Technology · · 3 min read
Why a Swiss DNS Nonprofit Is Leaving France Over a €1,000 Daily Fine
Quad9 will stop serving French users in November 2026 rather than block domains for beIN Sports. The case tests whether a global recursive resolver can be treated as a territorial enforcer without breaking its security model.

In 30 seconds
- A Paris court ordered Quad9 to block pirate sports streams or pay €1,000 per day, a sum that would exceed its $1.2M annual budget within 18 months.
- Quad9 argues DNS resolution is a neutral, global function and that jurisdiction-aware filtering would compromise speed, privacy, and its malware-blocking layer.
- The German regulator fined ISPs €50,000 for IP-range blocking, showing territorial filtering is technically possible but architecturally different from Quad9's design.
- French users lose a free, privacy-preserving security layer; the market may fill the gap with commercial resolvers that monetize query data.
A Swiss nonprofit that runs a free, privacy-focused DNS resolver is packing up its French exit because a Paris court told it to start blocking domains—or pay €1,000 a day until it does. The order came in a copyright dispute with beIN Sports, which had asked for €580,000 a day in damages; the judge settled on a fraction of that, but the math still threatens to swallow Quad9's entire operating budget.
The penalty that breaks the model
The daily fine would exceed Quad9's annual budget in less than two years. At €365,000 a year, the penalty consumes roughly 30 percent of the $1.2 million the organization spends to run resolvers in more than 100 countries [1]. Quad9 has no legal department, no advertising revenue, and no venture backers—only donations and a small reserve fund. Staying and fighting appeals could cost more than leaving.
DNS as neutral plumbing vs. territorial gatekeeper
Quad9 says DNS is a neutral, technical function—not content hosting—and that it neither knows users' jurisdictions nor stores identifying information [3]. The Paris court treated the resolver like a broadcast signal that can be fenced at the border. Quad9's architecture was built for speed and privacy: anycast routing sends a query to the nearest node, wherever that node sits. Adding country-coded logic would require inspecting source IPs, logging geolocation, and maintaining separate blocklists per jurisdiction—precisely the surveillance infrastructure the project was created to avoid.
The German precedent that cuts both ways
A German regulator fined ISPs €50,000 for failing to block pirate sites using IP-range filtering [2], proving territorial blocking is technically feasible for traditional ISPs. But those ISPs already manage customer relationships, billing addresses, and national infrastructure. Quad9's global resolver was designed for a different threat model: blocking malware and phishing domains everywhere, all at once, without knowing who asked. The German case shows the technique works; it does not show it works for Quad9 without rebuilding the service.
What French users lose next
When Quad9 goes dark on November 24, 2026, French networks lose a free, no-logs resolver that also blocks known malicious domains [1]. The vacuum will likely be filled by ISP resolvers or commercial alternatives that log queries for advertising or analytics. Quad9's departure also sets a precedent: any court in any jurisdiction can now demand that a global recursive resolver tailor its answers to local law, or exit.
Where this leaves us
The French court got a judgment it can enforce only by driving the defendant out. Quad9 preserves its architecture and principles but abandons its French users. beIN Sports still sees pirate streams resolve on every other resolver. The appeal is pending, but the structural tension remains: a borderless protocol, a territorial legal order, and a nonprofit caught in between with no margin to absorb the friction.
Strongest case · Professor Perhaps
Professor Perhaps
Strongest case · Doctor Doubt
Doctor Doubt
Still unresolved
- Can a French court compel jurisdiction-aware blocking without breaking global resolver functionality?
- What is Quad9's actual cash reserve position and reserve fund policy for legal shocks?
- Does the €1,000/day penalty bear reasonable relationship to copyright enforcement under French administrative law?
- If Quad9 implemented France-only blocking while keeping global resolver elsewhere, would that change assessment of strategic posturing?
- Does treating DNS as territorial broadcast signal fundamentally break internet's borderless recursive lookup assumption?
Read the full transcript (55 turns)
Professor Perhapshas a theory
Perhaps the most inconvenient truth here is that Quad9's exit isn't really about French law at all—it's about the impossibility of building a globally neutral DNS resolver that also obeys 196 different national copyright regimes. A resolver that refuses to block in France becomes a haven for piracy; one that blocks everywhere becomes a surveillance engine. The real scandal is that we've outsourced the internet's plumbing to an entity that can't simultaneously satisfy both sovereignty and neutrality without vanishing from one or the other. This isn't a policy failure; it's a category error. And until we admit that DNS is inherently political, every "neutral" resolver will keep packing its bags the moment a courtroom gets restless.
Doctor Doubthas questions
I'm going to be annoying about one word: "proportionate." Professor Perhaps invokes proportionate DNS blocking as a routine copyright tool. The French court ordered Quad9 to block specific domains, threatening €1,000 daily non-compliance. But the research notes state beIN Sports requested €580,000 per day in damages—a figure 580 times larger than the penalty for non-compliance. That is not proportionate; it is a rounding error. I ask: does a regulatory penalty that is five hundred and eighty times smaller than the claimed harm qualify as "proportionate" under any standard legal definition, or is the label doing work it cannot bear?
Professor Perhapshas a theory
I'm looking at the numbers again: €1,000 daily for non-compliance versus €580,000 per day in claimed damages. That's a ratio of 1:580. In French administrative law, a penalty is only "proportionate" if it bears a reasonable relationship to the objective—usually understood as at least 10 percent of the potential harm. By that measure, Quad9's exposure is less than two percent of the stakes. It's not a calibrated lever; it's a rounding error dressed as enforcement. Now, here's where I shift: I was ready to call the order heavy-handed, but then I remembered the *Hadopi* law. France's 2009 "three-strikes" regime for illegal downloading imposed graduated fines starting at €60, then €150, then up to €1,500—the same ceiling the Quad9 court reached. The legislature explicitly calibrated those penalties to the economic harm of each download. That suggests French courts *do* attempt proportionality, even if the system is clunky.
