Quad9 to exit France (quad9.net)

1150 points by farrokhi 17 hours ago

johnhtodd 12 hours ago

(context: I'm the CTO of Quad9 and am one of the people dealing with the lawyers)

There is an understandable focus on "how are you going to block French users" when we have also claimed that geoIP blocking is insufficient for selectively denying resolution for certain names - we understand this conflict, but we think it is energy spent in the wrong place.

It is probable that we will use geoIP filters to block French users from our services after November 24. We could apply this same geoIP filter list now to selectively block French users from reaching the sites that we've been told to make unavailable. But this would corrupt our core premise, which is that the DNS is not the right place for this to happen, and if we comply within France to meet the requirement then we accept the worst eventual outcome for users and we still do not have legally perfect coverage. We wish to first remain consistent with our core mission, and secondarily we must remain as close to compliance as we can to the legal constraints put upon us. By accepting the demands for blocking, we would admit that such demands are permissible within our mission - that we will act on behalf of companies (or others) to create ineffective and mis-directed regimes of content constraint.

We would be admitting that we think this solves the problem - it does not. We would be admitting that we will do this for an ever-increasing number of names - we will not. We would be permitting these methods to be applied for more areas of filtering such as moral, religious, social, or political reasons - we must not.

So we accept that there is the possibility that we will have errors in our blockade, but in this case (blocking French users) we maintain consistency with our stated mission of integrity of the DNS. We would rather there be a clear distinction made for users of our services: you get the DNS as you (the user) expects, or if Quad9 is forced to pollute the service with unexpected and arbitrary number of fragmentation demands, then we will not offer the services at all.

The underlying issue is not ONLY that geoIP blocking is ineffective, but that the entire premise of any of these demands is inappropriately applied to DNS recursive resolution providers. We would hope that this discussion continues to be on the most fundamental of the disagreement we have with the outcome in this court case, not on the details of the technical implementation which have yet to be entirely decided and which can be tuned over time.

monneyboi 12 hours ago

Keep up the good fight! I'm happy that you take a stand for your beliefs and try to do what's best for all of us.

matheusmoreira 7 hours ago

Thanks for fighting this.

I wonder how much longer the internet will manage to hold out. Governments will continue trying to impose their laws on it, causing the international network to degenerate to numerous national networks with heavy filtering at the borders. It's really sad to watch...

somenameforme an hour ago

Necessity is the mother of invention. Fortunately what's needed is already invented, but the motivation to push 'normal' people there hasn't. In particularly decentralized techs, TOR, and other technologies are fully robust against these actions.

matheusmoreira an hour ago

thayne 4 hours ago

It isn't just governments. Cases like this are started by companies.

NetMageSCW 9 hours ago

If you have no presence in France do you need to care about the ruling or the fines?

Obscurity4340 7 hours ago

I mean, theres probably EU provisions in place to make that kind of local ruling have teeth, n'est-ce que pas?

cvadict 5 hours ago

freedomben 11 hours ago

Thank you for the explanation! I couldn't agree more with your stance, and I appreciate deeply you fighting to maintain your (correct) principles. You've gained at least one fan and new user today.

jackjeff 12 hours ago

One can only hope the tribunal that rendered this ridiculous decision is one of the organizations that lose DNS access on November 24.

toredash 11 hours ago

Honest question here: why don't they target the operators for the nameservers that own the affected domain, basically the TLDs?

Oh right, the blocked domain is probably not a french TLD...

thayne 4 hours ago

Well, they might be able to go against the domain registrars and possibly cloud providers that also operate in the french market. But those companies probably have a bigger expensive legal team, while quadnine is just a little non-profit.

pyrale 10 hours ago

Quick question: what would happen if you decided to simply shield yourself from France’s action without applying any change to your dns? Or is blocking french users considered a compliant answer by French courts?

I don’t get why you would still need to block french users if you also need to exit the jurisdiction.

voxic11 10 hours ago

Because continuing to provide the service to French users would mean they have not exited the jurisdiction. You cant provide services in a jurisdiction and at the same time expect not be subject to that jurisdiction. That's just not how any country treats legal jurisdiction.

crote an hour ago

KolmogorovComp 10 hours ago

walrus01 10 hours ago

notpushkin 10 hours ago

arcanemachiner 10 hours ago

Unrelated but hoping you could answer this:

There was a rumour years ago that Quad9 was connected to UK intelligence, or something like that. I haven't heard anyone discuss there for a long time, but wondering if you (or anyone reading this) can comment on the source of the rumours and whether there is any veracity to them.

gerdesj 9 hours ago

The thing about DNS is that you can do your own investigations, rather than rely on rumour and innuendo. You can query their DNS and anyone else you can get at and compare results. You can use a VPN to appear to come from somewhere else or ask a friend to perform a query on your behalf.

You can literally [sigh] be your own journalist in this regard. All you need is a DNS query tool. I recommend dig but you might only have nslookup available out of the box.

Now, this UK intelligence thing. Even if James Bond Q's mates were actually running a DNS system you can still query it and compare it to someone else's view of the internet, say 1.1.1.1 or 8.8.8.8 or whatever.

You can also go to the source, ie root: . and work your own way down to decide on what is what.

Let's have a go at an analogy: DNS is (not really) a bit like a topographical map. You could buy your maps from DodgyRussianMaps'R'us and be surprised that Ukraine has somehow been subsumed by a bunch of murderous wankers. On the other hand you might buy your maps from HonestJonOffOfFaceb00c and note that it isn't. You can, of course, ask for a few other opinions and make up your own mind.

My real point is that DNS is actually quite hard to tamper with, without breaking so many things that everyone can know it is being messed with. When an org resorts to fiddling with DNS they've already lost whatever argument is to be had.

fonix232 8 hours ago

peddling-brink 8 hours ago

tiffanyh 3 hours ago

I’m sorry for being so dense, so what do you plan to do?

It sounds like selectivd site blocking is against your mission, so will you then just not offer Quad9 to any person in France instead (total blackout across all sites)?

