Why IP-based rules are bad, but we still use it
medium.com