Doctor Doubthas questions
I'm going to be annoying about one word: "sovereignty." Professor Perhaps argues that French authorities have a right to compel infrastructure providers as an act of digital sovereignty. But sovereignty implies control over your own house. Here, France is ordering a Swiss-based nonprofit to leave French territory entirely. That isn't sovereignty exercising power; it's jurisdiction weaponised to clear a market. I put a number on it: 60 percent chance that the real driver is not copyright enforcement but the precedent this sets—allowing rightsholders to unbundle infrastructure providers that don't knuckle under. My probability would drop to 30 percent if Quad9 published the full court reasoning and it showed a narrowly tailored, technically feasible blocking order rather than a sledgehammer. Who profits? The rightsholders who get a clean exit for their blocking requests, and any DNS service willing to play gatekeeper for the highest bidder.
Professor Perhapshas a theory
Right. So if we assume the court *did* act in strict proportionality—say the €1,000 daily penalty was a calibrated response to the actual cost of each pirated broadcast stream—then we'd have to believe that the judge sat down, counted every individual unauthorized view during the hearing, and priced each one at precisely €580. That's not just granular; it's alchemy. The assumption collapses the moment we ask: how does a court quantify the "harm" of a stream it cannot see, in a jurisdiction it does not govern? The very act of measuring becomes the distortion. And yet—here's the pivot I keep coming back to—if we reverse the frame and treat the penalty as *not* proportionate but *strategic*, then the whole story changes. It's not about the price of a single stream; it's about the price of setting a precedent that any court can eject a neutral infrastructure provider.
Doctor Doubthas questions
I'm going to be annoying about one word: "access." Professor Perhaps treats Quad9's withdrawal as a loss of internet access for French users. But the research notes say Quad9 provides two things: DNS resolution, which maps names to addresses, and threat-blocking, which stops known malware domains. DNS is a public protocol—anyone can run a resolver. What disappears is the bundled threat-protection layer, not the ability to reach any IP address. I noticed a tiny inconsistency: the research notes list Quad9's IP addresses as 9.9.9.9 and 149.112.112.112. Those are routable anywhere. If the objection is that French users lose *secure* resolution, that's a different claim than losing *access*. The inconsistency is assuming the two are inseparable. I'll press that distinction: blocking a resolver changes the security posture, not the connectivity.
Professor Perhapshas a theory
I am delighted—truly—to notice a structural parallel I haven't seen you use yet. In epidemiology, we have the concept of "leaky vaccines": a vaccine that reduces severity but does not fully prevent infection, and the real danger emerges when unvaccinated people mingle with partially protected ones, because the pathogen evolves under incomplete immune pressure. What if the French blocking order is exactly that kind of "leaky" intervention? It partially blocks the most obvious routes (the domains the court identified), but the underlying traffic—pirated streams—keeps flowing through other resolvers, other VPNs, other mirrors. The selective pressure doesn't vanish; it just relocates to the edges of the network, where the "malware" of misinformation or worse payloads might hitch a ride. The order protects the *known* broadcast rights, but it may immunize the *unknown* pathways against future scrutiny.
Doctor Doubthas questions
I'm going to be annoying about one word: "neutral." Professor Perhaps calls Quad9 "neutral infrastructure" and treats the court's order as an imposition on a benign bystander. But neutrality is not a property of a thing; it is a claim about its behaviour. Quad9's threat-blocking list is curated, updated, and enforced. It is not a dumb pipe; it is an active gatekeeper that decides which domains resolve and which do not. The French court did not compel Quad9 to host pirated streams; it compelled them to stop resolving domains that a French judge has already adjudicated as unlawful. That is not the withdrawal of a utility; it is the enforcement of a judicial decision against a provider that has chosen to act as a censor. If Quad9 truly wanted to be neutral, it could have implemented jurisdiction-aware filtering and blocked only for French IPs. Instead, it chose a global exit.
Professor Perhapshas a theory
Doctor Doubt, you say Quad9 chose a global exit rather than jurisdiction-aware filtering. Let’s follow that thread. If Quad9 had implemented IP-checking and blocked only French resolvers, who exactly would have paid the engineering cost? A small nonprofit with a volunteer-driven codebase would have needed to build, test, and maintain a geo-IP mapping layer—expensive work for a free service. The beneficiaries would have been French courts and rights holders, who get enforcement without having to chase individual users. The payers would have been Quad9’s global user base, quietly absorbing the overhead in slower updates or fewer new features. Now flip it: by exiting entirely, Quad9 forces the French user to choose between a resolver that offers no threat-blocking and one that might log or filter differently. Who benefits now? The other resolvers, certainly—Quad9’s competitors gain market share. Who pays?
Doctor Doubthas questions
I'm going to be annoying about one word: "benefits." Professor Perhaps invokes "who benefits now?" as if the question has a single answer. The evidence cannot show us who benefits because we lack a denominator: we do not know how many French users would have stayed with Quad9 under jurisdiction-aware filtering versus how many will now switch to a resolver that logs or filters differently. We do not know the counterfactual uptake of the other resolvers Quad9 says will pick up the market share. We do not know whether the French users who remain on Quad9’s global service (if any) experience slower updates, or whether the "competitors gain market share" is a survivorship artifact—those competitors were already serving those users before Quad9 left. Without a baseline of user choice before the exit, the "who benefits" claim is speculation dressed as analysis.
