All geek questions in one place

Access block for a given geographic location

What is the most reliable way to prevent users from a geographic region from accessing an accessible web application?

I understand that IP addresses are related to geolocation, and I also understand that the most naive way is to get the IP address of the HTTP request header and get it from there.

Obviously, naive methods like those described are extremely easy to circumvent, especially using proxies or virtual private networks.

So the question is: is there a 100% reliable way to determine the geolocation location of a web user? If not, what are the available options and what are the pros and cons for each of them?

+3
source share
7 answers

Nothing in TCP / IP includes location data (except that you can infer from the routing table or search the database), and nothing indicates whether the machine is acting “on behalf of” someone else location. P>

So, as you say, proxies and VPNs, SSH port forwarding, TK, etc., can completely prevent your web application from knowing the physical location of the person who is using your site. All you can find is the IP address of this last hop, which is a TCP / IP connection and the HTTP request that you really see.

+4
source

- . 100% , , IP-. , .

, , , , , . , 100% , , 100% , .

+6

, - , .

+3

script :

https://www.blocked.com/

, -, ..

+1

- , IP 2 , , IP.

, , , , ip.

SSN, IP-. , , , , . . , , , " !". - .

0

- , ip , ip . , , disney.com.

, : IP-

0

, .

There is a lot of related work at the IETF in the GeoPriv working group where protocols are developed (for example, HELD ) to allow objects to request their own location from the network, as well as to allow other authorized organizations to request this information.

However, the VPN issue is still causing problems because clients with VPN capabilities must request location information before establishing a VPN.

0
source

Source: https://habr.com/ru/post/1706132/

More articles:


All Articles