In the country where the physical person making the request is located would be a logical solution. Not saying it would be a good solution, but that would follow the logic of most international fiscal law. Super hard to implement though.
How is that supposed to work? If I open port 80 on my desktop I'm suddenly liable in every foreign jurisdiction that has user able to reach me on port 80?