Online EU-consultatie - Bewerkingsoverzicht

Rrr: categorie geschiedenis

2011-07-23T13:51:15Z

categorie geschiedenis

Rrr: number

2011-02-22T17:23:34Z

number

Rrr: /* Which features has the system concerning reporting? */

2011-02-22T17:21:07Z

‎Which features has the system concerning reporting?

Rrr: /* Which features has the system concerning reporting? */

2011-02-22T17:12:48Z

‎Which features has the system concerning reporting?

Rrr: /* Which features has the system concerning the storage of personal data? */

2011-02-22T17:10:49Z

‎Which features has the system concerning the storage of personal data?

Rrr: /* Which features has the system concerning the integrity of personal data? */

2011-02-22T17:07:16Z

‎Which features has the system concerning the integrity of personal data?

Rrr: /* Which features has the system concerning the confidentiality of personal data? */

2011-02-22T17:00:32Z

‎Which features has the system concerning the confidentiality of personal data?

Rrr: /* Which data input features has the system? */

2011-02-22T16:54:00Z

‎Which data input features has the system?

Rrr: /* Which data input features has the system? */ ingekort

2011-02-22T16:53:24Z

‎Which data input features has the system?: ingekort

Rrr: /* What are the technical characteristics of the system? */ 140 characters

2011-02-22T16:46:33Z

‎What are the technical characteristics of the system?: 140 characters

← Oudere versie		Versie van 23 jul 2011 om 13:51
Regel 279:		Regel 279:

	The service is designed for "petition service providers" rather than NGO's and activists. They are considered as end-users (like any citizen). By having many different end-users using the same system the tool becomes more reliable because of the neutral position of the petition service provider. End-users need less marketing because of the experience and trust many of the citizens already have signing other petitions or citizens initiatives with the same national service. The economies of scale makes it also cheaper to operate the service. One or a few such service in each region in Europe would do. Using the API and the network of EuroPetition the signatures can be synchronised and exchanged in such a decentralised network.		The service is designed for "petition service providers" rather than NGO's and activists. They are considered as end-users (like any citizen). By having many different end-users using the same system the tool becomes more reliable because of the neutral position of the petition service provider. End-users need less marketing because of the experience and trust many of the citizens already have signing other petitions or citizens initiatives with the same national service. The economies of scale makes it also cheaper to operate the service. One or a few such service in each region in Europe would do. Using the API and the network of EuroPetition the signatures can be synchronised and exchanged in such a decentralised network.
		+
		+	[[Category:geschiedenis]]

← Oudere versie		Versie van 22 feb 2011 om 17:23
Regel 1:		Regel 1:
	'''ISA study for open source software for online collection of statements of support for European citizens’ initiatives'''		'''ISA study for open source software for online collection of statements of support for European citizens’ initiatives'''
		+
		+	Successfully submitted at 18:22 Feb 22. The IPM reference number is: 409126123221805311

	Questionnaire for Member States, EU institutions and other organisms regarding the use of		Questionnaire for Member States, EU institutions and other organisms regarding the use of

@@ Regel 259: / Regel 259: @@
 Only signatories have writing priviliges in the database. They can alter their own signature (using the unique link with token) until the collection of signatures is 'frozen' and exported for the hand over to the authority. The lead petitioner/organiser can never add or alter signatures. Signatures can be flagged for deletion by the petities.nl staff. Deletion of signatures is carried out based on a formal neutral set of criteria.
 . Did you apply any existing practice standards for specific subject as security,
   usability, accessibility, etc, in the development of the system? E.g; ISO standards,...
-The website scored the highest in all criteria for the national accessibility standard and received three stars out of three (drempelvrij.nl)
+The website scored the highest in all criteria for the national accessibility standard and received three stars out of three (drempelvrij.nl) (200 char)
 The usability of the site has been tested since 2005 by nearly 1,5 million users, resulting of hundreds of e-mail comments translated into usability improvements.
 As a security guideline we prefer not to store data we do not need.

← Oudere versie		Versie van 22 feb 2011 om 17:12
Regel 230:		Regel 230:

	Export as PDF or as .csv with fields required by authorities. In the case of a citizens initiative more fields are included than in the case of a petition. The exported information also includes information about signatories which have chosen to remain invisible through the website. E-mail addresses are always excluded from the export. Maximum three e-mailings can be broadcast to the signatories through our system, but never executed by any citizen or any authority, moderated by the administrators of the Foundation Petitions.nl, based on a formal, neutral set of criteria.		Export as PDF or as .csv with fields required by authorities. In the case of a citizens initiative more fields are included than in the case of a petition. The exported information also includes information about signatories which have chosen to remain invisible through the website. E-mail addresses are always excluded from the export. Maximum three e-mailings can be broadcast to the signatories through our system, but never executed by any citizen or any authority, moderated by the administrators of the Foundation Petitions.nl, based on a formal, neutral set of criteria.
		+
		+	-> Export as PDF or as .csv with fields required by authorities. citizens initiative more than a petition, including signatories invisible through the website. E-mail addresses excluded from the export. (200 char)

	8.2 Who has the authority to view reports and/or export this information?		8.2 Who has the authority to view reports and/or export this information?

