[arch-d] Re: IP Address Geolocation Considered Harmful

Phillip Hallam-Baker <phill@hallambaker.com> Mon, 23 March 2026 18:05 UTC

Return-Path: <hallam@gmail.com>
X-Original-To: architecture-discuss@mail2.ietf.org
Delivered-To: architecture-discuss@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D87BBD016BD0 for <architecture-discuss@mail2.ietf.org>; Mon, 23 Mar 2026 11:05:01 -0700 (PDT)
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -1.792
X-Spam-Level:
X-Spam-Status: No, score=-1.792 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, FREEMAIL_FORGED_FROMDOMAIN=0.001, FREEMAIL_FROM=0.001, HEADER_FROM_DIFFERENT_DOMAINS=0.001, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_NONE=-0.0001, RCVD_IN_MSPIKE_H2=0.001, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, TRACKER_ID=0.1] autolearn=no autolearn_force=no
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dIc1z3Jnjklo for <architecture-discuss@mail2.ietf.org>; Mon, 23 Mar 2026 11:05:01 -0700 (PDT)
Received: from mail-qv1-f45.google.com (mail-qv1-f45.google.com [209.85.219.45]) (using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature ECDSA (P-256) server-digest SHA256) (No client certificate requested) by mail2.ietf.org (Postfix) with ESMTPS id 49A84D016BC6 for <architecture-discuss@ietf.org>; Mon, 23 Mar 2026 11:05:01 -0700 (PDT)
Received: by mail-qv1-f45.google.com with SMTP id 6a1803df08f44-89c4feaaeb4so54920516d6.2 for <architecture-discuss@ietf.org>; Mon, 23 Mar 2026 11:05:01 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1774289095; cv=none; d=google.com; s=arc-20240605; b=GAjUfmJWD/cUmciTeaPkyLLJgN5dPCvBrTAu1F58Le5/JEP382xLdNbojMg29gDxrx BJLVmWz9OA3QZsX0VpTHJJMA8SBrltzmxkzcv0rPtZ3i3Mt/QrkW8rpSnQGnkcURHw5k T7Cqrrh/TbKheZGpTm463z+Wk0xdMmCgkf3c19t9jxQusqIhT2E4TJgfTOBUdom1kYT+ 3J2JLxKqRwvZOsopr4e3Dfc5HZO4TMNcP5xrP8s/u0TZUBRze/xjGbe0OPrAmtIQg+BT zEV52MsSR4o5fGC9znJ59MvcNifqsjZ1ApMS6r9/uFhHt8pkEki16iIh/PW0nP7pn/5H osuQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version; bh=zXuIFONhGnk6GrMBMtS9B2zPulHsyFfZcG5zZHRkNzw=; fh=bcHzZ0P+O3zCp9B6gSKW2rGv7HbgBPD5GYJzfWkIqt4=; b=iUjc3cR4oeOnFdDPM5utZjV5295zWH1dWj+7/F+n+wl57JqQz0qz9FHl9R91urV9yK rmU07+/mb7BeBAtPnxZd28QjOmW6tzkgq+fidl26CpwL/eA+OV9VI2cA1mgpzulkTs4A LeDvDHupGgxl0mBLDxbihOg5EkhCquJOeJZRtSprlezo0Tv9i6uIT1qZnzZHdSpcy2TQ sYtpWxIhRMZdKrkrDzHqp+yn7L+7XFAQyzLxtyRikVyPwclvWtpDUZ1xzbTj2doad3S0 ivXK+siDOPt8L9nRBHWc6qiq7hKjT8E/KM1hTocCH3sbR8j06P4s7/dq0UnUCB0JeXsb L9CQ==; darn=ietf.org
ARC-Authentication-Results: i=1; mx.google.com; arc=none
