GDPR for lazy people: Block all European users with Cloudflare Workers

Post by itake » Fri, May 25, 2018, 5:36 PM UTC

nrdgrl wrote: post #34

sp332 wrote: post #13

Earlier quoted context omitted.

You're the third person to ask this and I'd like to ask you: is this idea coming from a specific source? The law, like any other EU law, obviously does not apply outside the EU. It applies to companies that do business in the EU (even if they are based outside), but it can't apply to companies that don't do business there. https://ec.europa.eu/info/law/law-topic/data-protection/refo...

GDPR applies to all EU citizens. It doesn't matter if the citizen is accessing the web site from the eu or another country. Blocking people in the EU doesn't block all eu citizens from accessing your product/service.

Post by logronoide » Fri, May 25, 2018, 5:37 PM UTC

kentonv wrote: post #31

logronoide wrote: post #14

Earlier quoted context omitted.

You can see the average latency here: https://status.apility.io But Cloudflare has servers very close to our endpoints around the world, so I guess We are working hard to reduce the amount of time to establish the connection. It's about 80% of the time of the request.

If you make sure that the response is cacheable, then Cloudflare will cache it at the edge and so only the first check for any particular IP will be slow. What makes a response cacheable is a little complicated. There's cache headers, but also some heuristics involved. However, you can override all of that from a Worker by passing an explicit cache TTL to fetch(): fetch(url, {cf: {cacheTtl: 86400}}) This will force C…

Post by outside1234 » Fri, May 25, 2018, 5:38 PM UTC

logronoide wrote: post #10

DanBlake wrote: post #7

Considered this before, but it doesnt work. IIRC, the law applies to euro citizens both living in country and abroad. As such, geoip blocking is not a working strategy. (a french citizen who lives in japan still had GDPR rights) A better one would likely be a clickwrap agreement for all users stating "European citizens are not allowed on this service" which they have to click a "I am not european" tickbox to.

I'm the author of the post, and yes: blocking 500 million geolocated people is crazy. That's not the spirit of the law. I just wrote the post because if you want to overkill and you are lazy, you can follow our recipe to 'implement' GDPR. I just wanted to be sarcastic and also show how easy to implement Cloudworkers + Apility.io.

Post by smallbigfish » Fri, May 25, 2018, 5:38 PM UTC

ryanwaggoner wrote: post #20

logronoide wrote: post #10

Earlier quoted context omitted.

I'm the author of the post, and yes: blocking 500 million geolocated people is crazy. That's not the spirit of the law. I just wrote the post because if you want to overkill and you are lazy, you can follow our recipe to 'implement' GDPR. I just wanted to be sarcastic and also show how easy to implement Cloudworkers + Apility.io.

Blocking 500 million geolocated people is crazy. That's not the spirit of the law. No crazier than thinking you have to comply if you have no connection to the EU.

Post by mephitix » Fri, May 25, 2018, 5:39 PM UTC

matte_black wrote: post #28

logronoide wrote: post #21

I'm the author of the post. My most stupid post is in HN! crazy! I just wanted to be sarcastic and make some laughs about people blocking all traffic from Europe, which is crazy! It's a Friday afternoon blog post to show how cool my product is with Cloudflare Workers and having fun at the same time!

It's no laughing matter for some companies. EU citizens have turned into pests overnight. There are businesses who don't make much money from the EU to justify compliance with the regulations.