[113attendees] Can't use US site from EU (Re: US Vaccine Record (QR code for MASS residents))

Carsten Bormann <cabo@tzi.org> Fri, 25 March 2022 15:22 UTC

Return-Path: <cabo@tzi.org>
X-Original-To: 113attendees@ietfa.amsl.com
Delivered-To: 113attendees@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 528ED3A1592 for <113attendees@ietfa.amsl.com>; Fri, 25 Mar 2022 08:22:51 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.909
X-Spam-Level:
X-Spam-Status: No, score=-1.909 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=unavailable autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 3a-X2wbagI-t for <113attendees@ietfa.amsl.com>; Fri, 25 Mar 2022 08:22:46 -0700 (PDT)
Received: from gabriel-smtp.zfn.uni-bremen.de (gabriel-smtp.zfn.uni-bremen.de [IPv6:2001:638:708:32::15]) (using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id E2D713A1595 for <113attendees@ietf.org>; Fri, 25 Mar 2022 08:22:45 -0700 (PDT)
Received: from [192.168.217.118] (p5089ad4f.dip0.t-ipconnect.de [80.137.173.79]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by gabriel-smtp.zfn.uni-bremen.de (Postfix) with ESMTPSA id 4KQ5SL1rTVzDCcl; Fri, 25 Mar 2022 16:22:42 +0100 (CET)
Content-Type: text/plain; charset="utf-8"
Mime-Version: 1.0 (Mac OS X Mail 13.4 \(3608.120.23.2.7\))
From: Carsten Bormann <cabo@tzi.org>
In-Reply-To: <Yj2SzR81JwElN6/R@puck.nether.net>
Date: Fri, 25 Mar 2022 16:22:41 +0100
Cc: "Jeffrey (Zhaohui) Zhang" <zzhang=40juniper.net@dmarc.ietf.org>, "113attendees@ietf.org" <113attendees@ietf.org>
X-Mao-Original-Outgoing-Id: 669914561.854357-e7ba0c28b414f63bc359efa94c548e23
Content-Transfer-Encoding: quoted-printable
Message-Id: <8D2CC4BD-770B-43F8-95B3-625DAB359813@tzi.org>
References: <BYAPR05MB56549BAFE2F0BD53A4667EB0D41A9@BYAPR05MB5654.namprd05.prod.outlook.com> <Yj2SzR81JwElN6/R@puck.nether.net>
To: Jared Mauch <jared@puck.nether.net>
X-Mailer: Apple Mail (2.3608.120.23.2.7)
Archived-At: <https://mailarchive.ietf.org/arch/msg/113attendees/IblLerNutDEliPzF7FeqeE_MNlo>
Subject: [113attendees] Can't use US site from EU (Re: US Vaccine Record (QR code for MASS residents))
X-BeenThere: 113attendees@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Mailing list for IETF 113 attendees <113attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/113attendees>, <mailto:113attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/113attendees/>
List-Post: <mailto:113attendees@ietf.org>
List-Help: <mailto:113attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/113attendees>, <mailto:113attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Mar 2022 15:22:51 -0000

On 2022-03-25, at 11:00, Jared Mauch <jared@puck.nether.net> wrote:
> 
> (aside: I've found there's many US local government sites that must have
> some local firewalls or something that block the use of services from
> EU)

This is a really interesting side observation.

How did that happen?

When the European GDPR came out, there were a lot of consultants that saw easy money and offered their services to US organizations for help in handling the (completely overblown) legal risks that might come out of that.
Instead, many US organizations simply opted not to buy their expensive services but to simply block clients on EU-localized addresses instead.
(Hint: That blocking does not reduce any legal risk, because I’m still an EU citizen even if I access your services from a “US-localized” IP address.  Maybe it would have been worth to look at GDPR and find out that the underlying rules for data protection after all hadn’t really changed from the status quo ante.)

Result: the greedy consultants came out empty-handed, but at the same time caused a lot of damage by severely hampering the world-wide availability of US services and products.

See the graphics on pages three and five of http://gandalf.fee.urv.cat/professors/AntonioQuesada/Curs1920/Cipolla_laws.pdf
for some help on the economic theory that applies here.
Clearly, we are in sector B2 here.

Grüße, Carsten