By ByteBot
On October 22, Quad9 announced it will stop serving DNS queries from France on November 24. The Swiss nonprofit didn’t lose a lawsuit. It chose to leave rather than comply with a court order demanding it block domains for a Qatari sports broadcaster. The reason it gave is blunt: it refuses to lie in DNS.
What the Court Ordered
The Paris Judicial Court ruled that Quad9 must block 58 domains carrying unauthorized beIN Sports streams of WTA tennis matches or face a €1,000 daily fine. BeIN originally sought €580,000 per day, so the court was arguably lenient. Quad9 walked out anyway.
The technical problem is straightforward. Quad9 operates without user accounts. Its free resolver at 9.9.9.9 works for anyone, anywhere, with no sign-up and no IP logging by design. There is no reliable way to block specifically for French users without degrading the service globally. GeoIP geolocation is imprecise, and applying a French court order to every user worldwide is exactly what Quad9 refuses to do.
More fundamentally, blocking a domain means returning a false DNS response — telling your browser a site doesn’t exist when it does. Quad9’s position is unambiguous: “We categorically refuse to alter or lie to you about the DNS responses you receive in a way that opposes your expectations.” That’s not legal strategy. That’s the product.
The Real Pressure: 20 Cases in the Queue
The €1,000/day fine is manageable in isolation. What makes it untenable is what comes after. Quad9 reports approximately 20 additional lawsuits pending against it in France, each demanding blocks on hundreds of additional domains. At that rate, compliance isn’t just a moral compromise — it’s a full-time legal operation for a donor-funded nonprofit that exists to serve users, not media rights holders.
This is not a one-off clash with an overzealous court. It’s a deliberate strategy: use rolling litigation to exhaust providers who won’t comply. Quad9 is being attritioned out of the country one ruling at a time.
This Happened Before
In June 2024, Cisco’s OpenDNS left France under nearly identical circumstances. Canal+ secured a court order over Premier League and Champions League piracy, targeting Google, Cloudflare, and Cisco. Google and Cloudflare complied. Cisco withdrew OpenDNS from France entirely rather than implement selective DNS filtering.
The pattern is now unmistakable: a rights holder sues DNS providers, large commercial providers comply quietly, and non-commercial or privacy-principled providers face a binary choice — compromise or exit.
What Compliance Reveals
Google (8.8.8.8) and Cloudflare (1.1.1.1) comply with French blocking orders. So does DNS4EU, the service the EU created and funded specifically as a privacy-respecting European DNS alternative. When the privacy-branded EU infrastructure complies with content censorship orders, the word “privacy” starts doing very different work than users expect.
To be clear: these services remain meaningfully privacy-protective against commercial data exploitation. But privacy from courts is a different guarantee entirely, and the French proceedings are drawing that line in stark relief.
What Developers in France Need to Do
Quad9’s resolver at 9.9.9.9 goes dark for French IPs on November 24. If you’re running servers, containers, or any infrastructure with hardcoded DNS pointing at 9.9.9.9, update before that date. Check your /etc/resolv.conf, Docker’s daemon.json, Kubernetes CoreDNS config, and any router or firewall settings.
For a replacement that still prioritizes privacy, the strongest options for French users are NextDNS (configurable, GDPR-compliant, no logs by default), FDN DNS (run by a French nonprofit ISP operating since 1992), and AdGuard DNS (EU-hosted, zero-log). For censorship resistance specifically, enabling DNS over HTTPS directly in Firefox or Chrome routes queries through encrypted channels that bypass resolver-level blocking entirely — court orders or not.
Developers outside France don’t need to change anything. Quad9 continues operating globally.
The Wider Stakes
France is not alone in treating DNS as a censorship lever. The UK, Belgium, Australia, and others have pushed similar orders at the ISP level for years. What’s shifting is the target: not just ISPs, but the independent privacy DNS layer that developers and privacy-conscious users deliberately chose to put between themselves and ISP-controlled infrastructure.
Germany’s appeals court ruled three years ago that DNS resolvers should not be treated as copyright infringers. Quad9 intends to leverage that precedent in its appeal of the French ruling. That appeal may take years. In the meantime, France is left with DNS providers who comply — and French users who want something else will need to find it themselves.