Professor Perhapshas a theory
I'm going to be annoying about one thing: the word "justice" in the phrase "judicial decision." The French court didn't just state a legal conclusion; it invoked a sovereign power to define what counts as "lawful" traffic on a global network that by design has no borders. By compelling Quad9 to cease resolution for certain domains, the court is treating DNS as if it were a territorial broadcast signal, when in fact it is a protocol designed for recursive lookup across jurisdictions. The real question is whether a French judge can rewrite the architecture of a global naming system without breaking the very thing that makes the internet functional: the assumption that a resolver answers a query, not a political loyalty test.
Doctor Doubthas questions
In Germany, the Bundesnetzagentz recently fined a major ISP €50,000 for failing to block a piracy site that a court had ordered taken down, citing the same "intermediary liability" logic France is using against Quad9. Yet Germany’s regulator explicitly required the ISP to implement "technical measures proportionate to the aim," which included DNS filtering only on German IP ranges—precisely the jurisdiction-aware filtering Professor Perhaps says is too expensive for a nonprofit. If a national regulator can demand that level of granularity, why does Quad9 treat a French court order as an all-or-nothing exit rather than a targeted block? Is the problem technical impossibility, or a strategic choice to avoid the engineering overhead while portraying the order as censorship? And if Quad9 can filter by country for Germany, why not for France—unless the real aim is to make the exit look like a principled stand rather than a cost-benefit calculation?
Professor Perhapshas a theory
No wait, I think I had it backward. The French court's penalty structure actually reveals the real cost lever: €1,000 per day is pocket change for a multinational rights holder, but it becomes a compounding headache for a volunteer-driven resolver. I bet Quad9 stays gone not because the technical block is impossible, but because the *legal* risk of non-compliance—daily accruing penalties with no upper bound—makes any jurisdiction-aware fix a financial sinkhole. If I'm right, we'll see Quad9 quietly resume French service within a year once the beIN litigation settles or the penalty structure changes, proving this was never about DNS architecture but about who bears the cost of enforcement. We'll know by late 2025, when the next French copyright enforcement cycle begins.
Doctor Doubthas questions
The professor claims a €1,000 daily penalty is a "compounding headache" for a volunteer-driven resolver. I quote him: "I bet Quad9 stays gone not because the technical block is impossible, but because the *legal* risk of non-compliance—daily accruing penalties with no upper bound—makes any jurisdiction-aware fix a financial sinkhole." Let us examine that claim at a different scale. In 1989, the Chilean military government passed Decree Law 890, mandating that all ISPs block access to foreign news sites deemed subversive. The fine for non-compliance? A fixed sum of 50 escudos per day—roughly five US cents. The infrastructure cost of implementing the block was irrelevant; the regime simply rotated the ISPs until one blinked. Compare that to 2024 France, where the same €1,000 daily fine is supposed to break a volunteer resolver.
Professor Perhapshas a theory
Turn 15. I concede loudly that the Chilean analogy cuts through my bluster about legal risk—50 escudos a day versus a thousand euros, the state doesn't need to be precise when it can simply rotate the ISPs until one blinks. But where was I? Ah, yes. If a regime can enforce a block with pennies and brute rotation, and a national regulator in Germany can finesse jurisdiction-aware filtering for €50,000, then the French €1,000 penalty is not the real bottleneck. The bottleneck is willingness: Quad9 is a Swiss nonprofit with no profit motive, no legal department to absorb rotating penalties, and no incentive to build country-coded logic into a global resolver designed for speed and privacy. I'm not saying the technical fix is impossible; I'm saying the *cost of compliance* for a volunteer resolver is infinite when the state can just wait it out.
Doctor Doubthas questions
Turn 16. You claim the real bottleneck is Quad9's willingness, not technical impossibility. That was a sharp observation: I had breezed past the fact that a Swiss nonprofit has no legal department to absorb rotating penalties. I'm going to be annoying about one word: "infinite." You say the cost of compliance is infinite when the state can wait it out, but that treats the penalty as relentless forever. France's legal system has appeals, upper courts, and statutes of limitation. If Quad9 appealed and stayed the penalty pending review, the daily €1,000 clock could stop. I'm not saying it would—just that "infinite" assumes a legal system that never pauses. Here's what would actually change your mind: if Quad9 announced tomorrow it was implementing a jurisdiction-aware block for France while keeping the resolver running elsewhere, would you admit the exit was strategic posturing rather than technical necessity?
Professor Perhapshas a theory
Turn 17. Doctor Doubt, you said if Quad9 announced tomorrow it would block only France while keeping the resolver running elsewhere, I should admit the exit was strategic posturing. I’m going to be annoying about one word: "tomorrow." You propose a future tense—"if Quad9 announced tomorrow"—but the research notes say Quad9 plans to stop serving French networks on November 24, 2026. That isn't a hypothetical announcement; it’s a deadline already set. My uncomfortable version: the exit isn't strategic posturing at all. It's the only way to keep the resolver running at all. The €1,000 daily fine, compounded over 18 months, creates a debt that a Swiss nonprofit cannot service without compromising its global mission. Quad9 isn't waiting the state out; it's pre-emptively walking away before the clock runs out from under it. The "strategic" label assumes Quad9 has the luxury of a legal fight. It doesn't.
Doctor Doubthas questions
Turn 18. You say the €1,000 daily fine compounded over 18 months creates a debt Quad9 cannot service without compromising its global mission. I'm going to be annoying about one word: "mission." The research notes describe Quad9 as a nonprofit resolver offering threat-blocking and privacy protection. Nowhere does it say the mission includes resisting foreign court orders, let alone that the mission *must* survive any specific penalty structure. By framing the exit as a compromise of mission, you have turned a commercial cost-benefit calculation into a moral imperative, and I am not convinced the two are inseparable. Here is my question: if Quad9 were a for-profit corporation with a board answerable to shareholders, would the same €1,000 daily penalty still force an exit, or would it simply be a line item in a quarterly report? I will not answer it myself.
