DominoSecurity.org
(Brought to you by Chuck Connell at
CHC-3 Consulting
.)
This web site consolidates links about the security features in Lotus Domino and Notes. If you have made any attempt to use these features, you know they can be complicated -- groups, roles, Reader fields, execution control, certificate authority, public/private keys, certifiers, S/MIME, etc. Sometimes the security features overlap and/or negate each other.
Popular new links are
...
Notes/Domino 8.5 ID Vault
, February 2010. Detailed instructions for setting up and using the new ID Vault feature in ND 8.5, written by me.
IBM Lotus Sametime 8 Security Features
. This white paper describes the security features of Sametime 8.0 software, including a discussion of authentication and encryption for each of the major functional units of Lotus Sametime.
Secure Access to iNotes with Mobile Connect
-- This article is intended for IBM Lotus iNotes 8 customers who want secure, remote access to enterprise Lotus iNotes servers from devices such as personal digital assistants (PDAs), laptops, or workstations that require access outside the bounds of their corporate intranet.
Securing a Domino web server using the new Internet lockout feature
. This article describes
Internet lockout, in Domino 8, its configuration, and provides a sample that shows how to create a custom login form.
New Security Features in Domino 8
.
A presentation from Lotusphere.
Security APIs in Notes/Domino 7.0
-- In this article, we discuss features related to the new Notes/Domino 7 Notes encryption/decryption APIs, including Notes-encrypted and S/MIME-encrypted messages.
The main pages of this site, which include the new links, are organized thusly...
Articles and books
about Domino/Notes security topics. There is a great deal of information here. Subtopics include:
ND8
,
General Administration
,
Security Principles
,
Application Security
,
Email
,
SSL
,
LDAP
,
Wireless
,
Java
,
Websphere
,
Sametime
,
Public key cryptography
,
Operating system security
,
APIs
, and
Backups
.
Products
and
services
related to Domino/Notes security. Some of these companies specialize in Domino security, while others work with general network security.
Other security web sites
. These sites are generally wider in scope than just Domino/Notes but can be valuable. For example, you can go to many of the sites and search for
Domino
or
Notes
to find useful information.
Here is
my old hot list
about Domino/Notes vulnerabilities, replaced by
Lotus's own list
, and
my old security newsletters
, which I no longer send
.
This site is maintained by Chuck Connell of
CHC-3 Consulting
, which provides consulting services related to Domino/Notes security.