Sorry if I’m missing the obvious or your stated solution.

tommica 12 hours ago

Sorry that you guys have to go through this. I use quad9 and it works great!

swarfield 11 hours ago

Better than geoip, y'all could work with the French to have French networks point to a black hole server by having BGP point 9.9.9.9 at said server.

xp84 7 hours ago

The French might just do that anyway and point it at some government-approved “safe” DNS resolver.

ghm2199 10 hours ago

I asked his elsewhere but aren't there like a prepondeance of existing case law or amicus-briefs that would speak to the logical and historical stupidity of arguments by the plaintiffs?

hollow-moe 10 hours ago

So, basically, you admit you will comply exiting all countries that ask for it; Pushing users to allegedly less safe resolvers in the name of security and integrity; And eventually ending the service in a couple of years because no one will be able to use your service since you'll be blocking most parts of the world and won't work without VPN exit in specific places. The decision is understandable, this really is a dillema I wouldn't want to take part in. You'll die by a thousand cuts of authoritarianism.

angry_octet 10 hours ago

I haven't seen your donation to their legal defence fund? Cheque is in the mail?

romaniitedomum 10 hours ago

It's strange that Quad9 openly does malicious domain filtering [1] using what it terms "threat intelligence feeds", but apparently filtering piracy domains is technically impossible and not the right place for this to happen. I think courts rightly are suspicious of this kind of doublespeak from DNS companies. If DNS filtering is effective for protection against malware and ransomware, it will be at least somewhat effective for piracy filtering too.

[1] https://quad9.net/service/threat-blocking/

johnhtodd 10 hours ago

(context: I am the CTO of Quad9) Using those threat intelligence feeds is optional, as the blog post indicates. 9.9.9.10 & secondaries have no filtering.

The threat feeds we offer are in alignment with what the user expects and intends. Mandatory restriction of DNS resolution by a third party (not the user, not Quad9) is expressly what users do NOT want, regardless of the outcome. Once such restrictions are enacted and treated as normal, the channel for making demands will fill with a flood of "objectionable" names from every corner for every reason. Quad9 has already received demands from the French regulator to block sites which deliver adult content found to be objectionable to minors. We see an extremely slippery slope which has already moved out of piracy as the scoped intent which is this case in particular.

More to the point: prohibiting content via the DNS is a useless exercise when it is done out of alignment with the end users' goals - they will simply use some other recursive resolver (or their own) probably without the benefits of being oriented towards security and privacy. We have no monopoly on DNS resolution - there are thousands of others open to public use, and anyone can set up their own, for free, with no mandatory requirements by governments or regulators. This case (and any others like it) only drives out law-abiding organizations who are trying to promote better cyber hygiene and who want to keep the DNS as a single, un-splintered high-integrity pointer system.

p-e-w 8 hours ago

teknologist 10 hours ago

Yeah, it's not the right place for it to happen. One's a service to protect the consumer, and the other is a corporate profit preserving concern. Why should a free DNS service be doing their work for them?

romaniitedomum 10 hours ago

nadermx 17 hours ago

"The plaintiff (Sony Music Entertainment GmbH) then used a VPN to access the blocked content from Germany in circumvention of the geoIP blocking. The court agreed with Sony in their assertions of noncompliance, and we were fined for contempt of court."

Imagine doing everything possible to stop something. They then circumvent your protections with yet another service, and you get fined.

I wish I could even suggest what someone could do against these trolls.

This is like saying "we put a lock requested by court and where found guilty because plantif hacked us after"

vaylian 14 hours ago

The article rightfully mentions the Sony case, but the article is actually mainly about another company:

> beIN, a Qatari company with offices in France, previously sought to force Quad9 to block resolution for a set of domain names they assert are participating in copyright infringement of its audiovisual rights on sports event broadcasts.

This seems to be the relevant wikipedia article: https://en.wikipedia.org/wiki/BeIN_Channels_Network

DaiPlusPlus 13 hours ago

...I'm dumbfounded at the idea of using real-life courts to enforce real-life sporting events' streaming rights by getting rapid injunctions against DNS providers as the means of striking at a multiply-redundant head of a piracy hydra when DNS TTLs are often longer than the actual sporting event being infringed upon.

...it's like going after the independent printshop who printed your local telephone directory book to redact known ne'er-do-wells from the directory because a local weed drug deal took place 5 minutes ago but the next telephone directory print isn't scheduled for another 6 months.

also, doesn't DNSSEC prevent this anyway?

swiftcoder 12 hours ago

giancarlostoro 12 hours ago

peanut-walrus 11 hours ago

bogeholm 8 hours ago

ctippett 12 hours ago

bitpush 16 hours ago

> Imagine doing everything possible to stop something. They then circumvent your protections with yet another service, and you get fined.

Isnt this what gets all tech companies into trouble all the time. Something objectionable happens (ChatGPT helping someone bulid a bomb for instance) and we go like "Do better".

zamadatix 15 hours ago

I think, usually, in those cases it's that people believe the company did not really do anywhere near everything it could - it did the bare minimum it thought it could get away with then seemed shocked it wasn't enough to matter.

Here, if any pair of countries have conflicting rules then you simply can't expose your service to both because it's plain impossible for you to block all means of VPN/proxy regardless of how perfect your service tries to detect it. There's no payment, there's no account, there's no anything - you're just serving DNS to an IP that reports to be out of Germany according to German law. At some point it stops being a mistake/malintent of the company and one of the user. Where that transitions probably depends on the person though.

yorwba 14 hours ago

warkdarrior 15 hours ago

matheusmoreira 15 hours ago

As we should. These corporations are rent seeking monopolists. Like many Japanese companies, Sony is an intellectual property absolutist. PlayStation creator Ken Kutaragi called our objections to the "you'll own nothing" future a "mentality issue".

I have sympathy for my fellow man. There isn't enough liability in the world for these corporations.

warkdarrior 15 hours ago

throwaway894345 12 hours ago

ChatGPT isn’t “dumb pipes” like DNS or ISP infrastructure. Judgment/intelligence is the entire product for ChatGPT.

EDIT: Look at that, downvotes but no rebuttals. (:

bitpush 11 hours ago

Doe-_ 14 hours ago

I'm confused; how does the geoIP block they implemented in Germany differ from the planned end of service for French users?

SoftTalker 14 hours ago

My question as well. I suspect they will update their terms of service to forbid use within France. Then anyone who uses their services from France will be in violation of the terms, which opens them up to legal penalties themselves.

Or perhaps they are just planning to physically withdraw any operating presence in France, so as to not have any facilities, equipment, or employees who are located in French jurisdiction.

But it wasn't clear from the article, unless I missed it.

necovek 13 hours ago

I had the same question and read through it to get an answer but it is indeed not there :)

My guess is that they brought Germany example of doing GeoIP as the model they'll use but mostly noted as a fun quirk that even that solution received a weird challenge which they managed to fight off (at cost, though).

Obviously, it'd be nice to get a direct response from them as it is unclear.

johnhtodd 11 hours ago

irusensei 16 hours ago

Lately Sony Corpos have been really getting into their supervillain arc aren’t they?

sunaookami 15 hours ago

Lately? Did you forget the rootkit they installed on everyone of their customers PCs?

lukewarm707 11 hours ago

nubinetwork 15 hours ago

mrandish 13 hours ago

> I wish I could even suggest what someone could do against these trolls.

