A Paris court has effectively told a Swiss non-profit that runs one of the internet's most widely used free privacy-oriented DNS resolvers to pick one of three unpalatable options: block content globally, start tracking which of its users live in France, or stop serving the French market altogether. Quad9 has chosen the third path. On November 24, the organization will cut off access for users connecting from France, a decision with consequences for public institutions, hospitals, and ordinary citizens who rely on its service.
A Blocking Order Collides With a No-Logging Principle
The dispute traces back to a May 13 order requiring Quad9, Google, and Whalebone - operator of the DNS4EU resolver - to block domains streaming unauthorized broadcasts of a women's tennis competition, at the request of rights holder beIN Sports France. The list of targeted domains grew from six to 58, with a clause covering sites "not yet identified." When Quad9 did not comply, a Paris court ruled on October 21 that it must pay 1,000 euros a day in penalties, retroactive to the original order, for a total Quad9 estimates at 24,000 euros plus legal costs.
Quad9's objection is not primarily financial. The organization says it keeps no records linking users to their location or identity, a design choice central to its mission as a privacy-focused resolver. Without that data, it has no reliable way to determine which queries originate in France. Building such a system, it argues, would mean constructing the very surveillance infrastructure it was founded to avoid.
Geolocation, Malware Blocking, and a Contradiction the Court Rejected
The court pointed out that Quad9 already blocks domains associated with malware, arguing this undermines its claim that geolocated blocking is unfeasible. Quad9 counters that blocking malicious domains for all users everywhere is a universal security function, fundamentally different from selectively restricting access based on a user's country. It cited an earlier case in Germany, where a rights holder used a VPN to probe whether Quad9 was honoring a domestic blocking order, resulting in a contempt fine that Quad9 eventually overturned only after a prolonged and costly legal fight.
Quad9 also argues that domain-level blocking is trivially circumvented. Anyone can switch to a different DNS resolver in seconds, meaning the practical effect on piracy is minimal while the precedent set is substantial. The organization has described the approach as symbolically blocking a view while the underlying activity continues unaffected.
Who Loses Access, and Why It Matters Beyond France
The list of organizations that rely on Quad9 in France includes major public bodies: the national electricity utility EDF, the national railway operator SNCF, the public broadcaster France Télévisions, the Institut Pasteur research institute, a major public hospital group in Marseille, and the national research and education network RENATER, alongside regional and local government bodies. All will need to find alternative DNS providers by late November.
Quad9 says it faces roughly 20 similar pending cases in France, a volume of litigation it says it cannot sustain. It is not the first resolver pushed out this way - a comparable case brought by a French broadcaster led OpenDNS to withdraw from the market in 2024. France's parliament has since broadened enforcement powers further, letting the regulator ARCOM order real-time blocking of "suspected" unauthorized streams during live broadcasts.
A Precedent With Global Reach
The underlying tension is structural. A DNS resolver translates domain names into IP addresses; it does not control content and, in Quad9's case, does not know where its users are. Ordering it to block content for one jurisdiction forces an operator serving a global user base into an impossible position: comply globally, build surveillance capacity, or withdraw. Similar legislative efforts are underway elsewhere - in the United States, bills including the American Copyright Protection Act and the DEFEND IP Act would give courts authority to compel domain resolution services to block sites, with the latter targeting resolvers above a revenue threshold.
Quad9 frames the French ruling as part of a broader pattern in which narrowly justified enforcement tools, once built, tend to expand well beyond their original purpose. Its departure from France is less a resolution than a signal of how legal systems built for traditional broadcasters are increasingly reshaping the infrastructure of the open internet.