It wouldn’t, which is why I roll my eyes every time I see a bill demanding what a VPN must do.
The only way for them to actually enforce this through VPNs is to block VPNs. Which, presumably, they’ll do at some point, but with an exception list for companies paying the right license fee to use a Government Approved VPN.
Which, obviously, will be full of security flaws, and likely won’t be HIPPA compliant or other compliances etc, etc.
There are ways to obfuscate VPN traffic that’s resistant to DPI. It makes it look like normal HTTPS traffic. That will make completely blocking VPNs difficult. I’m sure even more effective obfuscation methods will be developed if VPN blocking becomes widespread.
Or … time to set my VPN to Canada.
I think the intent of the law is that it wouldn’t mater. If the VPN blocks the site, you can’t get to the site.
Why would a Canadian VPN server obey US block lists?
It wouldn’t, which is why I roll my eyes every time I see a bill demanding what a VPN must do.
The only way for them to actually enforce this through VPNs is to block VPNs. Which, presumably, they’ll do at some point, but with an exception list for companies paying the right license fee to use a Government Approved VPN.
Which, obviously, will be full of security flaws, and likely won’t be HIPPA compliant or other compliances etc, etc.
So, basically there’s the internet, then there’s the US internet. People will start moving to China for more freedoms.
Did you forget about the Great Firewall?
Not that even it can defeat VPNs anyway.
There are ways to obfuscate VPN traffic that’s resistant to DPI. It makes it look like normal HTTPS traffic. That will make completely blocking VPNs difficult. I’m sure even more effective obfuscation methods will be developed if VPN blocking becomes widespread.
HTTPS will be banned, unless you install the government CA certs that let them decrypt your traffic.
https://www.eff.org/deeplinks/2022/03/you-should-not-trust-russias-new-trusted-root-ca