® Traveler relies on the Domino
® infrastructure (HTTP and Admin Client) to authenticate the user. The authentication credentials can be one of the user's allowed Domino
name formats, along with the user's HTTP password, or it can be something defined with the Directory Assistance database. All devices use HTTP Basic Authentication, so HTTPS is recommended for security reasons unless using a VPN or a secured network.
Account information and passwords
The credentials shared by IBM
Mobile Installer and IBM Notes
Traveler are stored in a user accessible space and encrypted using AES 256 -bit encryption.
Traveler credentials are stored in a private directory only readable by IBM Notes
Traveler or other Symbian signed applications with special capabilities. It does not need to be encrypted, but is privately done so (not AES 256).
The IBM Notes
ID password used for reading Domino
encrypted mail is cached for the duration specified by the device lockout timeout and is stored in volatile memory only accessible by the IBM Notes
Data is stored in private databases only readable by Lotus Notes
® Traveler through Symbian APIs and Symbian signed applications with the special capabilities to private application directories.
Nokia Symbian^3 devices support hardware encryption. The hardware encryption method is controlled by Nokia.
encrypted mail is stored and encrypted using AES 256-bit encryption on the device with a key based on the IBM Notes
Traveler password. When the user views an encrypted mail, the IBM Notes
ID password is used to decrypt the data and store it in volatile memory solely for viewing.
Parent topic: Device security