While trolls are awful, something like trolls can always exist in a free society. The root problem here is the French courts enabling the trolls with unworkable rulings. Both the French and Italian justice systems have a history of making some clueless and even incoherent rulings which are never corrected.

GTP 12 hours ago

I wait for Netflix (and other streaming services) to be fined due to their users accessing content that shouldn't be available in a certain territory via a VPN.

immibis2 9 hours ago

isn't that precisely why they block most VPNs now? I worked for one, and all of our content licensing agreements stipulated that we had to block VPNs, and which vendors were allowed to give us the list of VPN addresses to block. (it's Digital Element, by the way.)

Of course, we weren't liable for failing to block any VPN address not on the list, but we also weren't allowed to not block an address that was on the list, which resulted in customer complaints.

mitxela 16 hours ago

And for contempt of court nonetheless. That's meant for when you blatantly don't do the thing the court told you to do, not when you did it but it didn't work how the court wanted.

euio757 15 hours ago

Seems they're following Cisco similar move 2y ago of exiting the market

> Canal+ has been busy getting web-blocking injunctions in France against sports piracy sites which stream sporting events for which it has the exclusive broadcast rights within the French market. It previously targeted DNS resolvers operated by Google, Cloudflare and Cisco.

> All three unsuccessfully opposed the web-blocking orders. Google and Cloudflare, therefore, have been forced to instigate them. However, Cisco just pulled its OpenDNS service out of the French market entirely.

(Per https://completemusicupdate.com/quad9-vows-to-fight-absurd-w..., https://completemusicupdate.com/opendns-pulls-plug-on-france...)

mschuster91 13 hours ago

Rare Cisco W lol

babarock 17 hours ago

Punishing the DNS resolver is weird. Would you punish the phone book company for having the number of a criminal listed?

teroshan 16 hours ago

Same reason copyright abusers threaten people that help remove the DRM from their Amazon-bought e-book so it can be read on their non-Amazon bought e-reader with a $250,000 fine and five years in prison for circumventing a digital lock using DMCA, because it's what the legal API allows them to achieve their end goal.

It's not about if it makes sense from a moral point of view.

yard2010 11 hours ago

Well you wouldn't steal a car, why steal a book you rented from the feudal lord? It's his intellectual property.

JoshTriplett 16 hours ago

The most likely answer is that they didn't think about it or didn't understand or didn't care. But on the off chance they did, perhaps they thought the DNS provider would enforce the ruling worldwide.

rdtsc 16 hours ago

It shows maliciousness (we can bully this smaller player for a win) and/or total incompetence (we don't even understand how internet works, but we'll issue rulings anyway).

astrobe_ 15 hours ago

The same method is used to block sites that don't respect the decisions the French people have made regarding the limits of the freedom of speech (no hate speech, no terrorist proselytism, no pedo, etc.).

Granted, that's the theory.

When the demands come from a company on the basis of copyright/intellectual property (that is, exclusive broadcasting rights), one can feel less comfortable about this affair; even thought the judgement mentions that the case is backed by the ARCOM, the french authority for broadcasting, which should instead IMHO deal with a couple or two of private TV channels that are obvious vectors of fake news.

But, this is the same copyright that can protect you when you publish programs, source code, images, etc., even when you use a free and open license; the licence has meaning thanks to the copyright.

betterunix2 14 hours ago

It is actually worse than that. This amounts to punishing someone for looking up a phone number in a phone book that someone else published.

pixl97 16 hours ago

Because they can.

Attacking the people doing the actual bad things is hard, attacking a single unified organization is easy.

pigggg 5 hours ago

Because they've already got the ISPs DNS resolvers blocking shit and when they see clients from those same ISPs still connecting they get hints on which public DNS resolvers people are using. You can make a safe bet French ISPs played an active part in pointing people to go after quad 9.

crote 15 hours ago

Sue the government for providing the road that criminals walk on!

smsm42 14 hours ago

If phone book publishing were regulated in a way that paid content on the internet is regulated, then absolutely yes. Not only that, people who mention the existence of phone books as means to obtain phone numbers, and people developing software capable of storing phone numbers, would be threatened and harassed too, as enablers of criminal activity. Copyright leeches have enough money to buy laws favorable to them. Which, also, gives them more money to buy even more laws favorable to them. It doesn't have to make sense for you because it's not designed to serve your interests.

mitxela 16 hours ago

You would if you could and it'd probably work.

I believe the position of the French government is that anyone in the path of a crime can be ordered to block the part of the crime that relates to them, without having any liability for the crime. So quad9 are not criminals for not blocking pirate sites, but still have to block specific sites when ordered.

iamnothere 16 hours ago

Where does this line of reasoning end though? Shouldn’t the browser makers be blocking the sites too? What about curl? What about the OS and local DNS resolvers (unbound etc)? Maybe Ethernet and wifi cards should contain blocking logic? At some point you have to draw a line!

eloisant 14 hours ago

vlyan 5 hours ago

progval 14 hours ago

mitxela 8 hours ago

iAMkenough 14 hours ago

gpm 13 hours ago

JokerDan 16 hours ago

DNS resolvers getting sued should stop resolving domains/properties of the companies suing them too when they are forced to take these kinds of actions/steps off the back of a legal decision like this.

drdexebtjl 16 hours ago

Keep resolving, but instead of resolving multiple A records, resolve just one. Fuck that one server in particular.

Delay updates by 1 week.

Answer randomly with the up-to-date or the out-of-date records.

ivanjermakov 15 hours ago

jakzurr 10 hours ago

SoftTalker 14 hours ago

Then you're harming your own customers/users as much as anything. They probably don't want to do that.

bambax 14 hours ago

Resolve to porn.

charles_f 10 hours ago

Randomly resolve some requests with 127.0.0.1

WhyNotHugo 15 hours ago

While I agree in spirit, this also makes the resolver away from being able to claim they're just a neutral service which just delivers existing records without being opinionated

rpdillon 15 hours ago

Fair point. I'd say "We're neutral, unless you attack us, in which case we stop being neutral about you, in particular". I'd still use them if this were the policy.

vanviegen 14 hours ago

Pxtl 12 hours ago

I mean if they're getting sued for failing to block proxy/vpn services they're being told to be opinionated and they can't be a neutral service. "You asked us to be opinionated about traffic, so we're doing that. Do you want us to go back to being neutral?"

raverbashing 16 hours ago

Obviously

The problem is that these types of companies are started by naive idealistic techs who only know how to play by the rules and can't figure out why people would misuse their products

They were very well described by the "rubber hose crypto" XKCD

(Not that I don't think a DNS company stays at the same level of complexity - both legal and technological - as a VPN company, but still)

anonymous908213 16 hours ago

Or, get this, anything that is useful can be misused, so maybe we should go after the people misusing things rather than locking all of society in a cage to pre-emptively prevent misuse.

