Re: [113attendees] Can't use US site from EU (Re: US Vaccine Record (QR code for MASS residents))

Donald Eastlake <d3e3e3@gmail.com> Fri, 25 March 2022 16:55 UTC

Return-Path: <d3e3e3@gmail.com>
X-Original-To: 113attendees@ietfa.amsl.com
Delivered-To: 113attendees@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EBE883A171E for <113attendees@ietfa.amsl.com>; Fri, 25 Mar 2022 09:55:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.858
X-Spam-Level:
X-Spam-Status: No, score=-1.858 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, FREEMAIL_ENVFROM_END_DIGIT=0.25, FREEMAIL_FROM=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01, URIBL_BLOCKED=0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id OHtdJHhytN_G for <113attendees@ietfa.amsl.com>; Fri, 25 Mar 2022 09:55:10 -0700 (PDT)
Received: from mail-lf1-x130.google.com (mail-lf1-x130.google.com [IPv6:2a00:1450:4864:20::130]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 594493A1762 for <113attendees@ietf.org>; Fri, 25 Mar 2022 09:55:10 -0700 (PDT)
Received: by mail-lf1-x130.google.com with SMTP id w7so14377714lfd.6 for <113attendees@ietf.org>; Fri, 25 Mar 2022 09:55:10 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=ZU0Nptu7YjONWnPFkdY4yxwGSM9/jzXD2G/jLNkhqRM=; b=Ov6/WlBAwYorVmQsHgKjT1BiMOQfwSUgEpF9+JzxXT93Zbh87mCHZyv/gCZphVoXZT Z2daUwCvMuq9T56IdaX5M4qZ3QXz1IpU/nu7XHsJGgkVT8Mhv7vjV16oNOvqBADgTXtE hM3SMB4yVC8DRwumE4hMw4mgvb406wW/c5fhEwKL1lVs8ao9hhqshsA25uxMinxu3RDk YHiSQkmGDi8+Zq9x/7z5YZ79LVmVZ6hxCqoxKc4iQHlTqu0wn3FPf9VxI/nGJxc6Pmjm td6rcDSWWFeVItOUE9vPdrD0IOOukMxscKKAj1qUHXrRV6F072Z9x7QhKlqEeXbwP1ph +m7Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:references:in-reply-to:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=ZU0Nptu7YjONWnPFkdY4yxwGSM9/jzXD2G/jLNkhqRM=; b=oxpFgpZ5nTTH+v32Q2K0SNGxW6sAMNmkCDcDo282rRsuX1lMOkhCf2ZljHWAJHGlIg m+aeLaGVSixn3sdLMnlBQRSFwzk2kdcizGDsvz8VWI2qkYkcJiB97+Xq3vxdYnqLKgGL 4KQT9VnpWn2iJUaxohdhmcingGHjgA3yLG4MgKFs7t+s2eyvvjnlnAF1m8aw0OdUcLt9 Ikz8MNedFOsHlJx1Ixgb6v/PUeRCGnh5+9bioptgdMF+H/ZEjKoAeX4nhdp/cWHhQG7P 6UFQhDE2K6KgXz7BSVg8dKa6kNbkUiQa0NXL/e7Lc9jU1MSRudhRxqP79+jFfLeedxrv 1bBg==
X-Gm-Message-State: AOAM530Mxy/BVIRQwPMrJDB0QsRYdGWyBQLKihm5NOgzifShmXnyx6fc qWLMYW+LYAhKmiLCj66Mya7XxFfbiI7gYTLUaCM=
X-Google-Smtp-Source: ABdhPJyMLdPmmlsukEgOV1cuKkQVO6j7LNVl1fCbro/x4OSNGHUM/bEl2GF8sWvCuFIfB1wQH/2KMSxuDoZH7ATuL2s=
X-Received: by 2002:a05:6512:68d:b0:44a:cc2:78b5 with SMTP id t13-20020a056512068d00b0044a0cc278b5mr8109145lfe.43.1648227307475; Fri, 25 Mar 2022 09:55:07 -0700 (PDT)
MIME-Version: 1.0
References: <BYAPR05MB56549BAFE2F0BD53A4667EB0D41A9@BYAPR05MB5654.namprd05.prod.outlook.com> <Yj2SzR81JwElN6/R@puck.nether.net> <8D2CC4BD-770B-43F8-95B3-625DAB359813@tzi.org> <476ff812-3d78-4dd9-a62a-ed5ee68b44ea@evequefou.be>
In-Reply-To: <476ff812-3d78-4dd9-a62a-ed5ee68b44ea@evequefou.be>
From: Donald Eastlake <d3e3e3@gmail.com>
Date: Fri, 25 Mar 2022 12:54:56 -0400
Message-ID: <CAF4+nEFya4K-UKc7soL1107sxCMX3d5XnEswCPg6u+29hgEpNQ@mail.gmail.com>
To: Mike Bishop <mbishop@evequefou.be>
Cc: Carsten Bormann <cabo@tzi.org>, Jared Mauch <jared@puck.nether.net>, "113attendees@ietf.org" <113attendees@ietf.org>, "Jeffrey (Zhaohui) Zhang" <zzhang=40juniper.net@dmarc.ietf.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Archived-At: <https://mailarchive.ietf.org/arch/msg/113attendees/gtVuMsRajbCtnT9L7OTBesdkkWY>
Subject: Re: [113attendees] Can't use US site from EU (Re: US Vaccine Record (QR code for MASS residents))
X-BeenThere: 113attendees@ietf.org
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Mailing list for IETF 113 attendees <113attendees.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/113attendees>, <mailto:113attendees-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/113attendees/>
List-Post: <mailto:113attendees@ietf.org>
List-Help: <mailto:113attendees-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/113attendees>, <mailto:113attendees-request@ietf.org?subject=subscribe>
X-List-Received-Date: Fri, 25 Mar 2022 16:55:16 -0000