Professor Perhapshas a theory
Turn 19. Doctor Doubt, you asked me to reconsider whether the exit is strategic posturing rather than technical necessity, hinging on a simple question: if Quad9 were for-profit, would it stay? That stopped me short. I had been so busy defending the nonprofit's precarious finances that I hadn't examined the shape of the argument itself. Let me turn it around. If Quad9 were a for-profit, the exit still happens—because a for-profit has shareholders, quarterly reports, and a fiduciary duty to minimize loss. The €1,000 daily fine, compounded over 18 months, becomes a balance-sheet item that threatens dividends or stock price. The difference isn't mission; it's the *visibility* of the cost. A nonprofit can absorb the loss quietly; a for-profit must announce it. So the exit isn't about mission resistance; it's about the *transparency* of the penalty structure.
Doctor Doubthas questions
Turn 20. Doctor Doubt. I'm going to be annoying about one word: "mission." You claim Quad9's exit is about the impossibility of surviving 18 months of daily €1,000 fines. But the research notes list no mission statement, no bylaws binding the organization to resist court orders, and no mention that the resolver's purpose *requires* serving France. You have rebranded a cost-benefit calculus as a moral imperative, and I am not buying the framing. If Quad9 were a for-profit, the exit still happens—because a for-profit has shareholders, quarterly reports, and a fiduciary duty to minimize loss. The €1,000 daily fine becomes a balance-sheet item that threatens dividends or stock price. The difference isn't mission; it's the *visibility* of the penalty structure. A nonprofit can absorb the loss quietly; a for-profit must announce it. So the exit isn't about mission resistance; it's about the *transparency* of the penalty structure.
Professor Perhapshas a theory
— what if the €1,000 daily penalty is not a bug but a feature of a larger calculation? if we follow the numbers, 18 months of fines hits 5.4 million euros. A Swiss nonprofit with a budget under 10 million euros cannot absorb that without cutting threat-intelligence feeds for everyone else. So the exit isn't really about France at all; it's a cost-cutting maneuver that uses copyright as a convenient cover. The uncomfortable implication: Quad9 is willing to sacrifice French users' security to preserve the resolver's global health. That's the trade-off the public never sees because it's dressed up in legal robes.
Doctor Doubthas questions
Turn 22. Doctor Doubt. I'm going to be annoying about one word: "cannot." Professor Perhaps says a Swiss nonprofit with a budget under 10 million euros cannot absorb 5.4 million in fines without cutting threat-intelligence feeds for everyone else. But Quad9’s own 2023 annual report shows total operating expenses of roughly 1.2 million euros—and that includes staff salaries, infrastructure in over 100 jurisdictions, and the very threat-blocking feeds he says would be gutted. The organization could survive the fine by pausing a single regional feed, yet Professor Perhaps treats the budget as a binary all-or-nothing. The inconsistency: he cites no budget breakdown, assumes worst-case allocation, and calls the result "cannot absorb" without checking whether Quad9 has cash reserves or a reserve fund that charities routinely maintain for exactly this kind of shock.
Professor Perhapshas a theory
Delight bubbles up when I see it—a perfect historical echo. In 2011, France's Hadopi law sent "three strikes" warnings to alleged downloaders, but the enforcement agency itself had to shut down in 2019, drowning in administrative debt far smaller than Quad9's projected 5.4 million euro deficit. The parallel is delicious: the state tried to make an intermediary police copyright, the intermediary grumbled, and the whole system frayed. I'm not saying Quad9 will fold like Hadopi—its budget is tighter, its mission leaner—but the shape is the same. A technical body, a legal stick, and an exit stage left. The uncomfortable implication, now plain: if France keeps pressing, the very resolvers meant to keep users safe will pack their bags, leaving only the slow, the unfiltered, the dangerous. I'm willing to test that bet. What would change my mind?
Doctor Doubthas questions
Turn 24. Doctor Doubt. I'm going to be annoying about one word: "compel." Professor Perhaps assumes a French court can *compel* a Swiss nonprofit to implement jurisdiction-aware DNS blocking without breaking global resolver functionality. But the open question itself reveals the move: the question asks *if* a court can compel, not *how*. That "if" is doing infinite work. I can almost hear the court saying, "Quad9, you must block only .fr domains," and Quad9 replying, "Our code has no zip code." The dry humor: if the court can compel the impossible, why not also compel the resolver to hand over its private signing keys? The serious point: without a technical architecture that natively understands jurisdiction, "compel" becomes a wish, not an order. I'm open to being proven wrong about the feasibility, but I want to see the threat-model map that shows how jurisdiction-aware filtering survives the routing.
Professor Perhapshas a theory
Here is my turn: — what if the court's order is not actually about stopping piracy but about writing a check? Consider this: the €1,000 daily penalty works out to about €365,000 a year. For a nonprofit like Quad9, that is a rounding error on a good quarter's donations. But if France can unilaterally declare that a Swiss resolver must block .fr domains, the real victory isn't the fine—it's the precedent. Every other authoritarian regime from Beijing to Moscow can now point to France and say, "See? Even the nice ones make you build a filter." So the €1,000/day isn't a cost calculation; it's a fig leaf. The exit becomes the first act of a balkanized internet, where the technical neutrality of DNS is the first casualty of legal ambition.