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1774289095; x=1774893895; h=cc:to:subject:message-id:date:from:in-reply-to:references :mime-version:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=zXuIFONhGnk6GrMBMtS9B2zPulHsyFfZcG5zZHRkNzw=; b=gGI8oy+HJYQbBBM2AzNWPqp4zX1BDTZO/5apn3RZQMKMyYXCN3McaaStIcr1xA6nD/ bZDqeddNZLhteNY26M6VzHWGjhH4VUSntoWgFPv2LmxilDRSOO+vcpHEz4do3H7souwM JPMCAhBc9lT1AzBAU+ky3CHdBa28Fg7G4TUm5VGV/J6iS1QWzUQ9tn1EK0s4i8f9Efnb o33im8AaN1yeLiRcJNcb9s7jf/6O5o2GDvoFcEzz9H9uGrMKGh3GvJnrI2Ytb/1aNwqM cTl+r04QkscDxLMGxfZp1A9ANO9OVzycPYg6DThhaAnEUocJA7M2PqLX5e4nmf/WjT0c 1lwg==
X-Gm-Message-State: AOJu0Yzg/bkobyDk8dNwsd0+nW8aNrzs++jyC3Kvm0y0se/RXfi031NE gJn6CFJoE9eK2gJf/zNiNgRy2d0NWegsgp4Rx7Lq3f6H3ZmQQHRArIDKbM2y7ZxAthnJK6182Vr He2U4E0p4IrfcDhEmVEfyZXOcn9wgP4uDTA==
X-Gm-Gg: ATEYQzw4qvwwXWvTGmvkCZ3BzRuawjMi483xgbKURsKRwhcO5HzMsIgEihz7hqGV2y9 23+6JYFWrZLnaD3hnyu5ViHUUfE/t+X7enuCI62wAG/KRT69M/M3T2IvclPAn4ARlGSggMjDGQQ sCqrsMNV5OGGA1dfTldIl3j1/rGxXgIjhGOjhtHlOtm/oqW89UUr46nPxtUeAAVW0dUmmxraKem 47BxVjpTD9H8OAdqfc4LYL4qfrO2vep0aNg9vC/sGOT3+i/SZXO3dMBBoLfAT0Lz1amOsIUba6x g5a2Rc4YVm7BMK2gqtpekmjezOuZCt5kEZrjztwQr5AHu1CMYgJHnequRKsJ2Bmb
X-Received: by 2002:a0c:f11a:0:b0:89a:502:6055 with SMTP id 6a1803df08f44-89c859f7094mr167764576d6.24.1774289094271; Mon, 23 Mar 2026 11:04:54 -0700 (PDT)
MIME-Version: 1.0
References: <AS5PR07MB1059657604189D9A847E14511894BA@AS5PR07MB10596.eurprd07.prod.outlook.com> <GV1PR08MB73465E95BECC656A3FBC70DDD34BA@GV1PR08MB7346.eurprd08.prod.outlook.com> <CABcZeBN1A7w4cMP=3Gn3LJ-ZsMgMSU3B_M-P=3HnHyGkyaAEyg@mail.gmail.com> <CACgrgBZM=1GmRitKdYm7dunK0DrYe_zzF-S0cxEdj+=+6LDciw@mail.gmail.com>
In-Reply-To: <CACgrgBZM=1GmRitKdYm7dunK0DrYe_zzF-S0cxEdj+=+6LDciw@mail.gmail.com>
From: Phillip Hallam-Baker <phill@hallambaker.com>
Date: Mon, 23 Mar 2026 14:04:41 -0400
X-Gm-Features: AQROBzBanJtCpH7EfbrEEQFTW8vty5YuPLtNurp0N37GWxM0rU3YUAhgOwyR-xI
Message-ID: <CAMm+LwhB1i+nm6Qdtt9cXHs=qTEZ8hWdy4cCMF9pitcAoBxF5Q@mail.gmail.com>
To: Henning Schulzrinne <hgs@cs.columbia.edu>
Content-Type: multipart/alternative; boundary="0000000000003169ea064db4dff3"
Message-ID-Hash: LWD2LNX64UCS77CNFDS5OPLGHGIKMCBA
X-Message-ID-Hash: LWD2LNX64UCS77CNFDS5OPLGHGIKMCBA
X-MailFrom: hallam@gmail.com
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-architecture-discuss.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
CC: "architecture-discuss@ietf.org" <architecture-discuss@ietf.org>
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [arch-d] Re: IP Address Geolocation Considered Harmful
List-Id: open discussion forum for long/wide-range architectural issues <architecture-discuss.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/architecture-discuss/MKEry5zjaGn7kOoL1KJV2Bj-NPs>
List-Archive: <https://mailarchive.ietf.org/arch/browse/architecture-discuss>
List-Help: <mailto:architecture-discuss-request@ietf.org?subject=help>
List-Owner: <mailto:architecture-discuss-owner@ietf.org>
List-Post: <mailto:architecture-discuss@ietf.org>
List-Subscribe: <mailto:architecture-discuss-join@ietf.org>
List-Unsubscribe: <mailto:architecture-discuss-leave@ietf.org>

