> Banning based on IP geolocation is not perfect by any means, but what's the alternative here? That you ask suspected Iranian users to check a box saying "I'm

> Banning based on IP geolocation is not perfect by any means, but what's the alternative here? That you ask suspected Iranian users to check a box saying "I'm not an Iranian, pinky swear!"? The export regulations apply to business. In order for it to apply, there needs to be proof of a business relationship. Simply being Iranian or having non-business related communication with Iran, which is the only thing IP geolocation on its own indicates, does not warrant invoking this law.