Security

Showing 300

Improve SAML - We need act also as a Idp Provider

Currently, Domino can use SAML for authentication, but NOT to act as an IdP provider. There is a lot of product on cloud that in order to do SSO, they do require an IdP, an your are forced to use ADFS or Tivoli for that. On the same way that Domin...

over 6 years ago in Domino / Security 7 Assessment

7 VOTE

Central logging for all password changes

Have a central logging for all password(Notes and Internet) changes on the whole environment. It should contain the username, date/time, how was the password changed(note client, web, etc.), and where it was changed(IP address). This way we can tr...

7 months ago in Domino / Security 1 Needs Clarification

35 VOTE

Evolve management of Java Security Policy on Domino Server

Domino mandates java security controls to avoid code from performing privileged operation. Control of policies is defined by java.policy files. This is a burden for customer, partners and admins. The proposal is to implement a new Java policy prov...

over 3 years ago in Domino / Security 0 Under Consideration

8 VOTE

Inbound SMTP DDOS Detection

Inbound SMTP Intruder Detection Prevent from smtp denial of service attacks, when Domino gets bombed with inbound mail from one address. Domino stops routing mail if this happens, the error logged is: "Router: Error searching mailbox file mail*.bo...

9 months ago in Domino / Security 4 Assessment

2 VOTE

Autopopulated group must not resave group document, if content has not changed.

Now even if Autopopulated group content has not changed, server still Resave Document. It would be better, if content is actual, server does not resave group document. From ChangeManagement, Compliance prospective all changes should be logged, and...

2 months ago in Domino / Security 0 Under Consideration

57 VOTE

Security Audit Trail For Notes/Domino for Compliance purpose

There is a need to have Security Audit Trail For Notes/Domino for Compliance purpose. The security compliance team in any company would request for Audit trail especially the changes done with Full Admin Access rights. Below is required within Not...

over 5 years ago in Domino / Security 12 Under Consideration

26 VOTE

API-Key Authentication for Domino Web Applications

Provide ability to create a API-Key records in names.nsf for third party applications to connect to Domino resources for various reasons (Mostly REST-API, Web agents, DAS, etc.) Right now customers provide a separate username password and the othe...

over 2 years ago in Domino / Security 5 Under Consideration

11 VOTE

Automatically add "secure" flag to all cookies, when https is used

When a Domino server serves http requests through encrypted https, it should automatically add the " secure " flag to all cookies. There should be a global flag to enable/disable this feature. (default: enabled) In reality, most Domino servers wit...

about 1 year ago in Domino / Security 0 Needs Review

61 VOTE

Central handling of SMIME Certificates

Make SMIME certificates managable by the admin. the user's are not able to do that. Maybe the certificate file can be imported in the persondocument in names.nsf or in ID-Vault, so that the server can decrypt / sign emails?

over 6 years ago in Domino / Security 1 Assessment

13 VOTE

SAML configuration for Internet site with multiple hostnames

When you configure a SAML for an internet site shared by multiple sites, the SAML authentication leads to a redirect to the first server in the configuration as the response url is always pointing to that server. We tried to set it up with AAD. Th...

over 1 year ago in Domino / Security 1 Under Consideration

Please enter your email address

FILTER BY CATEGORY