April 4th, 2007

The first time I stayed in a hotel was when I was 12 and I and my brother met my father for holiday in Hawaii. We'd stayed in motels before–this was the era of the auto vacations–but never a multi-story hotel, where you accessed your room using an elevator.

When we got to our room, my Dad took us out into the hallway and pointed out the Exit sign. He told us that if a fire happened, we should not use the elevator. Instead, we should look for the Exit signs and follow them out of the building.

Since that one trip, I briefly pause at my door and locate the nearest exit before entering my room in hotels.

That trip was also the first time I flew on a plane. It was wonderful–scary and exciting. When the stewardess talked about what to do in case of an crash landing, I paid attention. To this day, I still pay attention–not because I don't know what to do (butt, meet lips), but because it's rude to ignore this poor soul who has to go through the motions. Shades of fatalism aside, I do check to see what is the closest exit when I find my seat. Old habits are hard to break.

My check for the exit bleeds over into my use of web services. No matter how clever a service, I never use it if it doesn't have an exit strategy.

Recently, I took a closer look at the possibility of using Feedburner for serving up my feed. Now that I've moved my photos offsite to Amazon's S3 service, the feeds are now the most massive bandwidth use. With my new austerity program of minimizing resource use, the use of Feedburner is attractive: let it serve up the feeds, with its much more efficient use of bandwidth.

My first thought, though, was: what's the exit strategy? After all, it's easy for me to redirect my feeds (all but the RSS 1.0) to Feedburner: I can adjust my .htaccess file to redirect traffic for all requests that don't come from the Feedburner web bot. But what happens if I decide to bail on Feedburner?

This question was asked of the Feedburner staff last year, and the organization responded with an exit plan. It's a month long process where you can redirect from Feedburner back to whatever feed URI you want. At the end of that time, all aggregators should have an updated feed URI–all without people having to manually edit feed subscriptions.

As such, I'm trying the service out, see how it goes. I know that if I decide I don't like it, I can bail. If the worst case scenario happens, with Feedburner going belly up, then people know where to find my weblog and will have to manually edit their feeds. That's also an exit, albeit more like jumping out a window than walking down stairs.

When I used Flickr, the API was what sold me on the service more than anything. When I decided to not use Flickr, the first thing I did was use an existing application to export a dump of all the original images, to ensure I had a copy of each. If I wanted to, I could also export the metadata and comments. I then ran an application to make an image capture of all the photos I had linked in my web pages, saving the photos locally still using the image names that Flickr generated.

I created a program that then converted all Flickr, as well as other photo URIs, to using one local URI: http://burningbird.net/photos/. This is redirected using the .htaccess to Amazon S3. If I decide to stop using Amazon the exit strategy is very simple: run an API call and pull down the images into one location; stop redirecting to that service and either host the images locally, or redirect to another storage service.

I use Bloglines, but I can easily export my subscriptions as OPML. Though it lacks much as a markup vocabulary, OPML is becoming ubiquitous as a way of managing feed subscriptions. I can then use this file to import subscriptions into Newsgator, or even a desktop hosted tool, like NetNewsWire.

I won't use a hosted web service like Typepad or weblogs.com. It's too easy for them to decide that you're 'violating' terms of service, and next thing you know, all your weblog entries are gone. I saw this with wordpress.com in the recent events that caused so much discussion: in fact, I would strongly recommend against using wordpress.com because of this–the service is too easily influenced by public opinion.

I don't use either my Yahoo or Gmail mail accounts. Regardless of whether I can get a copy of my email locally, if I decide to not use either account I have no way of 'redirecting' email addresses from either of these to the email address I want to use. (Or if there is a way, I'm not aware of it.) Getting a copy of my data is not an exit strategy–it's an export strategy. An exit strategy is one where you can blow off the service and not suffer long-term consequences. A 'bad' email address is definitely a long-term consequence*.

Instead, I have a domain, burningbird.net, which I use for everything. I will always maintain this domain. My email address listed in the sidebar, will always be good.

There was a lot of discussion about Yahoo Pipes recently. Pipes is an interesting innovation, and excellent use of the Canvas object–my hat's off to the creators for their UI design. However, the service has one major drawback: it's a hosted solution. If you want to 'export' your Pipe, you can't. There's no way to generate, say a PHP application, from the Pipe, which creates the web service requests for you that can be run locally. No matter how good and interesting the service–there's currently no exit strategy.

Anytime you find yourself saying, or even thinking, how 'dependent' you are on a service, you should immediately look for the exit strategy. If there isn't one, decrease your dependency. The web is an ephemeral beast; the path of least resistance is 404, not 200. All pages will end someday. The same can be said for services.

Where are you vulnerable? What's your exit strategy?

*An option for email is to use a local email address, and forward all email to Yahoo or GMail.

Comments
1

I think your point about gmail is a good one, though I myself am a gmail user. One thing I'll note: Google apps for your domain has an exit strategy. You simply redirect at the DNS level.

