Quad9, a Swiss nonprofit foundation that provides free, privacy-preserving DNS resolution to hundreds of millions of users, announced it will withdraw all services from France effective November 24, 2026. The trigger: a French court ruling ordering Quad9 to block recursive DNS resolution for domain names that beIN Sports — a Qatari-owned broadcaster — claims are involved in copyright infringement of its sports broadcasts. The court reduced the financial penalty from €580,000 to €1,000 per day, but the structural problem is unchanged. The ruling exposes a fundamental incompatibility between how courts imagine the internet works and how it actually operates. Quad9 has no user database. It requires no sign-up, no identity verification, no jurisdictional mapping. Recursive DNS resolution is, by design, a stateless, neutral lookup service — the phonebook of the internet. The court is ordering an organization with no knowledge of who its users are to selectively filter responses for users in one jurisdiction, a task that is technically impossible without either surveilling all users or lying to all of them. Quad9 tried the geoIP workaround before. In a parallel German case brought by Sony Music Entertainment GmbH in 2021-2023, Quad9 attempted geoIP-based blocking as a temporary compliance measure. Sony then used a VPN to access the blocked content from Germany, demonstrated the bypass to the court, and Quad9 was fined for contempt. The lesson is devastating: the only technically honest options are global blocking — which extends French law to every internet user on Earth — or no compliance at all. The beIN case is not isolated. Approximately 20 additional lawsuits are pending against Quad9 in France, each demanding blocking of different domain names. The pattern is clear: rights-holders have discovered that targeting DNS resolvers is cheaper and faster than pursuing the actual hosts of infringing content. A nonprofit with no revenue stream becomes the path of least legal resistance for corporations with functionally unlimited litigation budgets. The withdrawal means French users lose access to a free cybersecurity service that blocks malware and phishing domains — protection that has nothing to do with copyright. There is no equivalent service that simultaneously complies with European privacy law (GDPR), provides threat-blocking, and operates without user tracking. The court has not created a solution to piracy; it has removed a layer of security from millions of people to benefit a single foreign broadcaster. The twenty-year implication is the one Quad9 names explicitly: once the tools of censorship are built, they are rarely used sparingly. If recursive DNS resolvers can be conscripted as content-blocking infrastructure by any national court for any rights-holder, the mechanism generalizes instantly. Every jurisdiction with a court system gains a veto over what the rest of the world can resolve. The internet doesn't fragment along national lines by accident — it fragments when courts treat infrastructure operators as content gatekeepers. Quad9's departure is not a business decision. It is the logical endpoint of a legal framework that treats neutral infrastructure as a liable intermediary. The real question is whether other resolvers — Cloudflare's 1.1.1.1, Google's 8.8.8.8 — will face the same pressure, and whether they'll have the same principles or the same vulnerability.