"The problem is that these types of companies [kitchen knife manufacturers] are started by naive idealistic [craftsmen] who only know how to play by the rules and can't figure out why people would misuse their products [by stabbing people]."

AspireOne 15 hours ago

What "types" of companies do you mean exactly?

raverbashing 15 hours ago

polski-g 15 hours ago

Redirect porn websites domains to them.

benibela 11 hours ago

That doesn't work if they use https.

unless someone could still use emudhra certs

numpad0 14 hours ago

That's risking yourself getting flashbanged on a plane for suspicion of human trafficking and sacrilegious creation of fictions and engaging in Antaractican nuclear programs.

hoherd 12 hours ago

This would hurt their users by making their DNS services less useful than competitors.

tredre3 15 hours ago

Hopefully the leadership of public resolvers isn't as a childish as you are.

That kind of action would penalize their users far more than it would hurt the evil corporation that slighted them. Not to mention they'd lose users. People who choose quad9 likely aren't too keen with DNS tempering.

But yeah, take that sony-or-whatever!

millerm 12 hours ago

Isn't the intent of rejecting, or boycotting, a company supposed to cause a disruption in the first place? If the people boycotted a company into bankruptcy, because said company refused to change their behavior, would the people be in the wrong because it might hurt the users? No.

lljk_kennedy 14 hours ago

Well, the user of that company, not the users of the DNS service.

miohtama 13 hours ago

The person behind this legal warfare is the beIN Sports chairman, Nasser Al-Khelaifi. He is also president of Paris Saint-Germain and chairman of Qatar Sports Investment.

He is, obviously, not French.

His self-claimed annual income was about $15–25 million, and his personal wealth was about $70–100 million.

artooro 17 hours ago

Quad9 is getting picked on because they do not have a large financial backing. Not because it makes any logical sense. France is shooting themselves in the foot.

prmoustache 12 hours ago

France is not doing anything. This is BIG SOCCER suing the hell of everyone.

walrus01 10 hours ago

This is the French state kowtowing to BIG SOCCER.

0x0000000 16 hours ago

Maybe i missed it in the post, but how are they going to implement it? They mentioned geoIP is insufficient for complying with the block, so if they dont have a way to block only these domains for users in France, how will they block all requests for users in France?

To be clear I dont think they should comply with the block, but i didn't grasp how they're going to block everything if they dont have a way to only block some things.

eloisant 16 hours ago

They're removing all presence they have in France, their servers mostly.

They want to be out of reach of French courts basically.

keoneflick 15 hours ago

Do you think they will geoblock in addition to physically leaving?

punchmesan 14 hours ago

johnhtodd 11 hours ago

disiplus 15 hours ago

You stop serving anything for french ips. Its like you dont exist.

hk__2 15 hours ago

"french ips" don’t mean anything as the post said; see their case in Germany.

disiplus 14 hours ago

Aachen 11 hours ago

djha-skin 15 hours ago

...That's just geoIP blocking, which he covered in his comment.

disiplus 14 hours ago

DemiGuru 16 hours ago

I mentioned not too long ago that Mullvad was handing its resolver users over to Quad9. Sadly, I didn’t realize how accurate my concerns would be. Quad9 is a good operator, they actually fought Sony in a German court instead of quietly complying. Yet, they were still ordered to block the content. That’s the core problem. A blocking order is only as damaging as the resolver it impacts. Every time an operator shuts down and redirects its users to Quad9, it pools more users into one place. This makes the next blocking order even more valuable and effective for whoever files it. And now we're seeing Quad9 backing out of a market.

skrause 15 hours ago

> Yet, they were still ordered to block the content.

At first yes, but ultimately the blocking order was undone by a higher German court in December 2023.

alberth 15 hours ago

corvad 14 hours ago

Reminds me of Cloudflare going down every time there was a football game in Spain as the ISPs blocked all the "bad" ips, which ironically also served government websites.

ErneX 13 hours ago

It’s still happening every time there is football, at least they now seem to lift the block when the games end, when this started sometimes they took 12 hours after the game ended.

efilife 9 hours ago

I don't see the relation and want to laugh with you guys. ISPs blocked cloudflare during football matches? Or the government websites directly? why?

desmaraisp 5 hours ago

Spain's government is made up of spineless dinosaurs. So the official soccer diffusion corps bought the courts and sued all the ISPs to force them to block all the soccer piracy sites during a match. Those sometimes ended up being hosted on cloudflare's IPs. Thus, a good portion of cloudflare goes down for the spanish clients when there's a game on.

Did that work? Hell no, piracy sites just moved elsewhere. But big soccer is slowly ruining the internet and all the EU governments are letting it happen

sznio 39 minutes ago

this_user 16 hours ago

Whenever people talk about why you should host in the EU, this is just the most recent example for why should shouldn't.

fmbb 11 hours ago

betaby 7 hours ago

US ISP ignore blocking orders and that was never challenged.

nairboon 15 hours ago

Host in Switzerland, that's where Quad9 operates from.

drnick1 14 hours ago

Switzerland is not in the EU, thankfully. And it seems to be one of the few places left in Europe where privacy is taken somewhat seriously.

bwoodcock 14 hours ago

sltkr 13 hours ago

Switzerland has its own DNS blocklist that all ISPs obey. [1]

Quad9 doesn't obey it but I never understood how they can get away with that legally. I'd be interested in an explanation if someone knows more!

1. https://www.gespa.ch/en/fighting-illegal-gambling/access-blo...

johnhtodd 11 hours ago

einsteinx2 13 hours ago

leni536 11 hours ago

privacyishuman 14 hours ago

Also, hosting location is kind of a deception for real ways to protect data, like E2EE, which work no matter the country.

Helmut10001 15 hours ago

> The French courts have fundamentally misunderstood the working of the internet and the role of the domain name system

I think thus is the real problem. And you can easily replace France with Germany or US here.

petcat 15 hours ago

The US doesn't compel ISPs to block websites. The FBI will occasionally seize a domain after a court order, but that's it.

