Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Panel
titleStakeholders


Name

Organisation

Role 
Thijs Kinkhorst, Wladimir MuftiSURF / edu.nlReview and feedback
Nicole Harris, Sigita, AlfTask 3 (Security CommuityCommunity)
Review and feedback
Federations
Review and feedback
NRENS
Review and feedback
Institutions
Review and feedback


...

Panel
titleDescription

A secure, persistent and privacy preserving link shortener for research and education

Link shorteners reduce a lengthy URL on the internet to something short and snappy, and sometimes easy to remember. As such it is a very well used and liked functionality within our community.

Many ‘free’ link shorteners exist, however, their free nature comes with a number of challenges, including:

  • serving advertisements during the creation of the link, or when a link is followed and
  • placing all kinds of tracking and fingerprinting, in that way data mining the users and their interests.

Next to these practices, some more general challenges exist with link shorteners, which are especially challenging for our sector:

  • Many free link shorteners have a limited lifetime for the links they present. This leads to links being lost, or in some cases links being reassigned to different content. This lifetime is especially challenging in cases where the link shortener was used to reference scientific articles, where the intent is to long term preserve the relation between the article and the references. 
  • Due to its proxy like nature, it is impossible to known where the link will actually lead. This makes link shorteners very ‘interesting’ tools to lure people into selecting links that lead to e.g. malware.
  • Branding and policies of the free link shortener may not align well with the values of the institution the user is representing.

Taking into account the above considerations, SURF developed a new service called “edu.nl”. Grown out of a ‘Friday afternoon’ project, the edu.nl link shortener service was launched in The Netherlands in Oct 2019 to see its popular rise sharply in the two first months after it was moved from being a SURF staff only service to become a broadly available community service. Figure 1 shows some of the user statistics over the past few months. Since its launch over XXX k links were registered.Figure 1: edu.nl usage in The NetherlandsThe software supporting edu.nl will be made available to the GÉANT community by SURF for the purpose of this project.

This incubator project seeks to enhance the capabilities of the existing edu.nl codebase and make them ready for purpose to deliver a service that could be operated for the benefit of the GÉANT community as a whole, branded as the eduLNK service.

The software supporting edu.nl will be made available to the GÉANT community by SURF for the purpose of this project.

The eduLNK service should offers Assuming the eduLNK service would offer a free to use service for end users in our community to resolve and mitigate some of the aforementioned issues:

  • The By making the software available to GEANT project and teh NRENs, the service is to be operated by a trusted third party without a need to make a profit from operating the service. This removes the need for advertising or selling off personal data.
  • The eduLNK service will actively protect and preserve end user privacy and limit the amount of personal data collected to the absolute minimum.
  • By allowing only community members to create short links, the edulnk.org link shortener is much more trusted as compared to other link shorteners. Also, the eduLNK operator may act upon abuse and engage with the users institution to resolve such issue as part of its acceptable use policy.
  • eduLNK will offer long lifetimes for links before they expire. While storing links for a long time will take some effort, it is noted that the price of storage are rather low.


Panel
titleActivity goals
  • The activity will enhance the existing software  as described in the technical details section below. The result will be made available to the NREN community as open source software
  • The activity will investigate the possibility of making the eduLNK a centrally operated GEANT service.

Activity Details

Panel
titleTechnical details

The features below are currently not yet supported in the software developed by SURF.
This incubator activity will add these and contribute them back to the software project.

  • eduLNK will use InAcademia community edition to verify if a user is a member of the R&E community *
  • The eduLNK service will try to actively filter out known dangerous links, reducing the risk of exposing users to malware and other treats *
  • The service may be supported in as many languages as the community is willing to provide support for *
  • Update / change link by end users
  • eduLNK will offer long lifetimes for links before they expire. While storing links for a long time will take some effort, it is noted that the price of storage are rather low.

For institutions in the GÉANT community, eduLNK offers additional capabilities:

  • An institution may add their own preferred domain name to the link shortener, so they can align this usage with institutional policies and branding. To add a domain, they will have to prove they own the domain. For end users coming from institutions which support the use of their own domain, they may choose to use either the institutional selected domain or the eduLNK domain name as part of their link shortener *
  • For any domain added by an institution, the institution has the ability to download and thus preserve the links made by their users using the institutionally provided domain. This allows institutions to preserve the links even in case the eduLNK service itself would end its service *
The features marked with a * are currently not yet supported in the software developed by SURF. This incubator activity will add these and contribute them back to the software project. At the same time the incubator will work with the relevant work packages in the GEANT project to establish who such a service could be offered to the community most efficiently


Panel
titleBusiness case
With the result of this activity, NRENs may offer their users a privacy friendly and secure link shortener service.
In addition, as the retention time of the links is now under controle of the NRENs this may be used in scenarios where commercially offered shorteners were previously not acceptable.


Panel
titleActivity goals

#Please describe the goals of Activity, including what needs to be delivered, participants, the community(ies) that require a solution. Describe when the Activity is done and how to measure the success of it, in a SMART way. - delete this line after using the template#

<Enter here>

Activity Details

Panel
titleTechnical details

#Please describe the technical details for the Activity. - delete this line after using the template#

<Enter here>

Panel
titleBusiness case

#What is the business case for the Activity? Who would be beneficiaries of the results of the Activity and what would potential business case look like if applicable? - delete this line after using the template#

<Enter here>

Risks
  • Due to the time-boxed nature of an incubator activity, we may not be able to complete all envisioned work. To mitigate we work closely with the stakeholders to make sure features with the highest priority get implemented first.
  • This activity aspires to find a way to have this software operated centrally as part of the GEANT project. There are however many factor that determine if that is possible. As a mitigation we will also make the software available as open source so individual NRENs may deploy it themselves.
Panel
titleRisks

#Are there risks that influence either the implementation of the activity or its outcomes? - delete this line after using the template#

<Enter here>


Panel
titleData protection & Privacy

#How do data protection and privacy impact the Activity? Think about e.g. handling of personal data of users - delete this line after using the template#

<Enter here>The eduLNK service is designed to limit the amount of personal data exchanged. In addition it will not track or profile a uses behavior neither when creating links, nor when these are being followed.


Panel
titleDefinition of Done (DoD)

This activity is completed is the following goals are met:

Enhancing the software:

  • Make use of InAcademia community edition
  • Actively filter out known dangerous links
  • Supported miltiple languages
  • Allow users to update / change links
  • Allow institution to use eduLNK with their own domain and branding

#Please describe here the set of criteria that the product must meet in order to be considered finished. - delete this line after using the template#

<Enter here>


Panel
titleSustainability

Te software developed as part of this activity will be made available under an open source licence.

This activity will investigate if eduLNK may be offered as a GEANT service.

#How are the results of the Activity intended to be used? If this requires further engagement, can you describe how you intent to sustain it? - delete this line after using the template#

<Enter here>

Activity Results

Panel
titleResults

A prototype of the eduLNK software was created and a public test instance was made available.

The following results were created by this activity:

With the submission of the official new idea form, eduLNK may become a potential new service in the GÉANT project.

#Please provide pointers to completed and intermediary results of this activity - delete this line after using the template#

Meetings

Date

Activity

Owner

Minutes

June 23, 2020

Kickoff meeting



Documents

Attachments

...