Quad9 DNS Resolver Announces Complete Exit from France

If you're reading this from a university lab in Lyon, a hospital network in Marseille, or a government ministry in Paris, your first line of defense against phishing and malware just got a termination notice. Quad9, the Swiss nonprofit that runs the privacy-first DNS resolver 9.9.9.9, announced Thursday it will cease serving French users on November 24. The reason isn't technical failure or funding shortfalls — it's a court order that the organization says makes operating in France technically impossible and ethically untenable.

src="https://quad9.net/news/blog/au-revoir-france/french-announcement-image.png" alt="Quad9 announcement visual showing French flag and service termination notice" style="width:100%; max-width:800px; height:auto; border-radius:8px; margin:1.5rem 0;"

Quad9's visual announcement of their French service termination, published October 22, 2026.

The ruling that triggered the exit

On October 21, a French court ruled in favor of beIN Media Group — the Qatari-owned sports broadcaster with French operations — ordering Quad9 to block recursive DNS resolution for a set of domains allegedly hosting pirated sports streams. The court slashed the requested daily penalty from €580,000 to €1,000, but Quad9's leadership says the principle remains broken: recursive DNS is a neutral lookup service, not a content enforcement tool.

"We categorically refuse to alter or lie to you about the DNS responses you receive in a way that opposes your expectations," the Quad9 team wrote in their announcement. The organization operates as a public-benefit foundation under Swiss law, funded by sponsors and donations, charging nothing for its service. Its mandate: block malware and phishing domains globally, not enforce national copyright judgments.

Why geoIP blocking doesn't work — and why Quad9 knows this firsthand

This isn't theoretical. Quad9 already lived through the geoIP experiment in Germany, where Sony Music Entertainment GmbH obtained a similar blocking order in 2021. Quad9 initially implemented geographic filtering to comply while contesting the case. Sony's lawyers then used a VPN to access the blocked domains from a German IP address, demonstrated the filtering failure in court, and won contempt sanctions against Quad9.

"The court agreed with Sony in their assertions of noncompliance, and we were fined for contempt of court," Quad9's post recounts. They eventually won the German case on appeal — after years of litigation and six-figure legal costs — but the lesson stuck: geoIP filtering is technically porous and legally dangerous. VPNs, proxies, and corporate networks routinely obscure user location. A recursive resolver that doesn't know its users' identities (by design) cannot reliably apply jurisdictional filters.

The extraterritorial trap: why global blocking is a non-starter

Quad9 could theoretically add the contested domains to its global malware blocklist — the same list that protects all 9.9.9.9 users worldwide from phishing and command-and-control servers. But that would apply French copyright law to every internet user on the planet, including those in countries with different legal frameworks.

"We suspect if other nations wished to impose their national legislation within France, there would be a strong reaction from French users and authorities," the announcement notes. "The converse is equally true." With roughly 20 additional lawsuits pending in France alone — each demanding blocks on hundreds of domains — Quad9 faces a future where its global blocklist becomes a patchwork of national court orders from rights holders worldwide. The organization calls this "an avalanche of petty demands used to suppress political, religious, economic, or social outcomes."

Who loses on November 24

The collateral damage is extensive. Quad9 published a partial list of French autonomous systems (networks) currently using their service, drawn from aggregated traffic metadata — no individual user tracking, per their privacy policy. The list reads like a directory of French critical infrastructure:

• Government: DINUM (Prime Minister's digital directorate), France Travail (national employment agency), Business France
• Research & Education: RENATER (national research network), Institut Pasteur, CEA Saclay, plus student-run networks at ENS Paris-Saclay and CentraleSupélec
• Healthcare: AP-HM (Marseille public hospitals), SESAN (Île-de-France digital health services)
• Energy & Transport: EDF (nuclear fleet operator), SNCF (national railways), CNR (Rhône hydroelectric concession)
• Defense & Cybersecurity: Thales, Stormshield (Airbus cybersecurity subsidiary), IDEMIA (biometric identity systems)

All these networks, plus hundreds of ISPs, mobile carriers, and local government fiber syndicates, lose Quad9's malware and phishing protection on November 24. Users will fall back to ISP resolvers or alternative public DNS services — many of which log queries, sell data, or lack threat intelligence feeds.

The bigger picture: DNS as a censorship bottleneck

What makes this case significant beyond France is the precedent. Recursive resolvers sit at a choke point: they translate human-readable domain names into IP addresses. If courts can compel them to lie about that translation for copyright enforcement, the same mechanism can be used for political censorship, security research suppression, or competitive suppression.

Quad9 argues — and technical experts largely agree — that DNS blocking is ineffective against piracy anyway. The content remains on the source servers. Users seeking blocked streams simply switch resolvers (there are thousands of public options), often to less trustworthy operators. "This is like holding a piece of newspaper in front of a stadium full of people to block the view of a concert," Quad9 writes.

Meanwhile, ARCOM (France's audiovisual regulator) and French legislators face pressure to expand automated DNS filtering powers. Quad9's departure removes a privacy-respecting, security-focused option from the French market — exactly the kind of resolver that GDPR and France's own digital sovereignty goals should encourage.

Quad9 says it will continue appealing the beIN ruling and fighting the other pending cases. But as of November 24, French users typing a domain into their browser will get answers from somewhere else — and those answers might come with tracking, censorship, or missing security protections. The internet's phone book just lost its most principled publisher in France.