A secure, persistent and privacy preserving link shortener for research and education

Link shorteners reduce a lengthy URL on the internet to something short and snappy, and sometimes easy to remember. As such it is a very well used and liked functionality within our community.

Many ‘free’ link shorteners exist, however, their free nature comes with a number of challenges, including:

• serving advertisements during the creation of the link, or when a link is followed and
• placing all kinds of tracking and fingerprinting, in that way data mining the users and their interests.

Next to these practices, some more general challenges exist with link shorteners, which are especially challenging for our sector:

• Many free link shorteners have a limited lifetime for the links they present. This leads to links being lost, or in some cases links being reassigned to different content. This lifetime is especially challenging in cases where the link shortener was used to reference scientific articles, where the intent is to long term preserve the relation between the article and the references. 
• Due to its proxy like nature, it is impossible to known where the link will actually lead. This makes link shorteners very ‘interesting’ tools to lure people into selecting links that lead to e.g. malware.
• Branding and policies of the free link shortener may not align well with the values of the institution the user is representing.

Taking into account the above considerations, SURF developed a new service called “edu.nl”. Grown out of a ‘Friday afternoon’ project, the edu.nl link shortener service was launched in The Netherlands in Oct 2019 to see its popular rise sharply in the two first months after it was moved from being a SURF staff only service to become a broadly available community service. Figure 1 shows some of the user statistics over the past few months. Since its launch over XXX k links were registered.

Figure 1: edu.nl usage in The Netherlands

This incubator project seeks to enhance the capabilities of the existing edu.nl codebase and make them ready for purpose to deliver a service that could be operated for the benefit of the GÉANT community as a whole, branded as the eduLNK service.

The software supporting edu.nl will be made available to the GÉANT community by SURF for the purpose of this project.

The eduLNK service should offers a free to use service for end users in our community to resolve and mitigate some of the aforementioned issues:

• The service is to be operated by a trusted third party without a need to make a profit from operating the service. This removes the need for advertising or selling off personal data.
• The eduLNK service will actively protect and preserve end user privacy and limit the amount of personal data collected to the absolute minimum.
• By allowing only community members to create short links, the edulnk.org link shortener is much more trusted as compared to other link shorteners. Also, the eduLNK operator may act upon abuse and engage with the users institution to resolve such issue as part of its acceptable use policy. eduLNK will use InAcademia community edition to verify if a user is a member of the R&E community *
• The eduLNK service will try to actively filter out known dangerous links, reducing the risk of exposing users to malware and other treats *
• The service may be supported in as many languages as the community is willing to provide support for *
• Update / change link by end users
• eduLNK will offer long lifetimes for links before they expire. While storing links for a long time will take some effort, it is noted that the price of storage are rather low.

For institutions in the GÉANT community, eduLNK offers additional capabilities:

• An institution may add their own preferred domain name to the link shortener, so they can align this usage with institutional policies and branding. To add a domain, they will have to prove they own the domain. For end users coming from institutions which support the use of their own domain, they may choose to use either the institutional selected domain or the eduLNK domain name as part of their link shortener *
• For any domain added by an institution, the institution has the ability to download and thus preserve the links made by their users using the institutionally provided domain. This allows institutions to preserve the links even in case the eduLNK service itself would end its service *

The features marked with a * are currently not yet supported in the software developed by SURF. This incubator activity will add these and contribute them back to the software project. At the same time the incubator will work with the relevant work packages in the GEANT project to establish who such a service could be offered to the community most efficiently.

#Please describe the goals of Activity, including what needs to be delivered, participants, the community(ies) that require a solution. Describe when the Activity is done and how to measure the success of it, in a SMART way. - delete this line after using the template#

<Enter here>

#Please describe the technical details for the Activity. - delete this line after using the template#

<Enter here>

#What is the business case for the Activity? Who would be beneficiaries of the results of the Activity and what would potential business case look like if applicable? - delete this line after using the template#

<Enter here>

#Are there risks that influence either the implementation of the activity or its outcomes? - delete this line after using the template#

<Enter here>

#How do data protection and privacy impact the Activity? Think about e.g. handling of personal data of users - delete this line after using the template#

<Enter here>

#Please describe here the set of criteria that the product must meet in order to be considered finished. - delete this line after using the template#

<Enter here>

#How are the results of the Activity intended to be used? If this requires further engagement, can you describe how you intent to sustain it? - delete this line after using the template#

<Enter here>