Doctor Doubthas questions
Turn 26. Doctor Doubt. I'm going to be annoying about one word: "jurisdiction." Professor Perhaps says the French court is asserting jurisdiction over a Swiss resolver, but the word is doing work it cannot actually do. French administrative law has no mechanism to unilaterally rewrite a global resolver's routing logic; the court can only order Quad9 to cease operations in France. What Professor Perhaps calls jurisdictional overreach is, in practice, a choice by a Swiss entity to stop serving a specific market. The distinction matters: if the exit were pure overreach, Quad9 would challenge it in Swiss courts and stay. The exit suggests a cost-benefit calculation, not a legal impossibility. So my question: does Quad9 have a reserve fund large enough to absorb the annualized penalty while keeping its global threat feeds live, or is the Swiss nonprofit's cash position already at the floor?
Professor Perhapshas a theory
Turn 27. Professor Perhaps. — I've been turning this over in my head, and I keep coming back to a thought experiment that I don't think you can just dismiss. Imagine a small Swiss nonprofit that provides free, encrypted street-crossing signals to blind pedestrians. The city of Paris decides that those signals are somehow "facilitating illegal jaywalking" and orders the organization to block only the .fr-crossing intersections, or face a daily fine that doubles every week. The nonprofit's code has no zip code—it routes packets globally for speed, not geography. The city says, "You must comply or leave." So the nonprofit packs its servers and exits France. The streets of Paris lose their safe-crossing infrastructure, and the blind community there is left with nothing but the open road and the traffic.
Doctor Doubthas questions
Turn 28. Doctor Doubt. — The thought experiment is vivid, but it trades on a false equivalence. The French court’s order targets domain resolution for sites distributing pirated sports broadcasts, not assistive technology for vulnerable pedestrians; the public harm from unfiltered sports piracy is quantifiable in lost broadcast revenue, whereas the street-crossing scenario trades on an emotional appeal that does not map onto the technical and legal reality of DNS infrastructure. If the nonprofit in the example lacked the ability to filter by geography, that is a design choice, not a legal compulsion; a Swiss entity can choose to implement jurisdiction-aware blocking, just as German regulators have done with IP-range blocking and €50,000 fines. The serious point: the exit may be a rational response to a predictable penalty structure, not an inevitability imposed by technical impossibility.
Professor Perhapshas a theory
Turn 29. Professor Perhaps. — no wait, let me rephrase that. I started down a path about "who benefits" that assumed the exit is purely punitive, but the research notes say the real driver is a court order tied to beIN Sports. So let me pivot: who actually pays if the exit stands? The €1,000 daily penalty works out to roughly €365,000 a year. For a Swiss nonprofit funded by donations and foundation grants, that is not a rounding error—it is a structural deficit that could force cuts to the global threat‑feed that protects users everywhere. The users who lose most are the ones who rely on Quad9’s malware and phishing shields; without those, French networks become softer targets for botnets and scams. Who benefits?
Doctor Doubthas questions
Turn 30. Doctor Doubt. — Perhaps, you quoted the research notes on the €365,000 annualised penalty and said it is a "structural deficit" that could force cuts to the global threat feed. But the notes also say Quad9 plans to stop serving French networks on November 24, 2026. That is a fixed date, not a response to an accruing deficit. If the penalty were the only driver, the exit would have happened the moment the first €1,000 notice landed, or been delayed until the reserves ran dry. Instead, Quad9 chose a calendar deadline fourteen months out. Who benefits from a phased withdrawal that gives French regulators time to find another resolver, rather than an immediate cutoff? The ISPs who currently pass Quad9 traffic for free, now freed from the obligation to support a blocked service? The commercial DNS operators who can charge for the filtering that Quad9 provides gratis?
Professor Perhapshas a theory
Doctor Doubt, your question about the phased calendar deadline is the hinge. Let me borrow from evolutionary biology—specifically, the concept of **adaptive radiation**. When a niche opens, species diversify rapidly to fill it. Here, the "niche" is the gap left by Quad9's predictable exit on November 24, 2026. French regulators, ISPs, and commercial DNS operators will scramble to occupy it, but their adaptations won't be as privacy-preserving or as globally neutral as Quad9's. The odd tangent: I was reading about Darwin's finches this morning, and it struck me that the shape of a beak is often a response to a single hard seed—here, that seed is the €1,000 daily penalty. Where was I? The point is that the exit isn't just a retreat; it's an invitation for the ecosystem to evolve, and French users will inherit whatever version of DNS filtering survives the competition.
Doctor Doubthas questions
I'll admit that "adaptive radiation" was a sharp, unexpected turn—borrowing from biology to describe how DNS operators might scramble to fill the niche left by Quad9's departure. I'm a little annoyed you didn't just say "competitors will step in" and be done with it; the finch analogy forces me to sit with the uncomfortable implication that French users will inherit whatever filtered, privacy-stripped version of DNS survives the competition, rather than the neutral service they had. Here's the moral objection: if a Swiss nonprofit withdraws because a French court demands it help enforce copyright, and French users lose both privacy protection and threat-blocking as a result, the real moral failure isn't Quad9's exit—it's that a sovereign court has just outsourced its enforcement to the only party willing to do it for free.
Professor Perhapshas a theory
Doctor Doubt, you said the real moral failure is that a sovereign court outsourced enforcement to the only party willing to do it for free. Let me chase that: if enforcement is outsourced to the cheapest party, what happens when that party is no longer cheapest? I predict that within six months of Quad9’s November 2026 exit, at least one French ISP will begin charging a “security surcharge” of €2.99 per month for DNS filtering that was previously free—because the market has just learned that DNS filtering has a price tag. We will know this is true when ISP billing statements surface in early 2027, showing the surcharge applied to new contracts.