Use a VPN.

Thanks,
Donald
===============================
 Donald E. Eastlake 3rd
 2386 Panoramic Circle, Apopka, FL 32703 USA
 d3e3e3@gmail.com

On Fri, Mar 25, 2022 at 11:52 AM Mike Bishop <mbishop@evequefou.be> wrote:
>
> It's not just the EU, though. I've encountered occasional sites who have apparently decided that since essentially all their customers are US-based and a large portion of their attack traffic is from outside the US, they will drop all incoming traffic from outside the US and a few other countries. Makes them annoying to deal with while traveling.
>
> When I've contacted support to complain, one offered to whitelist my particular IP address if it was stable, but all basically shrugged and said "security!"
>
> Sent from Nine
> ________________________________
> From: Carsten Bormann <cabo@tzi.org>
> Sent: Friday, March 25, 2022 11:23 AM
> To: Jared Mauch
> Cc: 113attendees@ietf.org; Jeffrey (Zhaohui) Zhang
> Subject: [113attendees] Can't use US site from EU (Re: US Vaccine Record (QR code for MASS residents))
>
> On 2022-03-25, at 11:00, Jared Mauch <jared@puck.nether.net> wrote:
> >
> > (aside: I've found there's many US local government sites that must have
> > some local firewalls or something that block the use of services from
> > EU)
>
> This is a really interesting side observation.
>
> How did that happen?
>
> When the European GDPR came out, there were a lot of consultants that saw easy money and offered their services to US organizations for help in handling the (completely overblown) legal risks that might come out of that.
> Instead, many US organizations simply opted not to buy their expensive services but to simply block clients on EU-localized addresses instead.
> (Hint: That blocking does not reduce any legal risk, because I’m still an EU citizen even if I access your services from a “US-localized” IP address.  Maybe it would have been worth to look at GDPR and find out that the underlying rules for data protection after all hadn’t really changed from the status quo ante.)
>
> Result: the greedy consultants came out empty-handed, but at the same time caused a lot of damage by severely hampering the world-wide availability of US services and products.
>
> See the graphics on pages three and five of http://gandalf.fee.urv.cat/professors/AntonioQuesada/Curs1920/Cipolla_laws.pdf
> for some help on the economic theory that applies here.
> Clearly, we are in sector B2 here.
>
> Grüße, Carsten
>
> --
> 113attendees mailing list
> 113attendees@ietf.org
> https://www.ietf.org/mailman/listinfo/113attendees
> --
> 113attendees mailing list
> 113attendees@ietf.org
> https://www.ietf.org/mailman/listinfo/113attendees