This is a pretty uniquely EU thing.

looperhacks 13 hours ago

It hasn't passed yet, but legislators are very hard at work trying to "catch up". [1][2]

And there are other countries outside the US and Europe, it's not just a "EU" thing. (I wanted to write North America first, but even Canada does blocking, in some cases even without court orders [3])

[1] https://www.eff.org/deeplinks/2025/04/congress-reviving-site... [2] https://www.eff.org/deeplinks/2026/10/congress-has-another-s... [3] https://piracymonitor.org/canada-evolving-piracy-threats-pro...

fmbb 11 hours ago

petcat 10 hours ago

MentalM 13 hours ago

> The FBI will occasionally seize a domain after a court order

Aren't that is about the same?

xyst 12 hours ago

At least in the US, it’s not a matter of "understanding". It’s a matter of "you are paid to misunderstand".

The law is vast and subject to various levels of interpretation. If there’s anything I have learned is that the court is just a rich persons weapon to "peacefully" resolve problems. In this modern capitalistic, greedy shithole we have dug ourselves into. Money and resources talks.

jeroenhd 15 hours ago

Sports broadcasters truly are the bane of society. May they get DDoS'd during important matches until they're bankrupt.

intrasight 15 hours ago

Sports is the only thing left of value in broadcasting. I can totally understand why they're gonna fight tooth and nail to protect it.

asdff 12 hours ago

They still get paid when people watch pirated streams. All those billboards against the pitch and on every uniform are still getting their viewership.

It would be interesting if one of these advertisers one day actually sues the broadcasters for going after pirated streams, and diminishing the value of their ad placements as a result. I would think it is technically damages. One just has to quantify it a little.

intrasight 8 hours ago

Bender 16 hours ago

I am curious if a large number of people stood up their own DoH/DoT servers:

- Would France go after each one, even if they were not operating servers physically in France? It only takes a few minutes to configure Unbound+LetsEncrypt to accept DoH+DoT internet traffic. A few minutes longer to compile support for DoQ.

- Could they realistically expect individual operators of small DoH/DoT/DoQ open servers to block domains at their behest?

drdexebtjl 14 hours ago

DNS needs a way to say “unavailable for legal reasons” so your system just picks a different resolver or resolves recursively.

Bender 14 hours ago

DNS needs a way to say “unavailable for legal reasons” so your system just picks a different resolver or resolves recursively.

As far as I know there is no way to reliably:

- let the user see this error. The client would need to surface the DNS EDE error. Stub resolvers and browsers overwhelmingly ignore EDE.

- geo-fence the client. Unbound does not have native Geo support and will not let one set custom per-zone EDE text even if that was a thing AFAIK.

This might be possible by putting dnsdist in front of Unbound with client IP rules + Lua + MaxMind but there again the client won't know what to do with this.

- custom views only trigger off client IP's and only control resolution views, not error messages.

I think it's probably best that if people wish to run their own DNS instances, they do not geo-block anything. France has no jurisdiction in other countries and can't really do anything to "Alice and Bob's Public DNS". It's up to the people in France to find a way to tunnel their traffic out of their country to bypass any border filters should that ever become a thing. I am still waiting for a lawyer to challenge my thinking on this part.

drdexebtjl 13 hours ago

_imnothere 16 hours ago

Time to boycott Sony, they deserve no money from anyone, and I meant anyone.

They're just f*ing with people without getting anyone good stuff.

Suppose they're doing this for copyright, it's not like the pirates would be stopped by a mere DNS block rule set anyway.

antiframe 16 hours ago

> Time to boycott Sony, they deserve no money from anyone, and I meant anyone.

Because when they installed rootkits on user's machines wasn't that time?

Because when they removed content users purchased from their machines wasn't that time?

Because when they spy on what users watch on their TVs in the privacy of their home wasn't that time?

Sony is like a tree. The best time to boycott Sony was decades ago. The second best time is today.

WesolyKubeczek 12 hours ago

Sony copyright-striking pianists performing public domain music and uploading their own performances on YouTube wasn't that time?

Narishma 13 hours ago

Why are so many comments talking about Sony? The case was brought by beIN Sports.

einsteinx2 13 hours ago

Because Sony was mentioned once in the article in reference to a different earlier case and people seem to have stopped reading there to come here and immediately complain about Sony.

raquuk 16 hours ago

Yes, but in this case the plaintiff is beIN SPORTS France.

ErneX 12 hours ago

Read the article, it’s not Sony it’s Bein the ones who have the soccer broadcast rights.

monneyboi 12 hours ago

If you want to support Quad9 in their dealing with this, you can donate to the cause here: https://quad9.net/donate/

Quad9 is a Swiss-based not-for-profit organization whose operational budget comes entirely from sponsorships and donations.

nish__ 16 hours ago

How have our democracies not abolished copyright law yet? These laws only serve the 1%. I have no idea why we still put up with them.

numpad0 16 hours ago

FOSS depends on copyright laws. Oldest versions of Linux and UNIX are more than 20 years old, so early versions of both would be hypothetically now in public domain in the absence of Disney-lobbied maximalist versions of copyright laws, or in the total absence of one.

skrause 14 hours ago

And this would be a problem how? If copyright expired after 20 years and an evil commercial company privately forked the public domain Linux kernel 2.6.18, what would we lose?

coryrc 13 hours ago

nish__ 15 hours ago

No it doesn't. Most projects are MIT or some other permissive liscense.

tredre3 15 hours ago

numpad0 14 hours ago

pessimizer 14 hours ago

FOSS only "depends" on copyright laws in the sense that it is a hack to get around the existence of them (and now their children, anti-circumvention laws.)

immibis2 13 hours ago

There was a recent attempt to substantially reform copyright in the EU - it was called "Stop Killing Games". It gathered over one million signatures, forcing the EU parliament to consider it. Their response was "this would require us to change copyright law, and we can't do that, sorry."

The USA strong-arms copyright law into every single trade deal. I think it was Chile who tried to strike DMCA 1201 out of some trade deal with the US about food staples, but were swiftly informed by the US that if they didn't make DMCA 1201 into Chilean domestic law, the US would completely cut off their trade. This stuff is serious business for the US and no other country is in the geopolitical position right now to question it.

Fortunately since the US is mid-collapse that last point may change soon.

https://pluralistic.net/2025/11/28/disenshittification-natio...

dist-epoch 16 hours ago

How do you feel about OpenAI training on all of the books in the world.

christophilus 16 hours ago

Fine, as long as they aren't the only ones who get to do it. Having the world's knowledge at everyone's fingertips is a goal I think we should aim for.

drnick1 14 hours ago

SoftTalker 14 hours ago

sham1 15 hours ago

The irony with these AI corpos is that they're okay with scraping all of human creative endeavours yet they get annoyed at others doing distillation on their models.