Pretty much everyone outsources mail in one way or another. The google apps service is not a bad way of doing it.

2

[…] Powers has an excellent post discussing exit strategies for web services. My check for the exit bleeds over into my use of web services. No matter how clever a service, I […]

3
Doug - 11:40 am 4/4/2007

I know that it wasn't your point at all, but it sounds like you don't have much confidence in the survivability of an airline crash.

In fact, the number of airliner crashes which are 100% fatal is very low. Not counting the 4 non-accidents of September 11, 2001, the only jetliner crashes in the US in the past 10 years that had no survivors were Alaska Airlines flight 261—an MD-83 that broke up in flight off the California coast on January 31, 2000—and American Airlines flight 587—an Airbus A-300 that crashed into Queens shortly after takeoff on November 12, 2001. You might also count Comair (US Air Express) flight 5191—a Bombardier CRJ-100 that ran off the end of the wrong runway in Lexington, Kentucky on August 27, 2006—that was on a commuter airline, and there was one survivor (the co-pilot) but none of the passengers survived.

Most jetliner crashes and incidents are quite survivable. Out of the approximately 10 million scheduled airline flights (jet and otherwise) in the US each year, there are typically around 30 to 50 accidents and incidents. On average, only 2 result in any fatalities at all. And on average, all have some survivors. (Data obtained from the NTSB Web site).

4
Karoli - 12:24 pm 4/4/2007

I use GMail precisely because it does have so many exit points and yet gives me great access wherever and whenever I need it.

Not only does it have exit points, I'm able to store a copy to a private GMail address that no one but me is aware of, and I can back it up to Outlook locally whenever I want.

5

GMail has a really good exit strategy. It not only allows you to access your GMail account using POP3, it lets you forward incoming mail to another address. I've moved to a new e-mail address with no problems at all. I can't speak to Yahoo, though.

6
Shelley - 1:39 pm 4/4/2007

But what if Google closes down GMail? You're all making a supposition that this service will last forever.

What if it doesn't? Or what happens if you get really pissed at Google, because of the fact that your privacy is in question, and you decide you don't to use the gmail application? How do you deal with the dozens, hundreds, thousands of people who have a gmail address as the only address?

Remember, I'm talking about an 'exit' strategy — completely and cleanly leaving the application.

I had an account and closed it down. Google doesn't return a 'user not found' error for email sent to the old address. Yet I can't access any mail sent. This is an example of a web service that does NOT have a good exit strategy.

(Doug, I stand corrected on the safety of flying. Grant me some poetic license.)

7
Allan Moult - 5:03 pm 4/4/2007

Here's a classic example of what can happen via a hosted service, in this case Six Apart.

Take down notice.

8
Bud Gibson - 7:28 pm 4/4/2007

Shelley, with google apps for your domain, you exit gmail by changing your MX record. In this case, gmail is effectively acting as your mail agent, nothing more. If you use pop access with google apps, you can retain your mail data.

9
Shelley - 8:07 pm 4/4/2007

Thanks for the info, Bud. I was thinking more of the overall global GMail. Or any centralized web service application.

10
Shelley - 8:08 pm 4/4/2007

Allan, I dropped a note in the post you linked, letting them know the EFF wants to hear of these. Sending C & D without justification is also against the law.

But yeah — excellent example of being cautious around hosted solutions.

11

I didn't realize Feedburner had an exit plan now. The lack of an exit plan has prevented us from using the service for clients at my day job, so it's good to know they have one now. Thanks.

12
John - 12:16 pm 4/5/2007

Great post - though I was surprised to see TypePad as an example of a service without an exit. One of the things I love about working with TypePad and Movable Type is how easy it is to import and export your info. Just click the "Export" link in your settings to download a copy of all your posts and comments. My company does a lot of blog and site migrations using this.

13
Shelley - 12:23 pm 4/5/2007

John, it's not the export capability I'm critical of — it's the TOS and the fact that a web site can be taken down immediately, and a person not allowed to recover their previous posts.

Does Typepad allow a person to export their posts after a TOS violation take down?

14
jr - 12:51 pm 4/5/2007

I've wondered what good an exit strategy would be if a host decided it wanted more money to keep you data and held your existing data hostage until you pay up. Kind of "one false move and the data gets it".

15
Shelley - 6:26 pm 4/5/2007

I'm not completely sure that would be legal, jr. But it is a good reason to have two copies of any data of importance, in separate locations.

16
John - 4:28 am 4/6/2007

Per the link in the comments here, it does seem like TypePad gives you advance notice before any take down. That would be a good time to backup your data.

17
Shelley - 5:10 am 4/6/2007

Agree John. But that's for a formal C & D. What about so-called 'objectionable' data? Or the case with wordpress.com, and taking down weblogs associated with Kathy Sierra?

Thanks to all those who have contributed to the discussion. Comments are now closed, but you can contact the author of the post directly.