A Paris court has effectively forced a privacy-focused internet infrastructure provider out of the French market rather than compel it to filter the internet for every user worldwide or start tracking where its users connect from. Quad9, the Swiss non-profit behind one of the internet's most widely used free DNS resolvers, says it will cut off service to users in France on November 24, after a court ordered it to block domains streaming pirated broadcasts of a women's tennis competition or face daily fines.
A Ruling With No Clean Answer
The case began when beIN Sports France, holder of broadcast rights in the country, sought an order compelling internet infrastructure providers to block a growing list of domains carrying unauthorized streams. The original order, issued in May, named six domains; it later expanded to 58, plus any future domains yet to be identified. Google and the DNS4EU operator Whalebone received the same instructions. When Quad9 did not comply, the court ruled on October 21 that it must pay 1,000 euros per day until the broadcast window closed.
The court's reasoning hinged on the fact that Quad9 already blocks certain domains associated with malware, which the judge took as evidence that selective blocking is technically possible. Quad9 argues the two situations are not comparable: malware blocking applies uniformly to protect users everywhere, while the court order demands blocking based on a user's physical location in France - something Quad9 says it has no technical means of determining, because it does not collect or store data linking users to jurisdictions.
Why Geofencing Is Not a Simple Switch
Quad9's objection is not philosophical alone. The organization points to a prior dispute in Germany, where it implemented geographic blocking at a court's request, only to find that a rights holder used a VPN to probe the block from outside the restricted area, triggering a contempt proceeding. Quad9 eventually won that case, but only after considerable legal expense. The episode illustrates a structural weakness in geo-based DNS filtering: location is inferred from IP address ranges, which can be masked or rerouted through a VPN, a proxy, or simply a different DNS resolver. Anyone seeking the blocked content can switch providers in seconds, while the compliance burden and legal exposure remain fixed on the resolver.
Quad9 describes the mismatch bluntly: blocking a domain at the DNS level to stop determined users is like holding up a sheet of newspaper to block a distant view - a gesture that inconveniences ordinary users far more than it deters anyone determined to reach the content.
Tracking Users or Blocking the World
Stripped of technical jargon, the court has left Quad9 with three paths. It could block the named domains for all users globally, meaning a French court's order against pirated streams would apply to a user in Tokyo or Toronto. It could build a system to identify and log users' locations, something it says would contradict its founding mission as a privacy-respecting public resolver that keeps no dossiers on the people who use it. Or it could withdraw from the French market entirely, shielding itself from further penalties while leaving French users to rely on other resolvers.
Quad9 has chosen withdrawal, warning that roughly twenty similar cases are pending against it in France, and that the accumulated penalties from all of them could be existential for a non-profit operating on limited resources. An appeal is still pending, but it will not take effect before the November deadline.
Who Loses Access, and What Comes Next
The list of French entities relying on Quad9 includes major public institutions: the national electricity utility EDF, the national rail operator SNCF, public broadcaster France Télévisions, the Institut Pasteur research institute, a major public hospital group in Marseille, and the national research and education network RENATER, alongside various regional and local government bodies. All will need to switch to alternative DNS providers before the cutoff.
France is not alone in testing this approach. A sports law passed earlier this year gives the regulator ARCOM power to order real-time blocking of suspected pirate streams during live broadcasts. In the United States, two bills - the American Copyright Protection Act and the DEFEND IP Act - would similarly empower courts to compel domain name resolution services to block sites, with the latter targeting resolvers above a revenue threshold. Quad9's departure from France may become a reference point in those debates, illustrating what happens when infrastructure built for universal, neutral address resolution is asked to enforce territorial content rules it was never designed to apply.