HCL Domino Ideas Portal

Welcome to the #dominoforever Product Ideas Forum! The place where you can submit product ideas and enhancement request. We encourage you to participate by voting on, commenting on, and creating new ideas. All new ideas will be evaluated by HCL Product Management & Engineering teams, and the next steps will be communicated. While not all submitted ideas will be executed upon, community feedback will play a key role in influencing which ideas are and when they will be implemented.


For more information on products and upcoming events around #dominoforever, please visit: HCL Domino Page


ADD A NEW IDEA

Clear

Security

    To support Migrate Internet Certifier ( keyring file option) that is not self signed.

    Migrate Internet Certifier (keyring file option) only supports migrating a self signed CA. This enhancement request is to support Migrate Internet Certifier ( keyring file option) that is third party certificate
    about 1 year ago in Domino / Security 1 Needs Clarification

    Domino should also support Passkey for users in secondary directories

    Domino 14 introduces passkey support. This support is limited to users in the primary Domino directory. Many companies use Domino these days as an application platform with their (external) users in a secondary addressbook. It would be good if Dom...
    over 2 years ago in Domino / Security 1 Under Consideration

    When a person or Group added to ACL, it is always unspecified while user type is known when selecting from NAB

    When we add entry to ACL, we have directory and we see user type, User, Group, Server, but when Added to ACL we should always set this from UNSPECIFIED to proper type again. seems few lines of code will make it for friendly
    about 8 years ago in Domino / Security 0 Under Consideration

    Domino should reject messages when the envelope 'From' header differs from the 'From' header in the message body

    A configuration feature is needed in Domino to block emails when the MAIL FROM address (in the envelope) differs from the FROM address in the email header.
    11 months ago in Domino / Security 1 Needs Review

    When creating new Web User accounts, enable them and their passwords immediately.

    Currently if you add a new user to the Directory for web access, you have to do things like refresh http, refresh some view indexes. Otherwise the user has to wait 5-10 minutes before they can login. In 2018 this isn't acceptable, people expect to...
    about 8 years ago in Domino / Security 1 Assessment

    Automatically add "secure" flag to all cookies, when https is used

    When a Domino server serves http requests through encrypted https, it should automatically add the " secure " flag to all cookies. There should be a global flag to enable/disable this feature. (default: enabled) In reality, most Domino servers wit...
    almost 3 years ago in Domino / Security 0 Needs Review

    Document that describes Domino HTTP security settings

    There's a document created years ago: https://www.caicorp.com/2017/11/22/adding-security-http-response-headers-to-ibm-lotus-domino-server-to-get-an-a-rating/ HCL should have a similar document with more security settings.
    almost 2 years ago in Domino / Security 1 Needs Review

    ID VAULT revert from archive button in ID VAULT Template

    IDV_ENABLE_VAULT_SCAN is a cool feature, while it has a little side effect. If user was away for a week User.ID is archived from vault and no longer can be extracted used. see technote. https://support.hcl-software.com/csm?id=kb_article&syspar...
    about 1 year ago in Domino / Security 0 Needs Review

    Update OpenSSL to V3.6

    We need to update OpenSSL to the latest stable version to address CVE-2025-9230, CVE-2025-15467, CVE-2025-68160, CVE-2025-69418, CVE-2025-69419, CVE-2025-69420, and CVE-2025-69421. This vulnerability involves an out-of-bounds read/write flaw durin...
    6 months ago in Domino / Security 4 Under Consideration

    SAML configuration for Internet site with multiple hostnames

    When you configure a SAML for an internet site shared by multiple sites, the SAML authentication leads to a redirect to the first server in the configuration as the response url is always pointing to that server. We tried to set it up with AAD. Th...
    about 3 years ago in Domino / Security 2 Under Consideration
                                        Copyright © 2025 HCLSoftware Limited