A Swiss non-profit that runs one of the internet's most widely used privacy-oriented DNS resolvers has decided to shut off its service to French users entirely rather than comply with a court order that it says would force it to either spy on them or build global censorship tools. Quad9 will stop serving France on November 24, following a Paris court ruling that ordered it to block access to pirate streaming domains for broadcaster beIN Sports or face daily fines.
A Ruling That Misunderstands the Technology
The dispute began with a May 13 order requiring several domain name resolution services, including Quad9, Google, and Whalebone's DNS4EU, to block domains linked to unauthorized streaming of a women's tennis event broadcast exclusively by beIN Sports in France. The list grew from six domains to 58, with provisions for future "sites not yet identified." When Quad9 did not comply, a Paris court ruled on October 21 that it must pay 1,000 euros per day until the broadcast period ended, a sum Quad9 calculates at 24,000 euros, not including legal fees. beIN had originally sought far steeper penalties, up to 580,000 euros per day across all domains.
Quad9's core objection is structural, not political. DNS resolvers translate domain names into IP addresses; they do not typically know, and in Quad9's case do not want to know, where a given query originates. The organization says it keeps no database linking users to jurisdictions, meaning it has no reliable way to isolate French traffic without building new surveillance infrastructure. The court rejected this explanation, noting that Quad9 already blocks malware domains and therefore "appears to contradict itself." Quad9 counters that blocking known malicious infrastructure for security reasons is categorically different from geographically filtering content on behalf of a private rights holder.
Three Options, None of Them Acceptable
Quad9 describes its predicament as a forced choice among three outcomes. It could block the disputed domains for every user worldwide, effectively letting a French court ruling dictate what the entire internet can reach through its resolver. It could build a geolocation system to identify and restrict only French users, something it has resisted on principle and found technically unreliable in practice, citing a past dispute in Germany where a rights holder used a VPN to circumvent a geo-based block, resulting in a contempt fine Quad9 eventually overturned after a costly legal fight. Or it could withdraw from the French market altogether. It has chosen withdrawal, calling the other two options incompatible with its mission.
The organization also argues that domain-level blocking is trivially easy to bypass, since any user can switch to a different DNS provider in seconds. It likened enforced blocking to holding up a newspaper to obstruct a view of something happening behind it, visible from almost any other angle.
Collateral Damage and a Wider Pattern
The withdrawal will cut off French institutions that rely on Quad9 for secure, filtered DNS resolution, including EDF, SNCF, France Télévisions, the Institut Pasteur, a major Marseille hospital network, the national research network RENATER, and various regional authorities. Quad9 says roughly 20 similar legal actions are pending against it in France, a volume of litigation it says it cannot financially sustain regardless of the appeal it has filed against this ruling.
This is not an isolated episode. OpenDNS withdrew from France in 2024 after a comparable case brought by Canal+. French lawmakers have since expanded ARCOM's authority to order real-time blocking of suspected piracy during live broadcasts. Similar legislative pressure is building elsewhere: in the United States, the American Copyright Protection Act and the DEFEND IP bill both propose giving courts the power to compel DNS resolvers to block domains, with the latter targeting resolvers above a revenue threshold. Quad9's exit from France is a warning about where that regulatory direction leads for any service built on not knowing, and not tracking, who its users are.