Security

Showing 297

Domino Inbound SMTP STARTTLS -- Log TLS Version and used Cipher

Most other applications add the TLS Version and used cipher to the received header.Example: from xyz.acme.local (10.100.1.234) by abc.acme.local (10.100.109.233) with Acme SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P...

over 6 years ago in Domino / Security 3 Assessment

8 VOTE

Inbound SMTP DDOS Detection

Inbound SMTP Intruder Detection Prevent from smtp denial of service attacks, when Domino gets bombed with inbound mail from one address. Domino stops routing mail if this happens, the error logged is: "Router: Error searching mailbox file mail*.bo...

9 months ago in Domino / Security 4 Assessment

11 VOTE

Automatically add "secure" flag to all cookies, when https is used

When a Domino server serves http requests through encrypted https, it should automatically add the " secure " flag to all cookies. There should be a global flag to enable/disable this feature. (default: enabled) In reality, most Domino servers wit...

about 1 year ago in Domino / Security 0 Needs Review

4 VOTE

Server-Rules for E-Mail-Header

Our provider uses anti-spam software that writes the SPAM probability in the email header. Example: X-Spam-Level: ***** There should be a central way to evaluate the email header in Domino, for example to add a keyword to the subject line of affec...

5 months ago in Domino / Security 2 Needs Review

35 VOTE

Evolve management of Java Security Policy on Domino Server

Domino mandates java security controls to avoid code from performing privileged operation. Control of policies is defined by java.policy files. This is a burden for customer, partners and admins. The proposal is to implement a new Java policy prov...

over 3 years ago in Domino / Security 0 Under Consideration

26 VOTE

API-Key Authentication for Domino Web Applications

Provide ability to create a API-Key records in names.nsf for third party applications to connect to Domino resources for various reasons (Mostly REST-API, Web agents, DAS, etc.) Right now customers provide a separate username password and the othe...

over 2 years ago in Domino / Security 5 Under Consideration

56 VOTE

Security Audit Trail For Notes/Domino for Compliance purpose

There is a need to have Security Audit Trail For Notes/Domino for Compliance purpose. The security compliance team in any company would request for Audit trail especially the changes done with Full Admin Access rights. Below is required within Not...

over 5 years ago in Domino / Security 12 Under Consideration

2 VOTE

'NSL' for Linux to be able to use password on server.id on Linux servers

I would like to have a way to secure a server.id on a Linux server with a password and not have to manually enter that password on start/restart. On Windows there is NSL, but on Linux we have nothing similar. Working with Information Security I se...

3 months ago in Domino / Security 1 Under Consideration

61 VOTE

Central handling of SMIME Certificates

Make SMIME certificates managable by the admin. the user's are not able to do that. Maybe the certificate file can be imported in the persondocument in names.nsf or in ID-Vault, so that the server can decrypt / sign emails?

over 6 years ago in Domino / Security 1 Assessment

13 VOTE

SAML configuration for Internet site with multiple hostnames

When you configure a SAML for an internet site shared by multiple sites, the SAML authentication leads to a redirect to the first server in the configuration as the response url is always pointing to that server. We tried to set it up with AAD. Th...

over 1 year ago in Domino / Security 1 Under Consideration

Please enter your email address

FILTER BY CATEGORY