Hacker News new | ask | show | jobs
by jbob2000 2662 days ago
We are distinctly not allowed to use URL shorteners at my enterprise company and our fraud prevention department regularly educates us about the dangers of clicking URL-shortened links (you have no idea if it will send you to a phishing site or not).

URL shortening was created so people could send tweets without using up their character counts on a URL. I'm pretty sure most software companies aren't communicating via Twitter, so I'm not sure the practical application of this anyways.

Good luck.

1 comments

It's less of a link shortener and more of a link manager for companies. The concern that companies have with URL shorteners is they can't manage who is creating these links, and who owns these links. With GoLinks, the company will own the links, they can manage, edit, update, delete any links within the organization, so they will be centralized. The added benefit is that with a memorable link, you can access go/benefits much easier than bit.ly/fE7r232r. URL shorteners aim to shorten links, Golinks aims to make links memorable.
The issue is that you obfuscate the destination of the link. This is a big no-no in enterprise fraud prevention. We train people to only click trusted links. How do I know whether a golink is trusted or not? And what if my golinks account is compromised and all my links get redirected to phising sites? All of this huge risk so... people can remember the link?
These are all great questions. Security is definitely our number one priority, especially since most of our customers are large enterprises. In order to create a link, you must first authenticate with your company's Single Sign-on solution to access the dashboard. If a user cannot properly be authenticated through Okta, GSuite, or another SSO, then that user cannot use the shortened link and cannot access the knowledge base of links. Second, all of the destinations can be audited in the dashboard, and we're currently testing solutions for checking the safety of a link that users can redirect to. This is unique to a golink system since the company can set these policies up for its users. For example, as an admin, you can disallow "http" links and force all links to use "https" to increase the security of the links. Now the company has control over which links are allowed to be used. The memorable link portion is also an added benefit of implementing a golink system.