Security

Showing 248

Domino to become SAML IDP / OAuth + OpenID

SAML and OAuth OpenID provide high value to Domino when Domino is configured as a Service provider. But for a quick start an IDP is required - it would be great if the IBM Platform delivers this out of the box. If it also supports Kerberos / Wind...

over 4 years ago in Domino / Security 0 Assessment

34 VOTE

When creating new Web User accounts, enable them and their passwords immediately.

Currently if you add a new user to the Directory for web access, you have to do things like refresh http, refresh some view indexes. Otherwise the user has to wait 5-10 minutes before they can login. In 2018 this isn't acceptable, people expect to...

almost 5 years ago in Domino / Security 1 Assessment

13 VOTE

Add a blanket grant for the XPages JVM to the default java.policy file

I just lost two days, just to find out that our RuntimePermission exception (getClassLoader) in Java is caused by a missing setting in a java.policy file, somewhere deep in the Domino tree. In the end, after trying several different settings, the ...

almost 2 years ago in Domino / Security 3 Under Consideration

4 VOTE

public key repository

Just had a thought. What if Domino has a feature where anyone (with registration) can deposit their public keys into a repository, that, if anyone wants to communicate securely, just do a quick look and grab the public key here, and bam, it's done...

8 months ago in Domino / Security 1 Under Consideration

6 VOTE

Export LTPAToken from Domino into Sametime V12

In Sametime V12 there is no connection anymore to a Domino server. The proxy does not import the LTPAToken automatically anymore. The documentation tells us the setup a temp. WebSphere-Liberty server and creates a LTPAToken. This is a workaround i...

12 months ago in Domino / Security 1 No Plans to Implement

29 VOTE

A new NoReaders field type

It would be great to have a NoReaders field type that can be used to stop specified user(s)/Group(s) being able to access a document. I have been asked often if it is possible to stop some users from accessing specific documents. In some cases it...

almost 5 years ago in Domino / Security 3 No Plans to Implement

6 VOTE

Add Ability To Set Secure Cookie Attribute To Domino Server

Can the ability to set the Secure cookie attribute be added to the HCL Domino server? This could be done similar to the SameSite cookie attribute that was added to Domino version 12.0.x. Most HTTP servers provide the ability to set the Secure cook...

about 1 year ago in Domino / Security 2 Already Exists

8 VOTE

Internet Lockout not per server, but per website or per domain.

When you have a clustered Domino backend for hosting websites or web-apps, and you have a loadbalancer in front of them......and internet lockout only occurs per server.....it's possible that you end up on another cluster-member and can continue t...

over 1 year ago in Domino / Security 2 Assessment

9 VOTE

HTTP Cookie limit

When there are more than 4k worth of cookie data passed to Domino, Domino does not capture the information in the CGI variable HTTP_cookie.

over 1 year ago in Domino / Security 0 Under Consideration

27 VOTE

Custom Internet Password Policy Enforcement

We can't keep treating the Internet password as a second citizen. You have custom password enforcement for the Notes Client. Now you MUST implement it for the Internet password as well. Risk/Audit/Security isn't going to stand for less security co...

over 4 years ago in Domino / Security 7 No Plans to Implement

Please enter your email address

FILTER BY CATEGORY