← Oudere versie		Versie van 22 feb 2011 om 17:10
Regel 219:		Regel 219:
	On the petities.nl servers firewalls and access control lists protect against unauthorized access. Maintenance on the servers is only possible through secured and encrypted connections. The servers will only run those services that are required for petities.nl. The database is only accessible from the servers itself and access to the petities.nl database is restricted.		On the petities.nl servers firewalls and access control lists protect against unauthorized access. Maintenance on the servers is only possible through secured and encrypted connections. The servers will only run those services that are required for petities.nl. The database is only accessible from the servers itself and access to the petities.nl database is restricted.

		+	-> Secured datacenter, equipped with backup-power generators and fire detection systems. Firewalls, access control lists, maintenance over secured connections, database only from server or restricted (200 characters)

	=Which features has the system concerning reporting?=		=Which features has the system concerning reporting?=

← Oudere versie		Versie van 22 feb 2011 om 17:07
Regel 186:		Regel 186:

	Malicious input is prevented. Inserting input other than plain text (e.g. javascript or other code) will result in the unsollicited input being removed. We verify and escape user input to prevent SQL injections and use SQL prepared statements where possible. Furthermore, CSRF tokens are implemented to prevent cross site request forgery attempts. We use SSL encrypted connections for all administrative actions, to prevent man-in-the-middle attacks.		Malicious input is prevented. Inserting input other than plain text (e.g. javascript or other code) will result in the unsollicited input being removed. We verify and escape user input to prevent SQL injections and use SQL prepared statements where possible. Furthermore, CSRF tokens are implemented to prevent cross site request forgery attempts. We use SSL encrypted connections for all administrative actions, to prevent man-in-the-middle attacks.
		+
		+	-> Input other than plain text results is stripped. SQL injections prevented, using SQL prepared statements. CSRF tokens to prevent cross site request forgery. SSL for admin to prevent man-in-the-middle

	=Which features has the system concerning the storage of personal data?=		=Which features has the system concerning the storage of personal data?=

@@ Regel 139: / Regel 139: @@
 The e-mail address functions as the login and a token e-mailed to the signatories is the password. The token is included in a unique URL which gives direct access to the signature confirmation page by following the link in the e-mail. It is not required to enter a password anywhere, just following a link in an e-mail is the most user friendly solution. In the first version a username and password combination was used, but this proved to be a huge obstacle to achieve volume. With this design one can only sign once per e-mail address.
 .3 Does the system have authentication mechanisms, such as login and password,
@@ Regel 144: / Regel 146: @@
 Yes, the database administrators and the lead petitioners (author of petition or citizens initiative) do have a login and password accessible through the petities.nl/admin screen. The e-mail address is the login.
 .4 Which measures (e.g. protocols,...) were implemented to ensure a secure
   client-server conversation throughout the entire dialogue ? e.g. (HTTPS,...)
 The https-protocol is used (and soon also ipsec under IPv6) for the lead petitioners and the database administrators and petition managers (authorities receiving petitions through petities.nl). Confirming a signature will also go through https in version 3.2 (spring 2011). In version 3.1 signatories confirm their signature over http.
 =Which features has the system concerning the integrity of personal data?=

← Oudere versie		Versie van 22 feb 2011 om 16:54
Regel 126:		Regel 126:

	4.6.2 Is it easy to add an additional language?		4.6.2 Is it easy to add an additional language?
		+
		+	Yes

	=Which features has the system concerning the confidentiality of personal data?=		=Which features has the system concerning the confidentiality of personal data?=

@@ Regel 97: / Regel 97: @@
 Existing databases with signatures can be uploaded to the website on request, under the condition that each signature comes with a working e-mailaddress and each signature (statement of support) is confirmed by e-mail.
 .2 Are the data fields fixed or can they vary per country, region or
@@ Regel 102: / Regel 104: @@
 Certain data fields can remain hidden or not compulsory. For example, petitions have less compulsory fields than citizens initiatives. Our ambition is to further the petitions datastandard from the EuroPetition project and establish an XML standard for both petitions and citizens initiatives, with petitions being 'upwards compatible' to citizens initiatives. In other words, an citizens initiative which does not comply to formal requirements can still function in the same system as a petition.
 .3 Does the system allow the definition of input controls on certain fields? (e.g. data format, number format)
@@ Regel 118: / Regel 122: @@
 Using the Tolk add on, automatic translation to any language are possible. First only the English translation will be formally available. Other translations will be implemented when there is funding for high quality translations.
 .6.2 Is it easy to add an additional language?

← Oudere versie		Versie van 22 feb 2011 om 16:46
Regel 82:		Regel 82:

	The source code is licensed under version 3 of the Affero General Public License (AGPLv3). The AGPLv3 is an OSI approved open source license that provides specific provisions for web-applications that are used (for example, software-as-a-service) but not redistributed. The license requires all derivative works to maintain a public download of all changed source code.		The source code is licensed under version 3 of the Affero General Public License (AGPLv3). The AGPLv3 is an OSI approved open source license that provides specific provisions for web-applications that are used (for example, software-as-a-service) but not redistributed. The license requires all derivative works to maintain a public download of all changed source code.
		+
		+	-> The source code is licensed under version 3 of the Affero General Public License, an OSI approved license with provisions for web-applications.(140 characters)
		+
		+
	3. Does the tool contain help functionalities or frequently asked questions?		3. Does the tool contain help functionalities or frequently asked questions?