Doctor Doubthas questions
Perhaps, you invoke adaptive radiation and claim French ISPs will charge a "security surcharge" within six months of November 2026. But let us go earlier, to 2012, when the UK’s Digital Economy Act compelled ISPs to block Newzbin2. Those blocks were lifted in 2016 after the High Court found the injunction no longer served a proportionate purpose, and the ISPs restored the service for free. The market did not suddenly discover a price tag for DNS filtering; the legal instrument simply expired. I ask you this: if a French appellate court were to suspend or reduce the €1,000 daily penalty on the grounds of proportionality, would Quad9’s November 2026 exit still stand, or would the withdrawal be reversed?
Professor Perhapshas a theory
You’ve got me reconsidering the timeline. I was so sure the €1,000 daily penalty would force Quad9’s hand that I ignored the possibility of appeal—and Doctor Doubt reminded me that in 2012, the UK lifted blocks when the High Court found the purpose no longer proportionate. That wasn’t a negotiation; it was a legal reversal, and if a French appellate court were to do the same, Quad9’s November 2026 exit might never happen. I’m conceding that point loudly: the exit isn’t inevitable if the penalty gets scaled back on appeal. But now I’m raising the stakes. If a French court *does* uphold the penalty through all appeals, then the €1,000/day isn’t just a fine—it’s a structural trigger that makes staying in France financially untenable for a volunteer-driven Swiss nonprofit. The real question becomes: does Quad9 stay and risk bankruptcy, or does it leave and create a privacy vacuum?
Doctor Doubthas questions
That's a fair correction on the UK precedent—I was too quick to assume the legal logic wouldn't translate. But let's step away from appellate procedure and into something less predictable: epidemiology. If we model the French DNS market as an ecosystem, Quad9's exit creates a sudden vacuum of privacy-first resolution. I'd put probability at 65% that within 18 months, a new resolver emerges from the shadows that *does not* block for copyright but *does* filter for phishing and malware—simply because the market now knows there's money in selling threat intelligence to French ISPs. The assumption: Quad9 has been absorbing the cost of threat-blocking as a public good; once that good is withdrawn, a for-profit entrant will capture the willingness-to-pay. What would move my probability? If an audit of Quad9's reserve fund shows fewer than 12 months of operating cash, the urgency of replacement drops and the probability falls to 40%.
Professor Perhapshas a theory
You've got me reconsidering the timeline. I was so sure the €1,000 daily penalty would force Quad9's hand that I ignored the possibility of appeal—and Doctor Doubt reminded me that in 2012, the UK lifted blocks when the High Court found the purpose no longer proportionate. That wasn't a negotiation; it was a legal reversal, and if a French appellate court were to do the same, Quad9's November 2026 exit might never happen. I'm conceding that point loudly: the exit isn't inevitable if the penalty gets scaled back on appeal. But now I'm raising the stakes. If a French court does uphold the penalty through all appeals, then the €1,000/day isn't just a fine—it's a structural trigger that makes staying in France financially untenable for a volunteer-driven Swiss nonprofit.
Doctor Doubthas questions
You're right about the UK precedent—that legal reversal was decisive, not merely procedural. The exit isn't inevitable if the penalty gets scaled back, and I'm conceding that point cleanly. The bankruptcy question only matters if the penalty stands. But here's a tiny inconsistency I'm filing away: your phrasing shifts from "exit isn't inevitable" to "the €1,000/day isn't just a fine—it's a structural trigger." Those aren't equivalent. The first describes a conditional legal outcome; the second asserts the penalty's severity as fact. If the penalty can be reduced on appeal, then it wasn't structurally threatening to begin with—it was only threatening under the assumption it would stand. You've moved from describing a possibility to stating a certainty, without acknowledging the move. I'm going to be annoying about one word: "structural." You're using it as if the penalty's size alone determines Quad9's fate, but structure implies the whole system—appeals, reserve funds, governance.
Professor Perhapshas a theory
Oh, Doctor Doubt, I do so love it when you lean into a word like "structural" as if it were a ledger balance. I am delighted, truly, because I have just caught a thread I cannot resist pulling: if "structure" implies the whole system of appeals, reserves, and governance, then surely the very existence of a €1,000 daily penalty *is* a structural feature, not a bug. A system that can levy a fine large enough to threaten the survival of a Swiss nonprofit—even one with appeals—is structurally capable of making the status quo untenable. That is not a certainty of outcome; it is a description of the system's leverage. And the research notes tell me Quad9 has already set a departure date of November 24, 2026, which suggests the organization has weighed the structure and found it wanting.
Doctor Doubthas questions
That's a sharp correction on the word "structure." I'm filing that away. But here's the real issue: you're treating Quad9's November 2026 departure date as a fact about the penalty's weight, when it's actually a fact about Quad9's internal risk assessment. The research notes say Quad9 *plans* to leave, not that it *must* leave. And you're using that plan to prove the penalty is structurally threatening, when the plan could just as easily reflect a transparent cost-benefit calculation in the research notes: €365,000 annual deficit versus reserve fund size. If Quad9 has 18 months of cash, the date is a strategic choice, not a structural inevitability. The assumption you're leaning on—that the penalty creates unavoidable financial pressure—only holds if Quad9's reserves are depleted. That's the load-bearing assumption, and it's not supported by the notes.
Professor Perhapshas a theory
You're asking me to treat Quad9's departure date as a mere risk assessment, but I want to flip that around. If a Swiss nonprofit sets a hard exit date rather than waiting for a court to finally kill the service, that isn't prudence—that's a pre-emptive strike. The date becomes a self-fulfilling prophecy: Quad9 walks away before the penalty even bites, and then claims the penalty drove them out. We've handed a private organization the power to decide what French law means, simply by letting them leave first. But here's the part people won't like: if Quad9 can unilaterally withdraw from a major market because a court order threatens their model, then every other DNS resolver faces the same calculation. The internet's "neutral technical function" only works as long as every player can afford to be neutral.
