Welp, this is the (big) straw that breaks the camels back. While I've been somewhat slowly easing out of having my hosting services in the US, I don't think I want to even have business with anyone HQ'd in the US anymore.
What if someone phone's them up and says I host sex trafficking? Or I do something else illegal in the US that is fine in the EU or elsewhere?
I simply don't want the risk of the US gov'd or law interfering with me or my business.
I'm moving all my stuff into Europe. My main Server is hosted at OVH which has no HQ in the US (OVH in the US is a separate corporation specific to US customers of OVH).
I'm moving my mail to Protonmail, away from my current mail provider (which I was planning to do anyway once the contract ran out since they are against net-neutrality but I'll speed things up now)
My DNS is also currently hosted in the US, via Cloudflare and another provider. I will move those into OVH too but I'll have to wait for atleast two contracts to run out for that too.
Considering the GDPR, I guess the EU is the current bastion of privacy and a free-er internet.
I doubt it'll help since the bill makes it problematic to facilitate any illegal behavior. So E2EE won't help, they'll just slap you for facilitating stuff.
If someone finds out someone did do something illegal with it (obtaining plaintext through various means or someone is being convicted by other means) then you're definitely in for it.
Then every single P2P host will have to take it down, which might take a long while with how slow DMCA/whatever takes.
Myself, personally, I'd comply with legal takedowns because I don't want to get thrown in prison. But that doesn't mean it won't be exceptionally hard for things to be removed from a cryptographically secure P2P network.
Maybe float your servers in international waters or boost them into orbit?
There's a decent chance bad US Internet laws will be struck down by the courts on constitutional grounds, but most other places never had protections for those freedoms to begin with.
On the other hand, if you're going to be an outlaw anyway, you might as well do it somewhere where your bribes will actually buy you some measure of protection.
If you're in space or international waters you have to due so under the auspices of some particular country and obey its laws. Otherwise you have no recourse if someone comes and takes your stuff.
Not really, no. You can't even torrent there without getting threatening letters in the mail. Also wifi/responsibility issues. Copyright nonsense is running strong in Germany. There are freeer countries than that WRT internet freedom in EU.
I know people who have gotten those letters in the US; the companies that send them are contracted by major media corps and don’t care about where you live.
Not to Europe, I am afraid. Europe is a bureaucratic shit-show with a big-brother more than willing to regulate what you say, how you say it, how to listen, how to remember and forget and soon how to think...
Just watching the GDPR mess makes you understand Brexit.
What? GDPR is for avoiding Cambridge Analytica/Facebook disatasters, Equifax breaches and other cases when companies collect data that they dont need store it like there is no tomorrow and at the end dont give a shit when people get screwed over by a 3rd party. Great Britain has the worst laws in the EU when it comes to internet regulations. People are jailed for funny videos while the GHCQ hacks corporations, and they have the most invasive security laws at all.
It’s not like most of the mainland European countries are better in this regard. Few of them have strong legal protections for free expression, and some of them (like Germany) have explicit political censorship laws just like the UK.
The UK has made all appearances of going forward with GDPR principles independently of the EU, and as with almost everything in terms of EU regulations, we will likely have to comply with GDPR whether we stay inside or outside of the EU formal structures especially given its extra-territorial enforcement. The UK already has a lot of data protection legislation (more so than the US), and is making no indication of wishing to repeal.
GDPR will be a pain for a lot of businesses, but seems to be well designed to protect citizens by to reducing abuses of surveillance by private companies like those in the news right now with Facebook.
GDPR is the appropriate response to decades of giving industry an opportunity to self regulate its data collection practices (the "cookie law" was a warning shot ignored by industry), which has evidently spectacularly failed should you open any broadsheet newspaper this morning.
What if someone phone's them up and says I host sex trafficking? Or I do something else illegal in the US that is fine in the EU or elsewhere?
I simply don't want the risk of the US gov'd or law interfering with me or my business.