Security

Showing 314

Let's Encrypt certificate manager program to be available for IBM i

Certificate Manager (CertMgr) server task. This task runs on one server in a Domino domain and handles the certificate processing. It leverages new back-end security APIs and requires a HCL Domino® version 12 or higher server running on Docker, Wi...

about 4 years ago in Domino / Security 4 No Plans to Implement

5 VOTE

In the certstore.nsf, create user certificates or self-signed user certificates for client authentication

Certstore \ certmgr should use the CA process internet certificate to generate a certificate request and store the certificate for each person to use during browser authentication.

almost 2 years ago in Domino / Security 1 Needs Review

9 VOTE

Add Ability To Set Secure Cookie Attribute To Domino Server

Can the ability to set the Secure cookie attribute be added to the HCL Domino server? This could be done similar to the SameSite cookie attribute that was added to Domino version 12.0.x. Most HTTP servers provide the ability to set the Secure cook...

over 3 years ago in Domino / Security 4 Already Exists

11 VOTE

Domino to support SCIM – System for Cross-domain Identity Management.

No description provided

about 4 years ago in Domino / Security 4 Needs Clarification

15 VOTE

Policy setting which will lockout the notes client on subsequent incorrect password attempts

This functionality is very important for the implementation of security systems.

over 5 years ago in Domino / Security 4 No Plans to Implement

1 VOTE

Cert manager needs more commands

With the new plan to shorter lifespans of TLS certificates we need ways to renew certificates (other than let's encrypt) using domino server commands. So I'm from a pfx cert file on disk can Import/update a TLS cert using a server command. So I ne...

5 months ago in Domino / Security 1 Needs Review

4 VOTE

Need any setting or Notes.ini parameter to bypass ICAP server if ICAP server is unresponsive

When scanning is enabled, messages are held in mail.box until are processed by ICAP server. In case the ICAP server is unreachable (no matter what is the reason) messages are held in mailbox. Need a setting or notes.ini switch to inform Domino t...

over 1 year ago in Domino / Security 4 No Plans to Implement

12 VOTE

NSF_ENABLE_LARGE_ACL should also apply for roles and role name length

As of Domino V12, NSF_ENABLE_LARGE_ACL was introduced. The setting increases the number of individual entries in the ACL of an application. Unfortunately this does not apply to the number of role entries, which is still limited to 75. Pls. increas...

over 4 years ago in Domino / Security 0 Under Consideration

18 VOTE

Domino has no control on how browsers store username/passwords in the local cache of the broswer, it sending password in plain text to Server

SPR #RKUR8VXDYM Domino has no control on how browsers store username/passwords in the local cache of the browser. Using customise login page created in inotes.nsf and this is set in Domcfg.nsf. Both the Username & password fields are set with ...

almost 7 years ago in Domino / Security 3 No Plans to Implement

9 VOTE

Internet Lockout not per server, but per website or per domain.

When you have a clustered Domino backend for hosting websites or web-apps, and you have a loadbalancer in front of them......and internet lockout only occurs per server.....it's possible that you end up on another cluster-member and can continue t...

over 3 years ago in Domino / Security 2 Assessment

Please enter your email address

FILTER BY CATEGORY