Blog

The French courts yesterday handed down an unfavorable ruling against Quad9 in a major case that undermines the transparency and stability of the internet. As a result, Quad9 will no longer be able to offer its free cyberprotection service to users located in France effective November 24.

This blogpost provides security insights on the threats blocked by Quad9 DNS between January and June 2026. This time we analyzed the top 50 domains blocked by us, which together accounted for more than 14 billion blocked DNS queries in six months.

Quad9 has expanded its privacy protections by locally answering all reverse DNS queries for private and special-use address spaces.

Privacy is, always has been, and always will be paramount at Quad9, so we want to take a few moments to explain the updates made to our privacy policy.

On 8 May 2026, Quad9 experienced outage intervals up to ~40 minutes for our primary zone “quad9.net” due to a failed validation step between our primary hidden authoritative servers and PCH’s anycast network, which we use for externally-facing DNS authoritative services.

Quad9 is enabling DNSSEC validation on its remaining non-validating resolver address. Starting June 15, 2026, DNSSEC strict validation will be active across every Quad9 service endpoint.

As part of our continuous efforts to improve the quality of the services we offer, we are migrating to a new Status Page platform effective April 22.

At Quad9, we aim to recognize the people behind the infrastructure that keeps the internet secure and reliable for millions of users worldwide. This staff highlight features Principal Engineer, Darren Kara.

Quad9 has enabled DNS over HTTP/3 (DoH3) and DNS over QUIC (DoQ) across its global resolver network.

Quad9 believes that DNSSEC is required for a secure DNS and will only implement Negative Trust Anchors (NTAs) for the shortest time possible when it believes the greater harm would come from taking no action.