A free, privacy-focused public DNS resolver used by millions worldwide is withdrawing from France after a Paris court ordered it to block pirate streaming domains or face daily fines. Quad9, the Swiss non-profit behind the service, says it will cut off French users entirely on November 24 rather than comply with a ruling it calls technically unworkable and fundamentally at odds with its mission.
A Narrow Dispute With Broad Consequences
The case began with a May 13 order tied to a legal action by beIN Sports France, which holds broadcast rights to a women's tennis event in that country. The court instructed Quad9, alongside Google and the DNS4EU operator Whalebone, to block access to a growing list of streaming domains - six at first, later expanded to 58, with more to be added later through the regulator ARCOM. When a Paris judge ruled again on October 21, it ordered Quad9 to comply or pay 1,000 euros per day, a penalty that would have totaled 24,000 euros over the remaining event period alone, not counting legal fees. beIN had sought far steeper sanctions, up to 580,000 euros a day across all domains.
The judge rejected Quad9's argument that it cannot isolate French users, pointing out that the service already blocks malware domains and therefore, in the court's view, contradicts its own claim of technical incapacity. Quad9 disputes that comparison: blocking known malicious infrastructure for security purposes, it argues, is categorically different from filtering content based on a user's location and a rights holder's legal claim.
Why Quad9 Says Compliance Is Impossible - By Design
Quad9's core objection is architectural, not political. The resolver does not log or store information linking queries to individual users or their locations, a design choice central to its privacy mandate. Without a database tying users to jurisdictions, there is no way to selectively block domains for French visitors alone. The only paths to compliance would be to block the sites for every user globally, or to begin tracking location data it has deliberately never collected.
Quad9 has also pointed to past experience with geographic blocking as evidence that such measures are porous and legally risky. In a prior dispute in Germany, the organization implemented a block that a user circumvented using a VPN, which led to a contempt ruling and a fine - later overturned, but only after a costly legal fight. That episode, the organization says, illustrates why geoIP-based filtering is both easy to evade and dangerous to adopt as a precedent, since the same mechanism used to block a streaming domain could later be repurposed for far broader censorship.
Who Loses Access, and What It Signals
The withdrawal will affect a wide range of French institutional users who rely on Quad9's free resolver, including EDF, SNCF, France Télévisions, the Institut Pasteur, a major Marseille hospital group, the national research network RENATER, and several local government bodies. Quad9 says it currently faces roughly 20 similar pending cases in France and cannot absorb the cumulative financial exposure if each results in comparable penalties.
The organization frames its departure as a defense of a broader principle: that domain name resolution - a basic lookup function connecting a web address to an IP address - should not be converted into a tool for enforcing content restrictions on behalf of private rights holders. It warns that narrow, apparently reasonable blocking orders tend to multiply once the underlying infrastructure for enforcement exists, becoming a mechanism available for use well beyond their original purpose.
Part of a Wider Pattern
France has pressured DNS providers before; OpenDNS exited the French market in 2024 under similar legal pressure from Canal+. Earlier this year, French lawmakers also passed legislation allowing ARCOM to order real-time blocking of suspected pirate streams during live broadcasts. In the United States, two pending bills - the American Copyright Protection Act and the DEFEND IP Act - would give courts comparable authority to compel DNS resolvers, including large public ones, to block designated domains.
Quad9's exit leaves French users with fewer independent, privacy-oriented DNS options and raises a question regulators elsewhere will eventually face: whether infrastructure built for neutral technical lookups can be conscripted into content enforcement without undermining the privacy guarantees users were promised in the first place.