Why Quad9 Is Leaving France—and Why DNS Matters

A dispute that starts with a website name

Imagine typing a familiar website address into your browser. Before the page loads, your device performs a small piece of invisible housekeeping: it asks where that name lives on the internet. That lookup is handled by the Domain Name System, or DNS, which translates human-friendly names such as example.com into Internet Protocol (IP) addresses that computers can use.

On Tuesday, November 24, 2026, Quad9 plans to stop serving users located in France. The decision follows a ruling from the Paris Judicial Court on October 21, 2026, in a dispute brought by beIN Sports France. What looks like a narrow copyright-blocking case has become a much larger argument about privacy, geography, and whether a DNS resolver should be treated like a publisher or website host.

First, what does a DNS resolver do?

A recursive DNS resolver is a server that looks up internet names on behalf of your device. It may already have an answer stored in its cache. If not, it asks other DNS servers until it finds the official information for that domain, then sends the result back to your computer or phone.

The journey looks roughly like this:

your browser
 ↓
your device's DNS client
 ↓
Quad9's recursive resolver
 ↓
DNS servers that publish the domain's official records
 ↓
IP address returned to your device

The resolver is more like a directory service than a web host. It helps your browser find a destination, but it does not store the video, article, image, or other material available at that destination. Once the lookup is complete, your device connects to the resulting IP address through the normal internet routing system.

That distinction sits at the center of the Quad9 case. Why does a DNS resolver matter in a copyright dispute? Because blocking the lookup can make a website harder to reach without removing the underlying content or shutting down the server that hosts it.

What the French court ordered

beIN Sports France argued that certain domain names were involved in unauthorized IPTV services carrying sports broadcasts. IPTV, short for Internet Protocol television, describes television or video delivered through internet networks rather than traditional broadcast systems. The case concerned a changing list of sites and subdomains associated with those services.

A May 13, 2026 judgment required Quad9 to take measures intended to prevent access from France during the relevant sports season. The October 21 ruling addressed enforcement and ordered Quad9 to implement those blocking measures under a penalty of €1,000 per day. The order applied until November 14, 2026, the scheduled end of the tournament period described in the judgment.

Quad9 says it does not support piracy. Its objection is about the role assigned to the resolver. The foundation provides a free, privacy-focused DNS service and already offers optional threat blocking for malware and phishing domains. In its view, filtering known cyber threats is different from altering ordinary DNS resolution to enforce a private company's content-access demands.

The awkward problem of identifying “France”

A court can describe a restriction as applying to French users. A DNS operator still has to determine who those users are.

One possible approach is GeoIP, a method that estimates a user's location from the IP address seen by a service. GeoIP can be useful for broad regional decisions, but it is not a reliable identity system. People use virtual private networks, or VPNs, which route traffic through another location. Mobile users roam between networks. Businesses connect offices across borders. Universities, cloud providers, and public agencies may operate networks whose addresses do not neatly match the people using them.

Quad9 does not require an account or proof of identity before someone can use its public resolvers. It says it does not maintain a list of French users that could be used to apply the order precisely. Building such a system would require more collection and classification of user information, which would cut against the privacy model Quad9 was created to protect.

The foundation also points to an earlier German dispute involving Sony Music. Quad9 says it tried location-based blocking during that case, but a VPN was later used to access the material from Germany. The court treated that circumvention as evidence that the measure was not working, and Quad9 faced contempt-related penalties. For the organization, that experience made another GeoIP workaround too risky to trust.

Why global blocking is not an acceptable answer

Quad9 could add the disputed domain names to the global blocklist used by its secure service at 9.9.9.9. That service blocks domains associated with malicious activity. Quad9 also operates separate resolver addresses, including 9.9.9.10, which does not provide threat blocking.

A global addition might satisfy the practical goal of preventing French users from receiving answers for those names. It would also prevent users everywhere else from resolving them through the same protected service. A French court order would effectively become a worldwide rule, even though the case concerns access from one jurisdiction.

That is the precedent Quad9 wants to avoid. If every country could force a global resolver to apply its own content restrictions, the DNS layer could become a patchwork of international demands. A service designed to provide consistent answers would instead have to maintain a growing collection of country-specific exceptions, with no guarantee that the boundaries could be enforced accurately.

Why Quad9 chose to leave

The foundation says it has been left with two options it considers unacceptable. It could block globally and extend a French decision to users in other countries. Or it could attempt location-based blocking, collect more information, and still risk getting the boundaries wrong when users travel, use VPNs, or connect through shared networks.

Quad9's response is to withdraw its services from France rather than implement the ordered blocking. From November 24, French users will lose access to Quad9's recursive DNS and its threat-protection service. Network administrators, households, schools, and businesses that rely on Quad9 will need to choose another resolver before that date.

The immediate result is painful for users who chose Quad9 for privacy and protection. The longer-term question is even more significant: whether neutral internet infrastructure should be made responsible for enforcing restrictions on material it does not host, publish, or control.

A DNS lookup can guide you toward a server, but it cannot make the server disappear. Quad9's departure from France is a reminder that a small technical step—translating a name into an address—can become a powerful gate when courts and rights holders decide that the resolver belongs on the other side of it.