Compensating authors would be a moral thing to do, but morals aren't really a thing for corpos, so whatever. However the fact that they then turn around and get annoyed at other actors for scraping their stuff is very hilarious and shows how much they care about the social contract :)

nish__ 15 hours ago

It makes me feel like the rules are "for thee, not for me." Like it proves that the rich can just do whatever they want.

betterunix2 14 hours ago

Is there some reason I should have a problem with it?

slopinthebag 11 hours ago

because people have been successfully propagandised into believing it to be necessary or good. of course they argue for it without any evidence.

bigstrat2003 14 hours ago

> How have our democracies not abolished copyright law yet? These laws only serve the 1%.

I don't think that claim is true, personally. But if we grant it for the sake of argument, it should be completely unsurprising that copyright hasn't been abolished. Governments primarily serve the powerful and wealthy, not the common man.

cyanmagenta 16 hours ago

> How have our democracies not abolished copyright law yet? These laws only serve the 1%

Yeah, fuck those billionaire authors and artists in coffee shops not wanting people to rip off the books and art they create without compensation.

roblabla 16 hours ago

I find it extra funny that you think copyright protect small time authors and artists, when we have _very clear_ examples of it not protecting them for shit, even before the entire IA saga. Remember the Disney/Star Wars saga where they refused to pay the Star Wars author for the books they were selling?

https://archive.bookstr.com/article/royalty-wars-over-star-w...

Copyright doesn't protect small-time authors - because small-time authors don't have the means to harness the legal system to their advantage the way that big corpos that take advantage of them do.

cyanmagenta 16 hours ago

numpad0 15 hours ago

nish__ 16 hours ago

Copyright laws don't benefit independent artists. They only work for you if you can afford a litigation team.

AndroTux 16 hours ago

The 1% just copied all available data without consequence. Yet, Quad9 gets sued and loses.

surgical_fire 16 hours ago

AI companies already ripped those things off.

Copyright is a sham. It does not protect the small guy, only the rich corporations.

I am back to piracy, now on a moral imperative. I can pay for stuff, but I think the morally superior thing to do is to pirate away.

sham1 16 hours ago

While your point is valid enough -- although it could have been made without this kind of snarky and sarcastic snide -- it seems clear that global copyright legislation is a lot more beneficial to the wealthy capital owners rather than the artists that you were alluding towards. Now, this is no insurmountable obstacle at least in theory. The laws could be modified in a way that lets small artists etc focus on following their passions without starving, without allowing capital to do what is essentially the intellectual equivalent of enclosure of the Commons.

Of course, one thing needed for this is the political will as well as getting rid of the idea of defending exploitation by the billionaire class by conflating their needs with the needs of starving artists because one can technically argue that copyright helps both, despite everyone knowing that one party is benefiting a lot more from it than the other.

rickydroll 15 hours ago

strenholme 12 hours ago

I’ll bite. I have written a recursive DNS resolver. It’s buggy, mind you, it doesn’t handle improperly configured domains bug-for-bug the way BIND9 does, it doesn’t support IPv6 for resolving records (it can still resolve AAAA records, mind you), but it’s about 80 kilobytes in size, runs nicely on 32-bit systems, and does full DNS resolution starting from the root servers.

Does the fact I have written this resolver make me liable should it not block the domains they listed which may contain copyright infringing content? Am I now required to add these domains, and make them part of a mandatory block list? Will I still be held liable if people can still access these allegedly copyright infringing domains by modifying the source to my program?

Keep in mind that when Quad9 had a similar lawsuit in Germany, they blocked queries from German IPs, but the idiots said Quad9 was still liable because people could use VPNs in Germany to bypass their geoIP blocking.

Quad9 being forced to block these domains will achieve nothing. Will these copyright enforcers now go after Google for 8.8.8.8? Cloudflare for 1.1.1.1? Level3 for 4.2.2.1? Will they go after ISC for BIND? NLnet Labs for Unbound? CZ.NIC for KnotDNS? Me for MaraDNS? Even if they enjoin me from making a recursive resolver which can resolve these domains, that won’t stop anyone and everyone from forking my code (see also: Twitter trying to take down Nitter).

koyote 11 hours ago

> Does the fact I have written this resolver make me liable should it not block the domains they listed which may contain copyright infringing content?

I use unbound and have a similar question. Shouldn't we just encourage everyone to run their own resolvers (it's turnkey for the most part!)? Will Sony/beIn start going after the root servers and enforce a global block?

bragr 12 hours ago

>Will these copyright enforcers now go after Google for 8.8.8.8? Cloudflare for 1.1.1.1?

they already have.

aborsy 13 hours ago

France also regulates encryption in applications. Some percentage of apps are not available in France, because apps don't comply with the rules imposed by bureaucrats or more often developers find procedures cumbersome or unfamiliar

EmbarrassedHelp 12 hours ago

Macron's party has also been trying to require encryption backdoors for years, and are major supporters of Chat Control.

paulgdp 13 hours ago

Can you tell more? Which apps?

aborsy 13 hours ago

Syncthing apps for example. Search for example comments of Synctrain app developer in syncthing forum.

bubblethink 3 hours ago

Why is everybody (in the government) in the EU so illiterate? Do they not understand that their economies are dead and football streaming isn't going to save them.

trentor 16 hours ago

Crazy. A company that actually exits the market they threatened to leave. Meta and Twitter should take note.

ghusto 12 hours ago

We've all seen this sort of thing many times before, but I still don't understand how it works.

I transmit a radio signal in Dover that can be picked up by radios in Calais, the message it carries happens to be illegal in France ("Brittany is still part of the UK", say). Could I be taken to court in France? I'm guessing no.

declan_roberts 16 hours ago

Europe needs to strengthen its free speech protections. It turns out, even though the US founders had no idea what DNS was, they still created the right framework to protect it.

AndroTux 16 hours ago

As long as you don’t say Artificial Intelligence instead of Super Intelligence, you’re all good.

asdff 12 hours ago

US just pushes the enforcement mechanisms to private companies not so hamstrung by legalese. E.g. try and torrent all you want. After all, all you are really doing observably is connecting to various IPs, essentially no different than browsing websites. But you might get a letter in the mail not from the government, but from the ISP threatening legal action against you, solely because their systems saw your IP connected to another.

tensor 10 hours ago

These days you can land in jail for simply bad mouthing the government. US needs to strengthen its adherence to their constitutions. Words on paper are useless if they aren't followed.

ghm2199 10 hours ago

Noob question: Isn't there like a panel of existing case law or amicus-briefs that would speak to the logical and historical stupidity of arguments by the plaintiffs? I mean this is like blaming airbus for hijackings.

chaboud 12 hours ago

I'm super confused as to what it means to withdraw for French users if geoIP doesn't work.

