A Swiss non-profit that runs one of the internet's best-known free DNS resolvers has decided it would rather abandon the French market than build the surveillance or censorship infrastructure a Paris court has demanded. Quad9 will stop serving users in France on November 24, following an October 21 ruling that ordered it to block pirate streams of a women's tennis broadcast or face a daily fine of 1,000 euros.
A Narrow Order With Broad Consequences
The underlying dispute looks small on its face: beIN Sports France, which holds French broadcast rights to the competition, wanted domain names associated with unauthorized streams blocked. A May 13 order covering Quad9, Google, and Whalebone's DNS4EU initially listed six domains, then expanded to 58, with a mechanism for adding "sites not yet identified" through the broadcasting regulator ARCOM. The court dismissed Quad9's argument that it lacks the technical means to isolate French users, pointing out that the resolver already blocks domains associated with malware. Quad9 counters that malware blocking is a security function applied uniformly, not a geographically targeted takedown - a distinction the court did not accept.
The mathematics of the penalty illustrate how quickly such orders can escalate. Quad9 calculated its own exposure at roughly 24,000 euros for the tennis case alone, but beIN had originally sought up to 580,000 euros per day across all parties and domains. Quad9 says it currently has about 20 similar cases pending in French courts, a volume of litigation no non-profit resolver could sustain indefinitely.
Why Blocking by Country Is Not Simple
The technical crux of the dispute is that Quad9, like other privacy-oriented resolvers, does not maintain records linking individual queries to a user's identity or location. DNS resolution is, by design, a stateless lookup: a device asks for an IP address, the resolver answers, and no persistent profile is meant to exist. Building a system to identify "French" users would require either logging IP addresses and cross-referencing them against geolocation databases, or demanding some form of identification before granting access - both of which run against the privacy mandate the organization was built on.
Geo-blocking by IP address is also porous. Quad9 points to an earlier dispute in Germany, where Sony Music used a VPN to bypass a block the resolver had implemented, resulting in a contempt fine that Quad9 ultimately overturned after a prolonged legal fight. Any determined user can reroute traffic through a different country or switch DNS providers entirely, which is why Quad9 describes domain-level blocking as akin to holding up a sheet of newspaper to obstruct a view - a gesture that inconveniences ordinary users while doing little to stop anyone determined to reach the content.
Three Options, One Exit
Quad9's own framing of its predicament is stark: comply globally by blocking the disputed domains for every user on the planet, build a surveillance layer to isolate French traffic, or withdraw from the country. It has chosen withdrawal, and says it will most likely rely on IP-based geolocation to cut off French users entirely rather than filter specific content for them - a method it considers less objectionable than selectively altering DNS answers, since it does not involve manipulating the information returned to any user who remains connected.
The fallout extends well beyond casual users. Quad9 lists major institutional users losing service, including the national electricity utility EDF, the national rail operator SNCF, public broadcaster France Télévisions, the Institut Pasteur research institute, a major public hospital group in Marseille, and the national research and education network RENATER, alongside various regional governments.
A Pattern With Wider Implications
France has forced a public resolver offline before: OpenDNS withdrew in 2024 following comparable litigation brought by Canal+. A newer French sports broadcasting law now allows ARCOM to order real-time blocking of "suspected" pirate streams during live events, with review only afterward - a lower evidentiary bar that invites more cases like this one.
The precedent resonates beyond France. In the United States, two bills introduced this year - Rep. Darrell Issa's American Copyright Protection Act and the DEFEND IP Act from Sen. Thom Tillis and Rep. Zoe Lofgren - would similarly empower courts to order domain-blocking by DNS resolvers, with the latter specifically targeting public resolvers above a revenue threshold. Quad9's exit from France is less a local footnote than an early test case for how far courts can push infrastructure providers into acting as content police, and how much of the open internet's architecture is prepared to resist that role.