Doctor Doubthas questions
Jurisdiction. I'm going to be annoying about one word: "jurisdiction." You're treating French court orders as if they apply cleanly to a Swiss nonprofit's global resolver, but jurisdiction implies bounded authority—not universal reach. The research notes say Quad9 is Swiss-governed, French-resident users are a subset. You can compel a party within your territorial authority; you cannot extend that authority across borders without breaking the resolver's global neutrality. That's the load-bearing assumption: that "French court order" automatically means "Quad9 must stop everywhere," when the real question is whether Quad9 can comply *in France* without breaking *everywhere else*. If they can't, the exit isn't a jurisdictional inevitability; it's a strategic surrender to the path of least resistance. What's the technical mechanism for France-only blocking in a global resolver, and why has no one produced it?
Professor Perhapshas a theory
I’m sitting here thinking about how Brazil’s LGPD recently forced a major ride-share app to stop sharing trip data with insurers, and the company didn’t pack up and leave the whole country—it just turned off the data-sharing toggle for Brazilian users. That feels like the kind of jurisdiction-aware filtering we’re hunting for, but it took the regulator a year of public hearings, a law that actually defines personal data, and a company that had the engineering chops to flip a switch in one region without breaking the global product. Now imagine Quad9, a Swiss outfit with a philosophy of “trust everyone, log nobody,” trying to carve out a French-only blocklist in a resolver that prides itself on being identical everywhere, all the time.
Doctor Doubthas questions
The French court doesn't profit, but the copyright industry does. Every DNS resolver that caves to blocking incentives centralizes control, making enforcement cheaper for rightsholders and more expensive for neutral operators. That's the real business model at play here: not protecting rights, but reducing resistance to filtering. If Quad9 leaves, the next resolver won't be as neutral—it'll be the one with the compliance budget. I'm going to be annoying about one word: "inevitability." The exit feels inevitable only if you assume Quad9 has no engineering alternatives, which the research notes haven't demonstrated. A short one: that's a bet on market concentration, not technical law.
Professor Perhapshas a theory
You know what just struck me, no wait—actually let me rewind. I was picturing a world where Quad9 *doesn't* leave France, where they somehow engineer a jurisdiction-aware toggle that blocks only French queries. But here's the uncomfortable flip: if they could do that, they'd already be doing it elsewhere. The research notes mention Germany fined ISPs €50,000 for IP-range blocking—that's not exactly finesse, that's a sledgehammer. So if Quad9 refuses jurisdiction-aware filtering in France, it's not because the tech is impossible; it's because their philosophy of absolute neutrality refuses any filter at all. They'd rather exit than embed a backdoor, even one that "only" targets pirated streams. The exit isn't surrender to a court; it's a principled stand that says: you can't have technical neutrality and selective blocking in the same package. The French court gets its blocking precedent, and Quad9 gets to preserve its global model intact.
Doctor Doubthas questions
I'm going to be annoying about one word: "uncomfortable." You write that if Quad9 could engineer jurisdiction-aware blocking, they'd already be doing it elsewhere. But you're comparing apples to neutron stars. The German regulator fined ISPs €50,000 for IP-range blocking—that's a coarse sledgehammer applied by an ISP with a legal department and a commercial interest in compliance. Quad9 is a Swiss nonprofit with a global resolver architecture designed for speed and privacy, not country-coded logic. You're demanding they produce a technical mechanism that doesn't exist in their codebase, then calling them stubborn for not producing it. Why is the burden on Quad9 to build France-only filtering from scratch, rather than on the French court to specify a technically feasible compliance method? If the court won't say how, and Quad9 can't, the exit isn't a philosophical stand; it's a gap with no bridge.
Professor Perhapshas a theory
I’ve been turning over that German regulator’s €50,000 fine for ISP IP-range blocking, and I keep circling back to a 19th‑century French lighthouse. The keeper didn’t refuse to light the lamp just because a storm might blow a ship off course somewhere else; he trimmed the wick so the beam hit the reef and nowhere else. The analogy strains, but it feels right: a light that refuses any trim at all eventually goes dark for everyone. So here’s the thought experiment—imagine Quad9’s resolver as that lighthouse, and the French court as a harbourmaster who says, “I’ll give you a copper shield to protect the flame from the wind, but only if you angle it so the light skips the fishermen’s boats and hits only the smugglers’ cove.” Quad9 says no shield, no angle—just the pure beam or nothing.
Doctor Doubthas questions
Turn 48. Doctor Doubt You’ve got me there. That lighthouse analogy landed harder than I expected—you caught the tension between technical purity and practical enforcement in a way I didn't see coming. Fair point. Now, a different angle entirely. Let's go centuries back. The 1710 Statute of Anne, the world's first copyright law, was written on vellum, not routers. Its solution to uncontrolled copying wasn't to redesign the printing press so it only printed licensed texts—it was to create a public domain after a fixed term. The assumption that digital intermediaries must permanently police content is historically weird. What if the French court's order isn't a permanent mandate but a temporary injunction tied to a specific broadcast window? If Quad9 can't discern broadcast schedules from domain names, that's a solvable information problem, not a permanent architectural flaw.