So remove 9.9.9.9 BGP announcements? Unless France wants to build a great firewall... a Ligne Maginot du DNS, I don't see how this is enforceable. The internet is not Minitel...

whh 15 hours ago

> The plaintiff (Sony Music Entertainment GmbH) then used a VPN to access the blocked content from Germany in circumvention of the geoIP blocking. The court agreed with Sony in their assertions of noncompliance, and we were fined for contempt of court.

I knew courts were dumb, but didn't think they were this dumb.

"The neighbour's dog bit me, so they put up a fence. I climbed over it and got bitten again. The fence doesn't count."

dev_l1x_be 13 hours ago

The internet is a distributed system, they said.

Qiu_Zhanxuan 13 hours ago

Genuinely baffled by the incompetence (or ill-intent, corruption?) demonstrated by our courts, did they do it at behest of Qatar ? Another stain on our country's reputation but they don't care.

xyst 12 hours ago

> demonstrated by our courts, did they do it at behest of Qatar

Honestly, this is a possibility.

beIN, like any Qatar based company, is majority owned by the state. Qatar is infamously rich in oil with the state able to subsidize luxury lifestyles for citizens it deems worthy.

France needs oil, like any other country. So if a journalist could follow the money. Could probably find where the pressure was applied within the government.

The rich using archaic copyright laws to get their way has been modus operandi for quite awhile. Seen this applied both in USA and abroad.

gumby 16 hours ago

Why does it matter that it’s a recursive resolver? They mention this a lot but it seems like the decision would just as much apply to a non-recursive resolver.

I didn’t attempt find the ruling; perhaps the lawsuit was written in an odd way.

ButlerianJihad 16 hours ago

It is difficult to envision a "non-recursive DNS resolver" in public service. Recursion is the usual and customary way that DNS names are resolved by the leaf servers, because they are not authoritative for much of anything.

The most common configuration for non-recursive DNS servers is with forwarders. The DNS server accepts queries and simply forwards all of them upstream to another resolver, which... makes its own recursive queries.

It is simply not feasible to avoid having recursive resolvers in the chain of lookups. That's how things work with DNS.

gumby 16 hours ago

We used to just leave that responsibility to the querying host’s own resolver. I don’t fetishize the end-to-end principle (though I come close) so I suppose a recursive resolver service could be a sort of optimization (plenty of ppl look up, say, gmail.google.com so why not cache it).

In any case, if all resolvers these days are recursive why mention it?

I know this is far from the most important question on the topic of this thread!

toast0 16 hours ago

weddpros 8 hours ago

The great wall of Orleans... Living abroad, I've been embarrassed by my french passport for a number of years. Our reputation sucks, for a reason.

xbar 6 hours ago

Sorry Quad9. I love you. I am sad France does not understand you the way I always have.

Stay Swiss, my friend.

modeless 15 hours ago

Seems unlikely to resolve their legal issues, as the French lawyers will use the same tactic as the German ones, using a VPN to access the services from France to justify continuing their lawsuits. Perhaps they should consider relocating out of Europe.

Jepacor 16 hours ago

Welp, I've been using quad9 and I'm French, does anyone have an alternative I can switch to?

capitol_ 16 hours ago

I recommend Norway, they have lovely fjords.

drcongo 15 hours ago

This comment made my day, beautiful.

driverdan 14 hours ago

You keep using it. They're not going to block your IP but response times may drop since they won't have any servers in France.

driverdan 11 hours ago

Updating my reply, the CTO said they'll likely do GeoIP blocking even though it's not effective.

Vax- 14 hours ago

DNSCrypt or RethinkDNS (the resolver, not the app, although the app is awesome as well)

gaiagraphia 15 hours ago

I wonder what pressure Qatar put on France to force this through?

BeIn is owned by the Qatari state, who just so happen to own Paris St Germain.

Their owners Yousef Al-Obaidly and Nasser Al-Khelaifi (for both the network and the club) are outspoken about piracy and 'the damage it causes football and creative industries'.

They've also been in and out of court a fair bit on corruption charges, and seems they've paid their way out of trouble through fines. Seems just last month a new case opened:

https://www.france24.com/en/live-news/20260920-psg-president...

Nation state meddling, dodgy characters, corruption and greed is more of a threat to football than a DNS resolver, tbh.

babhishek21 3 hours ago

Sam Ellis of SearchParty just did a video on UAE on the same premise: they own ManCity F.C. and have considerable influence over the UK government. The current UK prime minister also happens to be the former mayor of Manchester.

video link: https://youtu.be/fUrNOVjWUVM?si=koBbVj67CxfMhncC (skip ahead to the second half of the video).

illusive4080 9 hours ago

Similar misunderstandings have led to Cloudflare blockages during soccer matches in Spain.

egorfine 15 hours ago

Why stopping serving french IPs though? Remove your legal presence in France, sure. But block IP ranges from reaching your servers.. just why?

johnhtodd 11 hours ago

French law does not care if the servers are in France or anywhere else - just that the users are in France. This sounds unexpected, but that is the law. There is a treaty called the "Lugano Convention" that allows civil lawsuits to be extended across borders of the member nations in events like this - France and Switzerland (where Quad9 is based) are signatories on that convention, so effectively French law can apply in Switzerland on matters involving internet activity. It is much more nuanced than that, so forgive this short summary, but removing servers from France is not sufficient.

rpdillon 15 hours ago

Most likely, so they have legal standing to say "We don't operate in your country or serve your citizens, your laws do not apply". Also, punishment for a stupid ruling.

egorfine 15 hours ago

> We don't operate in your country

Yes, by leaving french jurisdiction.

> or serve your citizens

This is not necessary. At all.

Felger 16 hours ago

"There are more important reasons geoIP blocking will not work."

Okay, now waiting to see how they will technically block those french users from the 24th nov onward...

burnte 16 hours ago

They don't have to. Despite Europe's best efforts, national laws are not enforceable outside the borders without lots of cooperation, and tech regulation is not an area where people are collaborating.

aucisson_masque 10 hours ago

> The plaintiff (Sony Music Entertainment GmbH) then used a VPN to access the blocked content from Germany in circumvention of the geoIP blocking. The court agreed with Sony in their assertions of noncompliance, and we were fined for contempt of court.

This is some fucked up level of incompetency.

That’s why Justice can be abused by whoever got the most money, if it was competent they wouldn’t waste much time on these ridiculous claims.

aboardRat4 6 hours ago

France becoming China.

GuB-42 12 hours ago

Am I the only one who find it disturbing that a privacy focused service publishes a detailed report of which institutions is accessing their service, just to make a point?

They say they don't have data about individual IP addresses, and their report is follows their privacy policy. Yes, right, but think about it as a matter of principle. Normally, a privacy focused service shouldn't collect any data, but for technical or legal reasons, sometimes, they have to. They may need to know how many queries they have and from which zones to properly dimension their infrastructure for instance, so it is normal for them to have these logs, but publishing them in a blog post just to make a point feels like they are ready to use collected data beyond their intended purpose if it serves their interests.

