Quad9 Exits France — When a Court Orders DNS Tampering
By Arash Latifi — Founder, The DevArt
A French court ruled for beIN, so Quad9 chose to pull its free DNS service from France. What this means for business owners and site operators.
TL;DR — One French court ruling made Quad9 pull its free secure DNS from France on November 24; a sharp reminder that infrastructure your business depends on can vanish overnight for legal reasons.
What happened
Quad9 is a Swiss non-profit foundation offering a free recursive DNS resolver with threat filtering — millions of users point at it specifically to avoid phishing and malware.
beIN, a Qatari company with offices in France, has sued Quad9 for years because some domains streaming sports illegally are reachable through its resolver. Quad9 has no relationship with those domains, but the French court initially fined it €580,000 per day — reduced to €1,000 per day in this week's ruling. Rather than comply, Quad9 announced it will withdraw service from French users on November 24.
Why Quad9 said no
From their official announcement:
- Technically infeasible: Quad9 keeps no user database — no sign-up, no identity checks. It cannot tell which users are "in France" to block only them.
- Mission conflict: Lying in DNS responses violates their core principle of honest answers. Blocking malicious threats is opt-in; censoring content is not their job.
- Wrong target: They argue piracy should be addressed at the hosting source, not by forcing neutral third parties to reshape internet plumbing.
Result: French users lose a major security layer — the opposite of what the ruling intended.
| Item | Before ruling | After ruling | | --- | --- | --- | | Daily fine | €580,000 | €1,000 | | Quad9 service in France | Active, free | Cut off Nov 24 | | Complying technically | N/A | Infeasible (no user records) | | Real cost | Not financial | French users' security |
Why it matters to you
Even if you are nowhere near France, three lessons apply to any online business:
- Know your dependencies. DNS, CDN, payment gateway, transactional email — all ride on vendors that can be legally pressured, sanctioned, or blocked. Map them.
- No single point of failure. Like Quad9 in France, a single outside decision can strand your users. Keep at least one fallback for DNS and CDN.
- Law and geography mix. A court in one country can change a global service — GDPR became a worldwide standard the same way.
Risk-reduction checklist
- [ ] List every critical service your site depends on (DNS, CDN, payments, email, hosting)
- [ ] Have a tested fallback for each critical service (secondary DNS, second CDN)
- [ ] Keep DNS record TTLs short for fast migration
- [ ] Monitor vendor status pages from an independent monitor
- [ ] Keep full downloadable backups of your data, not just in-vendor backups
- [ ] For international business, review legal obligations in target countries
FAQ
Q: Is Quad9 shutting down globally?
No. Only users located in France lose the service on November 24. Quad9 continues everywhere else and framed the exit purely as a response to the French court ruling.
Q: I use Quad9 — what should I do?
If you are outside France, nothing. If you or your users are in France, pick and test an alternative DNS well before November 24 and document the change.
Q: The core lesson for small businesses?
Internet infrastructure is not neutral or permanent. Every layer can be hit by a court order, sanctions, or political pressure — diversify and keep fallbacks ready.