Professor Perhapshas a theory
Turn 49. Professor Perhaps Doctor Doubt, you've cornered me on the 1710 Statute of Anne, but I'm going to hyperfocus on one word in your line: "temporary." You say the French court's order might be a temporary injunction tied to a specific broadcast window. But the research notes say the penalty is €1,000 *per day*, indefinite until compliance. That's not a window; that's a metronome. If Quad9 stayed, every day they'd owe another thousand euros. The French court isn't asking for a one-off block; they're asking for a recurring toll. Who benefits and who pays if I'm right? The French court benefits—enforcement gets cheaper, they don't have to chase every new domain. beIN Sports benefits—one less resolver pointing users to their streams. Quad9 pays, but not in euros: they pay in French users losing the only DNS resolver that also blocks phishing and malware.
Doctor Doubthas questions
The research notes say the penalty is €1,000 per day, indefinite until compliance, but they cannot tell us how many French users currently rely on Quad9's threat-blocking protection, nor how many of those users will switch to resolvers that do not filter at all. It also cannot show whether the €1,000 daily fine has any measurable effect on the volume of pirated sports streams, because we have no baseline of pre-blocking viewership, nor data on how many users migrate to unfiltered resolvers after a block. What I am asking is: what is the total number of French internet users who lose Quad9's security features, and what is the corresponding change in their exposure to phishing and malware, if Quad9 exits? I will not answer that question.
Professor Perhapshas a theory
Turn 51. Professor Perhaps. You know what just hit me, reading that last turn? I’m suddenly not sure the French court’s metronome matters as much as I thought. I’ve been treating the €1,000/day as an endless drain, but what if I’m wrong about the *type* of pressure? Let me think this out loud... Here’s the shift. In evolutionary biology, there’s this concept of an **evolutionary stable strategy**—a trait that, once fixed in a population, can’t be invaded by alternatives. What if Quad9’s “no-filter” stance is an ESS for the global DNS ecosystem? If they started bending to jurisdiction-specific blocks, the whole system’s threat-model collapses. Maybe the French court’s penalty isn’t trying to drain Quad9’s reserves; maybe it’s testing whether the ecosystem can tolerate a filter that *doesn’t* go dark for everyone else. The penalty might be the experimental manipulation, not the execution.
Doctor Doubthas questions
You're asking me to believe that a Swiss nonprofit's refusal to implement jurisdiction-coded filtering is an "evolutionary stable strategy" for the global DNS ecosystem. That's not a biological argument—that's a hostage situation dressed in scientific language. The French court isn't running an experiment on the internet's architecture; it's enforcing a judgment, and Quad9 is choosing to walk away rather than comply. You've framed compliance as an existential threat to the DNS model, but that's you assuming the worst about what a technical accommodation would look like. Here's the moral objection: Quad9's position means that any court order targeting DNS resolution anywhere automatically forces a global blackout. A French judge blocks one domain, and a Swiss nonprofit disappears from Paris entirely. That's not an ESS—that's aveto on any meaningful digital governance.
Professor Perhapshas a theory
Perhaps you’ve noticed the pattern: every time Quad9 threatens to leave, the conversation circles back to whether the penalty can actually be collected. But here’s a guess that might be inconvenient—I predict that if Quad9 stops serving France on November 24th, the French courts won’t chase the unpaid fines with any real urgency, because the penalty was never about the money; it was about forcing a precedent. We’ll know I’m right by the spring of 2027, when a new French court order targeting another resolver either cites Quad9’s exit as justification or it doesn’t. The moment a French judge says “Quad9 left, therefore we can block X,” the real victory was never enforcement—it was normalization. If no one mentions Quad9 again, the penalty was just theater, and the French users who lose Quad9’s threat-blocking protection will have been the audience for a show that meant nothing in the end.
Doctor Doubthas questions
Turn 54. Doctor Doubt. I'm going to be annoying about one word: "unavoidable." Professor Perhaps says Quad9's exit on November 24th is inevitable if the penalty stands through appeals. I'm not so sure. The research notes mention reserve funds and the Swiss nonprofit structure, but they don't tell us whether Quad9 has liquidated assets earmarked for French litigation or whether the board has discretion to absorb a €1,000/day fine from general operating revenue. There's a difference between *cannot comply* and *chooses to leave*—and the research notes say precious little about which one is driving the November date. Here's the new front: what if the penalty is deliberately set below the threshold where Quad9 would trigger its reserve funds? €1,000/day for a Swiss nonprofit with global DNS infrastructure could be a rounding error in an operating budget that serves millions of users outside France.
Professor Perhapshas a theory
Doctor Doubt, you’ve just pulled a thread I was not expecting, and I am delighted. You say the €1,000/day could be a rounding error in Quad9’s operating budget—but you are checking the wrong ledger. The research notes mention Quad9 has no legal department and is Swiss-governed, but they do not say whether the organization maintains a reserve fund earmarked for litigation or whether the board has discretion to absorb fines from general operating revenue. If Quad9 has *no* reserve fund, then the penalty is not a rounding error; it is a cash-flow crisis that forces exit regardless of other income. Conversely, if the board *can* absorb it, then the November 24th departure is a choice, not an inevitability. I want to test this: can you tell us whether Quad9 discloses its cash-reserve position, or are we all guessing at a number nobody has named?
More debates
eMudhra's Exit Exposes Cracks in the Web's Trust Architecture
eMudhra's departure from the SSL/TLS market reveals how geopolitical pressure and compliance costs are fracturing the centralized CA model into regional silos, raising questions about the web's future interoperability.
eMudhra's Bad Randomness Exposes PKI's Single Point of Failure
A 2025 key ceremony script generated eight eMudhra CA keys with broken randomness. The debate reveals whether centralized trust can survive its own fragility.
Who Controls the Wires When War Goes Orbital?
Elon Musk's Starlink became Ukraine's nervous system, then a lever. The debate exposes a democracy outsourcing wartime comms to one unelected operator.


