Token Signer Certificate. 2 weeks before the expiration of it's old on, ADFS creates a second new one. Connected application will detect this second one and will change their configuration automatically. HCL Dom...

over 5 years ago in Domino / Security 7 Under Consideration

Please enter your email address

FILTER BY CATEGORY