HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.


For more information on products and upcoming events around #dominoforever, please visit: HCL Domino Page


ADD A NEW IDEA

Clear

Ideas

    Disabling wink to be used as a potential attack vector

    Seeing more and more attempts to use Wink as an attack vector (see example below). Looking into possibility to disable wink so that it wont cause any potential security risk. 03/17/2022 10:04:27 AM HTTP JVM: 1399490 [Thread-11] INFO org.apache.win...
    about 4 years ago in Domino / Security 2 Already Exists

    Domino to have permissions policy header

    There are customers who are experiencing permissions-policy vulnerability. This is the former "Feature Policy" with new specs. Can domino have the same to mitigate vulnerabilities related to it?
    about 4 years ago in Domino / Security 3 Needs Clarification

    Rate limiting protections for Domino

    An authentication endpoint without rate limiting protections can be susceptible to innumerable amounts of credential stuffing and eventual guessing of set of credentials used for authentication. API endpoints can also be used to attack further inf...
    about 4 years ago in Domino / Security 1 Needs Clarification

    SafeLinx http-service: Exempt URL paths from Authentication

    The Let's Encrypt servers need access to `/.well-known/acme-challenge/<TOKEN>` without authentication https://letsencrypt.org/docs/challenge-types/ For HCL Connections external user registration and password reset, users need to access the W...
    about 4 years ago in SafeLinx 1 Already Exists

    Include Oracle in the SafeLinx install procedure

    To use Oracle Database as the persistent storage repository for the SafeLinx Server several manual configuration instructions as described at , https://help.hcltechsw.com/safelinx/1.3/adminguide/configuring_oracle.html have to be completed. Please...
    about 4 years ago in SafeLinx 1 No Plans to Implement

    User defined keystore for Domino

    Currently, the Notes/Domino v9.x (same with newer versions) can only use the default JAVA trust keystore under Domino application server. The JAVA update overwrites this default keystore. Please add the option to set a custom,user defined keystore...
    about 4 years ago in Domino / Security 2 Needs Review

    SafeLinx support for cer files or keyring files other than PKCS12 format

    Currently, there is support for a third-party SSL server certificate in the pkcs12 format for HCL SafeLinx. Suggestion to consider certificate files or keyring files other than PKCS12 format.
    about 4 years ago in SafeLinx 2 No Plans to Implement

    Control over the setting "don't let administrator set Domino web/internet password to match Notes password" via Domino policy.

    Administrator should have control over the setting "don't let administrator set Domino web/internet password to match Notes password" via Domino policy.
    over 4 years ago in Domino / Security 1 No Plans to Implement

    Enable Authentication of HCL Nomad Mobile users against Active Directory

    During LDAP debugging I could see the following informations during the authentication of a HCL Nomad Mobile user on the Domino Console: [1884:0005-1AD8] 04.05.2022 10:57:52,52 LDAP> Attributes to return:[1884:0005-1AD8] 04.05.2022 10:57:52,52 ...
    over 4 years ago in SafeLinx 2 No Plans to Implement

    Prompt for user content before configuring notes client.

    This is to control & monitor user and admin activity in terms of account access. ( just want user consent before configuring notes client on behalf of the user.). Basically, customer have MFA for notes, but none for lotus notes client security...
    over 4 years ago in Domino / Security 1 No Plans to Implement
                                        Copyright © 2025 HCLSoftware Limited