only search Wiseman.La

The World NEXT ends 

What these are: GOOD Short time, targeted fixes to immediate issues Domino faces.
This is some good, hard news. Updates on what's going to be done and timelines that work.
Remember, the Poodle exploit is *at this point* proof of concept from Google, so we do have a window of time before it becomes a true issue.

This is a very acceptable approach. As I told support... I'm fine with having a Poodle-resistant solution for Domino 8.5.x and moving to full TLS and HTTP in 9.x.

Planned SHA-2 deliveries for IBM Domino 9.x

How is IBM Domino impacted by the POODLE attack?

What we still need: A commitment and roadmap to full TLS 1.2/1.3 and HTTP v2 support, native in Domino, across all platforms.

IBM is committed to delivering a secure and reliable offering. It is our intention to continue to address general enhancements including security updates as is our general practice in our product development cycles or in our ongoing subscription updates.

Comments (1)
Craig Wiseman October 21st, 2014 10:37:17 AM

1) Good! Communication on upcoming short term fixes for both the Poodle and SHA-2 issues from IBM regarding Domino | MIA: No confirmation or roadmap for TLS 1.2/1.3 or HTTP v2
Frank Paolino 10/21/2014 2:43:09 PM

This can't come soon enough. We are having difficulty connecting any version of Domino SMTP servers to any ProofPoint servers. STARTTLS well, won't start. And these PPHosted servers (Sendmail) won't fall back to plain test, so mail transfer fails.

Discussion for this entry is now closed.