GCSEPod Domains

[foofighterjim]

Does anyone else think the list of URLs that GCSEPod request to be whitelisted are a. excessive and b. potentially risky?

 

• *gcsepod.com

• *.brightcove.com

• *.sharethis.com

• *.analytics.edgekey.net

• *.cloudfront.net

• *.jquery.com

• *.newrelic.com

• *.google-analytics.com

• *.googleapis.com

• *.akamaihd.net

• *.akafms.net

• *.llnwd.net

• *.llnw.net

• *.brightcove.net

• *.brightcovecdn.com

• *.akamaitechnologies.com

• vjs.zencdn.net

 

So we are supposed to be happy to completely open up a video hosting site (brightcove, which looks fairly reputable, but still), AWS and a few other sites that I cant find any reasonable amount of information for, for everyone???

 

Did anyone else have similar concerns or encounter issues as a result of this whitelist? I do have the power to block this purchase going through should my concerns be justified.

 

I haven't been asked about MIS sync yet but I have seen that the roles they request also appear to be excessive.

[PotNoodleTech]

Under GDPR you can ask them what each domain is for, what data is stored there and if it is in the EU/UK or not.

[foofighterjim]

Good point, I'll take that route for now. I just don't see why so many domains are apparently needed as a whitelist, it gives me the impression that they don't know exactly where on the domains the data is going otherwise they would have specified.

[Arthur]

When my school trialed GCSEPod I didn't bother whitelisting any domains that were obviously tracking/analytics or social media related. The site worked fine.

 

analytics.edgekey.net
google-analytics.com
newrelic.com
sharethis.com