What are best practices to restrict a website, which is also used as a frontend for a container-App for smartphones, to a specific geo location?
There are obvious methods like:
- Check IP from visitor and map to geo location
- Ask the visitor to select a specific country
- Use the location provided by GPS/Glonass
Are there further best practices to extend the list? The goal is to implement as much techniques as possible.
The techniques don't have to be hacker-proof. I'm fully aware that any of the methods above can easily be spoofed.