DominoSecurity.org -- THE source for Domino / Notes security information

DominoSecurity.org

(Brought to you by CHC-3 Consulting )

This web site consolidates links about the security features in Lotus Domino and Notes. If you have made any attempt to use these features, you know they can be complicated -- groups, roles, Reader fields, execution control, certificate authority, public/private keys, certifiers, S/MIME, etc. Sometimes the security features overlap and/or negate each other.

Popular new links are

...

IBM Lotus Sametime 8 Security Features. This white paper describes the security features of Sametime 8.0 software, including a discussion of authentication and encryption for each of the major functional units of Lotus Sametime.
Secure Access to iNotes with Mobile Connect -- This article is intended for IBM Lotus iNotes 8 customers who want secure, remote access to enterprise Lotus iNotes servers from devices such as personal digital assistants (PDAs), laptops, or workstations that require access outside the bounds of their corporate intranet.
Securing a Domino web server using the new Internet lockout feature. This article describes Internet lockout, in Domino 8, its configuration, and provides a sample that shows how to create a custom login form.
New Security Features in Domino 8. A presentation from Lotusphere.
Security APIs in Notes/Domino 7.0 -- In this article, we discuss features related to the new Notes/Domino 7 Notes encryption/decryption APIs, including Notes-encrypted and S/MIME-encrypted messages.

The main pages of this site, which include the new links, are organized thusly...

Alerts about security bugs, vulnerabilities and fixes for Domino/Notes.
Articles and books about Domino/Notes security topics. There is a great deal of information here. Subtopics include: ND8, General Administration, Security Principles, Application Security , Email, SSL , LDAP, Wireless, Java, Websphere, Sametime, Public key cryptography, Operating system security, APIs, and Backups.
I previously ran a mailing list from this site. I discontinued it because readers found they can just check this site, and others, for security alerts. But here are the archives of previous newsletters and similar admin/security tips I write for SearchDomino.com.
Products and services related to Domino/Notes security. Some of these companies specialize in Domino security, while others work with general network security.
Other security web sites. These sites are generally wider in scope than just Domino/Notes but can be valuable. For example, you can go to many of the sites and search for Domino or Notes to find useful information.

Also, please help make this site better.

Click to

to books and articles that should be added to this web site. Click to

send me comments

and suggestions to improve the site.

This web site is owned and operated by Chuck Connell and CHC-3 Consulting, which provides consulting services related to Domino/Notes security.