Skip to Main Content
HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.

For more information and upcoming events around #dominoforever, please visit our Destination Domino Page

ADD A NEW IDEA

Clear

Search results: Security

Showing 23 of 640

IMAP protocol should show IP address of connecting host and username

When user login over IMAP DOmino should show 12.04.2025 9:01 IMAP Server: JohnDoe@acme.com has logged in (178.1.1.1) 12.04.2025 9:02 IMAP Server: JohnDoe@acme.com has logged out (178.1.1.1) Read: 2 Document(s) This is needed for security reasons, ...
about 1 month ago in Domino / Security 0 Under Consideration

Domino should support modern SMTP related protocols DANE, MTA-STS and TLS-RPT

Domino is a bit behind in implementing e-mail security protocols. While DMARC is waiting for implementation, new protocols are already around: DANE, MTA-STS and TLS-RPT. 1. DANE (DNS-Based Authentication of Named Entities) RFC 6698: The DNS-Based ...
about 1 year ago in Domino / Security 1 Under Consideration

HTTPS/TLS: Handle standard .pfx/SSL Certs better/easier for SSL/TLS

This should be as easy as getting the server/Wildcard cert from the CA and pointing to it on the Domino Server. Doing conversions using other tools (OpenSSL, kyrtool, etc.) should not be necessary. At a minimum have a 1-click utility in the Admin ...
over 7 years ago in Domino / Administration / Security 2 Shipped

Totally remove SentBy and OnBehalfOf when sending from a shared mailbox

The Dutch Government needs to have this option when sending outbound mail. When using shared mailboxes, the mail system automatically adds a “Sent by …” field that reveals the individual sender’s identity. As this constitutes personal data, it rai...
about 1 month ago in Domino / Security 1 Needs Review

Internet Password History and Complexity

Password history and complexity checks are possible on notes id passwords but for internet password validation so we have to use using custom code, it would be nice to include the internet password history and complexity as part of standard Domino...
over 4 years ago in Domino / Security 1 Under Consideration

ID Vault to store the ID File encryption strength.

Expectation for the Domino ID vault to store the ID File encryption strength. 1) When one updates security Policy Settings document as below example. Security Settings==>Password Management==>Password Management Basics==>ID File Enc...
almost 3 years ago in Domino / Security 1 Shipped

Add new audit function to trace activities executed with Domino Administrator Privilege

One of our customer in Japan wish HCL could add the following new audit function to trace activities executed with Domino Administrator Privilege: 1. The activity was executed from which PC (IP address, hostname) and when it was executed. 2. The d...
7 months ago in Domino / Security 0 Needs Review

Allow starttls even with bad certificates

as of 2025-06 if you configure a Domino server (14.5 but also previous ones) to negotiate outgoing smtp with STARTTLS on port 25 Domino accepts to perform only TLS handshaking: - with other servers that support STARTTLS - that have a valid certifi...
4 months ago in Domino / Security 2 Needs Review

Warning message and access restriction after cross certificate between Org is expired.

In the Notes/Domino would like to achieve below when this happens. 1. The end user/servers should be restricted to access cross domain servers and databases along with the message for the restriction to access. 2. When cross domain certificate is ...
over 2 years ago in Domino / Security 0 Assessment

Add DNS-01 challenge end-status at the end of the operation.

When I submit a DNS-01 challenge request, you see the following lines in log.nsf. But the end-result is not set. We need the end-result in the log so we can add a trigger on it whenever it failed. We have push all logs (event driven) to Elastic Se...
over 2 years ago in Domino / Administration / Security 1 Shipped