alt Hacker NewsI think, usually, in those cases it's that people believe the company did not really do anywhere near everything it could - it did the bare minimum it thought it could get away with then seemed shocked it wasn't enough to matter.
Here, if any pair of countries have conflicting rules then you simply can't expose your service to both because it's plain impossible for you to block all means of VPN/proxy regardless of how perfect your service tries to detect it. There's no payment, there's no account, there's no anything - you're just serving DNS to an IP that reports to be out of Germany according to German law. At some point it stops being a mistake/malintent of the company and one of the user. Where that transitions probably depends on the person though.
Replies
> I think, usually, in those cases it's that people believe the company did not really do anywhere near everything it could - it did the bare minimum it thought it could get away with then seemed shocked it wasn't enough to matter.
Yes, and Quad9 could have done better in the German court case. At a minimum they could have asked users to register and provide proof of residency, and then could have ensured that their DNS service is offered only to registered users.
> if any pair of countries have conflicting rules then you simply can't expose your service to both
Yes. This is also how physical products work. The internet makes it easy and the default to offer a service worldwide, hence also making it easy to get in conflict with the law worldwide. You have to pick and choose which laws to break, which laws to comply with by minimizing exposure, and which laws to comply with by making a tailor-made version for a specific market.