A French court has put a nonprofit privacy service in an impossible position: track its users, censor the internet for everyone on the planet, or walk away from an entire country. Quad9, the Swiss-based free DNS resolver known for refusing to log user data, has announced it will stop serving France on November 24, after a Paris court ordered it to block pirate streaming domains tied to a women's tennis broadcast or face daily fines.
A Domain Name Service Turned Enforcer
Quad9's function is narrow by design. When a device wants to reach a website, it asks a DNS resolver to translate the domain name into an IP address. Quad9 performs that lookup while blocking domains known to distribute malware or facilitate phishing, and it does so without retaining records that could tie a query to a specific person or place. That no-logging approach is central to its mission as a public-interest service, used by universities, hospitals, and research networks precisely because it does not build profiles of who is asking for what.
The October 21 ruling, sought by beIN Sports France as the broadcaster's rights holder, demanded that Quad9 block 58 streaming domains or pay 1,000 euros a day. The judge rejected Quad9's argument that it lacks the technical means to isolate French users, pointing out that the resolver already blocks malware domains globally. Quad9 counters that blocking dangerous domains for everyone is categorically different from blocking content for one jurisdiction while serving the rest of the world normally - the latter requires knowing where a user is, which means collecting data it has deliberately chosen never to hold.
Why Geolocation Is Not a Simple Fix
Blocking by jurisdiction sounds straightforward until the mechanics are examined. To restrict access only for people in France, a resolver would need some way to determine a query's origin - typically through IP address geolocation. That approach is porous: anyone using a VPN or alternative routing can appear to be elsewhere, rendering the block easy to bypass while still exposing the service to legal liability for an incomplete fix. Quad9 has already lived through this scenario in Germany, where a geo-restricted block was circumvented and the organization was fined for contempt before eventually prevailing in court, at considerable cost.
There is also the question of precedent. If Quad9 builds the infrastructure to identify and filter users by country for one case, that same infrastructure becomes available for the next order, and the one after that. Quad9 says roughly twenty similar cases are already pending in France, each carrying its own potential penalties. Absorbing that volume of litigation, the organization argues, is not sustainable for a nonprofit with no commercial revenue stream.
A Pattern Beyond France
France has pressed this approach before. OpenDNS withdrew from the French market in 2024 after a comparable dispute brought by a pay-television broadcaster. Earlier this year, French lawmakers passed legislation letting the regulator ARCOM order real-time blocking of suspected pirate streams during live broadcasts, with compliance checked afterward - a mechanism that pressures intermediaries to act before any judicial review of whether a given domain is actually infringing.
The same tension is surfacing in the United States, where two proposed bills - the American Copyright Protection Act and the DEFEND IP Act - would explicitly empower courts to order domain-resolution providers to block sites, with the latter targeting resolvers above a revenue threshold. Both signal that regulators and rights holders increasingly see DNS infrastructure, rather than hosting providers or the sites themselves, as the more convenient chokepoint for enforcement.
What France Loses
The practical fallout extends well beyond streaming piracy. French institutions relying on Quad9 - including EDF, SNCF, France Télévisions, the Institut Pasteur, a major Marseille hospital group, and the national research network RENATER - will lose access to the service on November 24. For organizations that chose Quad9 specifically for its privacy guarantees and security filtering, the options narrow to alternative resolvers with different data practices, or operating without that layer of protection altogether.
Quad9's broader warning is about precedent rather than tennis streams: once a resolver accepts that courts can compel content-based filtering, the scope of future demands - political, religious, or commercial - becomes difficult to contain. An appeal is pending, but for now, leaving the market is the only path that avoids both surveillance infrastructure and global censorship.