This is the sort of issue I am talking about when it comes to reliance on
heuristics.

I am very much aware of the copyright and trademark issues that arise from
geolocation, it is one of the areas I specialize in as an expert witness.

But I for one would be very happy with a situation that allows me to see
the content I have paid for available to me regardless of where I happen to
be at the time rather than having to repurchase it just because I am in
another locale.

And I would very much like to get into a position where I am advising
client on how to write contracts so they don't end up litigating
geolocation systems rather than dealing with the wreckage as heuristics
meet reality.



On Mon, Mar 23, 2026 at 1:48 PM Henning Schulzrinne <hgs@cs.columbia.edu>
wrote:

> Given the legitimate uses enumerated, I do wonder what will happen if the
> wish of universal VPN usage comes true. I suspect the alternatives will, in
> some cases, be more intrusive and privacy-invading, such as requiring
> registration with a credit card (with a billing address tied to the content
> licensing region). We may not like geographic content restrictions, for
> example, but providers of such content are unlikely to just roll over and
> say "hey, the IETF doesn't like geolocation for IP addresses, so we're
> going to just give up on restricting our content." The goal should be
> minimal information - and it's a lot easier to make that case if there's a
> real alternative available that, say, simply attests that I'm a resident of
> a specific country.
>
> I also don't understand equating telephone area codes, which typically
> include millions of users (and no fewer than about 200,000) in the US and
> at least thousands elsewhere, with violations of privacy.
>
> On Mon, Mar 23, 2026 at 12:40 PM Eric Rescorla <ekr@rtfm.com> wrote:
>
>> On Mon, Mar 23, 2026 at 9: 27 AM Yaakov Stein <ystein=40allot. com@
>> dmarc. ietf. org> wrote: Geolocation based on IP address has many
>> legitimate uses, including content localization and geofencing, better
>> targeting of local advertising, enforcing
>> ZjQcmQRYFpfptBannerStart
>>
>> ZjQcmQRYFpfptBannerEnd
>>
>>
>> On Mon, Mar 23, 2026 at 9:27 AM Yaakov Stein <ystein=
>> 40allot.com@dmarc.ietf.org> wrote:
>>
>>> Geolocation based on IP address has many legitimate uses,
>>>
>>> including content localization and geofencing, better targeting of local
>>> advertising, enforcing copyright restrictions,
>>>
>>> network optimization and planning, detecting botnets and other malicious
>>> activity, verifying if taxes apply,
>>>
>>> regulatory compliance, marketing analytics, etc.
>>>
>>> Calling it harmful reminds me of Universal Studios claim that the only
>>> use of a VCR was copying copyrighted material.
>>>
>>>
>>>
>>> The compelling reason behind VPNs is confidentiality. That’s why
>>> businesses use them.
>>>
>>
>>>
>>> If you really desire privacy for legitimate purposes then use OHTTP
>>>
>>> with your true IP being replaced with a geographically nearby one.
>>>
>>
>> O-HTTP depends on the cooperation of the origin. If you want location
>> privacy in
>> all cases you  need something you can deploy unilaterally.
>>
>> -Ekr
>>
>> _______________________________________________
>> Architecture-discuss mailing list -- architecture-discuss@ietf.org
>> To unsubscribe send an email to architecture-discuss-leave@ietf.org
>>
> _______________________________________________
> Architecture-discuss mailing list -- architecture-discuss@ietf.org
> To unsubscribe send an email to architecture-discuss-leave@ietf.org
>