> 1. Blocking Iranian IPs, as opposed to accounts, is almost certainly over-compliance. Note that the vast majority of websites do not do this. Even big ones, s

> 1. Blocking Iranian IPs, as opposed to accounts, is almost certainly over-compliance. Note that the vast majority of websites do not do this. Even big ones, such as Gmail, do not do this. How do you define an iranian account? It's a complicated rule set there. Iranians not legally resident in Iran are exempt from the sanctions for example. I feel like IP bans are correct. If you're evading sanctions and internet censorship, you use whatever proxy and many do just this. Companies under these sanctions can write it off as not being the wiser and the users get to where they need to. Closing accounts with an IP login from Iran does feel like an unnecessary step here.