HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.


For more information on products and upcoming events around #dominoforever, please visit: HCL Domino Page


ADD A NEW IDEA

Clear

Ideas

    Disabling wink to be used as a potential attack vector

    Seeing more and more attempts to use Wink as an attack vector (see example below). Looking into possibility to disable wink so that it wont cause any potential security risk. 03/17/2022 10:04:27 AM HTTP JVM: 1399490 [Thread-11] INFO org.apache.win...
    about 4 years ago in Domino / Security 2 Already Exists

    Domino to have permissions policy header

    There are customers who are experiencing permissions-policy vulnerability. This is the former "Feature Policy" with new specs. Can domino have the same to mitigate vulnerabilities related to it?
    about 4 years ago in Domino / Security 3 Needs Clarification

    Rate limiting protections for Domino

    An authentication endpoint without rate limiting protections can be susceptible to innumerable amounts of credential stuffing and eventual guessing of set of credentials used for authentication. API endpoints can also be used to attack further inf...
    about 4 years ago in Domino / Security 1 Needs Clarification

    User defined keystore for Domino

    Currently, the Notes/Domino v9.x (same with newer versions) can only use the default JAVA trust keystore under Domino application server. The JAVA update overwrites this default keystore. Please add the option to set a custom,user defined keystore...
    about 4 years ago in Domino / Security 2 Needs Review

    Control over the setting "don't let administrator set Domino web/internet password to match Notes password" via Domino policy.

    Administrator should have control over the setting "don't let administrator set Domino web/internet password to match Notes password" via Domino policy.
    over 4 years ago in Domino / Security 1 No Plans to Implement

    HTMO contacts needs to be automatically inserted in the nickname cache.

    Customer need the address book to be inserted in the "nickname cache" auto-completion of mail addresses. HTMO contacts needs to be automatically inserted in the nickname cache.
    over 4 years ago in Traveler for Microsoft Outlook-HTMO 0 Under Consideration

    Prompt for user content before configuring notes client.

    This is to control & monitor user and admin activity in terms of account access. ( just want user consent before configuring notes client on behalf of the user.). Basically, customer have MFA for notes, but none for lotus notes client security...
    over 4 years ago in Domino / Security 1 No Plans to Implement

    Option to select whether the LTPAToken should be completely removed/or usable when session has been completely ended.

    When enabling Session authentication across servers, the token issued by a server can still be used even after the session has been completely ended on the server and on the browser. If a user issues a request to the server using the same token, y...
    over 4 years ago in Domino / Security 1 Under Consideration

    remove "save password" in outlook

    Is it possibile to remove the save password option, or disable it
    over 4 years ago in Traveler for Microsoft Outlook-HTMO 1 No Plans to Implement

    Add Meeting Service Linking

    Add linking to Meeting Services similar to HCL Notes 12.01 in HTMO Client.
    over 4 years ago in Traveler for Microsoft Outlook-HTMO 0 Future Consideration
                                        Copyright © 2025 HCLSoftware Limited