Hacker News Reader

Comment by stingraycharles | Hacker News Reader

The point the parent is making is that you don’t have to manually keep track of the countries you need to block. You just tell Cloudflare what your website does / what type of laws may be problematic, and Cloudflare manages the blocklist automatically.

Makes a lot of sense actually that it’s surprising they don’t have this yet.

View on HN

My guess is liability factor. If they get it wrong, massive liability on their side especially since someone could be like "I told you X" and Cloudflare didn't think the law applied or not.

Better to put onus on the customer.

“”” Our analysis reports that the regulations that are currently being discussed and likely to have an impact on the following services of yours: {{SERVICES}}.

These regulations touch on the following points: {{POINTS}}.

Here are how each of your listed services would likely be impacted by the different components of the regulations:

- {{SERVICE}}

— {{POINTS}}

“””

This is already a fact of life: Amazon, Cloudflare, etc all manage blocklists for common patterns in firewalls, and many compliance standards (e.g. SOC2) pretty much require you to enable them. Mistakes are sometimes made in these things, but fairly certain that liability is covered by the ToS.

So the entire internet goes off during La Liga?

No? That's the other way around, ISPs blocking server IPs for customers. This is about servers blocking legally risky visitor IPs.

Reply on news.ycombinator.com