Legally, it is fine, and is is unlikely to hurt anyone, but on principle, that's a red flag.

johnisom2001 11 hours ago

> Am I the only one who find it disturbing that a privacy focused service publishes a detailed report of which institutions is accessing their service

I don't find it disturbing at all, and it's perfectly in line with what you would expect a privacy focused service to do: name and shame those that are attacking privacy.

GuB-42 10 hours ago

Look at the list, only a few of them have anything to do with this legislation.

Many of these probably against it and expect privacy, that's why they are using quad9. They are the victims here.

If they had said "this service is used by this or that proponent of the legislation", your point could stand, even though I still disagree.

Also, it is about blocking, not spying, still bad, but orthogonal to privacy.

barkut 10 hours ago

I wonder why Anonymous seems to be like a thing of the past these days ... There's so many of these fuckers going scot free these days. If anyone know any Anonymous-style movement going after these kind of people, I'm interested to know more.

9cb14c1ec0 15 hours ago

Sometimes I wonder if the days of a global internet are drawing to a close.

martinjc 17 hours ago

Sony being sleazy again. You start to wonder why they pick on the wrong people.

coldfloor 15 hours ago

What's with all the Sony comments? This has nothing to do with Sony.

agilob 13 hours ago

>The plaintiff (Sony Music Entertainment GmbH) then used a VPN to access the blocked content from Germany in circumvention of the geoIP blocking. The court agreed with Sony in their assertions of noncompliance, and we were fined for contempt of court.

>We eventually won that case against Sony, but it took several years, six figures of cost to Quad9, and massive wasted time – all of which set us back in our ability to deliver services and is a resource debt we are still paying for today

coldfloor 7 hours ago

49369201837 14 hours ago

Better cut all ties to that failed state as quickly as possible.

MentalM 13 hours ago

> that failed state

Aren't literally every country doing the same?

bpbp-mango 11 hours ago

the lawyers are ruining the internet

rafram 16 hours ago

They are in a difficult position because the entire point of their DNS resolver is that it blocks malicious sites (malware, phishing, etc.). Very easy for Sony to say, why can't they add piracy to the list? They "refuse to alter or lie to you" in their DNS responses - how would a malware block be lying if those other blocks are not?

dmantis 16 hours ago

I guess the issue is that they are ordered to block it for all users, not only those particular users who picked some particular lists.

And nobody would pick a piracy list, why'd you do it as a user.

MisterMunchkin 11 hours ago

How can they even sue you if you aren’t based in France? Just do what 4chan did and tell them to fuck off.

betaby 7 hours ago

4chan has a privilege of being based in the USA.

greatgib 15 hours ago

Sadly no-one responsible from this situation will care.

French authorities and network operator will in fact prefer that you don't have alternative than using the dns servers that they are providing.

So it sucks that Quad9 is closing their resolver to french IPs. If they stand by their values, they should continue to accept the requests, just leave all office and business ties with France.

Similar to ofcom things against 4chan.

fennecbutt 11 hours ago

Lmao. The world is run by morons who are voted for by even more morons. That's why you get stuff like "durrrrrrr we used vpn and could still access it, contempt of court!"

Just absolutely braindead behaviour from so many members of our species.

stpedgwdgfhgdd 11 hours ago

Donated

LoganDark 14 hours ago

Love to see some Lavabit action in response to government overreach. (Not that it's fun to see a provider have to shut down operations in an area, but more that I prefer to see them sticking to their principles rather than showing the government that this behavior is tolerated.)

LostBeard 11 hours ago

Blah blah blah. Social social social.

jiveturkey 15 hours ago

how do they not see the self-inconsistency?

they "cannot" blacklist the domains on geoIP basis, yet the "can" withdraw from France? via what method? Removing the French servers is clearly insufficient, so why can they deny France entirely via geoIP, but not block the domains just via geoIP?

they do claim a value-based reason (good on them for it), but they are very very insistent about the "impossibility" anyway. can't have it both ways.

Poudlardo 10 hours ago

c'est une catastrophe décidément la fascisation de ce pays

rswail 7 hours ago

So this is yet another reason why I run unbound locally.

There's really no reason not to.

mi_lk 11 hours ago

typical France L as seen in the past few weeks

AtNightWeCode 13 hours ago

Cloudflare and Google already blocks these domains. Just saying.

Grombobulous 7 hours ago

Yeah, I’m really mixed on this story. Why are they so insistent on not just blocking the sites? I don’t even really think a slippery slope is at play here. This is a very specific legal circumstance that doesn’t seem to have any chance of expanding to other forms of censorship.

Quad9 already states that they strongly oppose piracy, so just block the sites. The piracy sites will be fine.

I don’t think DNS is as neutral as Quad9 believes it is. DNS is like the sign for a business on the road and the domain registrar is like the building permit you get to build the sign. DNS is a way to find a website or business without even bothering with a search engine. Try typing in stamps.com, office.com, booking.com, weather.com.

Onavo 17 hours ago

Another user commented on

> €580,000 to €1,000 per day. But deleted his/her comment.

To put this into perspective, €365K a year is roughly the fully loaded total comp cost of a high-senior to low staff level software engineer or a mid level ML engineer at a frontier lab in Cali.

jubilanti 17 hours ago

Per each infraction. They said they currently have 20 other cases pending. And who knows how many would be to come.

HackerThemAll 14 hours ago

What exactly are you trying to convey here? That this penalty is not an issue? Would you be willing to pay it from your pocket then? Quad9 is not Cloudflare nor Google. It's a nonprofit, in case you blinked right at the sentence that mentioned this.

Scaled 14 hours ago

I'm disappointed in how many pro-piracy comments are in this thread. Free speech does not mean you have the right to steal someone else's labor unencumbered. When actual free speech is blocked, then I'll be among the people rallying -- but blocking a piracy site is blocking cybercrime not legal free speech.

Grombobulous 6 hours ago

I think the sympathies to this story would change a lot if Quad9 was refusing to block DNS resolution to websites for other illegal organizations like human trafficking rings, cartels, gangs, etc.

Copyright infringement isn’t exactly a violent crime but it is very clearly a crime.

What I don’t think Quad9 realizes is that being neutral from a technical and architectural basis is meaningless in law and doesn’t reflect your intent. If you have awareness and means to make a change that mitigates harm and you refuse, that’s how you lose cases.

I think it can be very easily argued by a lawyer that Quad9 intended to keep the infringing content easily available and at best minimally comply.