(context: I am the CTO of Quad9) Using those threat intelligence feeds is optional, as the blog post indicates. 9.9.9.10 & secondaries have no filtering. The threat feeds we offer are in alignment with what the user…
French law does not care if the servers are in France or anywhere else - just that the users are in France. This sounds unexpected, but that is the law. There is a treaty called the "Lugano Convention" that allows civil…
Quad9 is not a telecommunications service provider as defined by Swiss law, which is where that application becomes enforced. Details of this (and many other things) can be found on the "Compliance and Applicable Law"…
Reply in separate thread: https://news.ycombinator.com/item?id=50200111
(context: I'm the CTO of Quad9 and am one of the people dealing with the lawyers) There is an understandable focus on "how are you going to block French users" when we have also claimed that geoIP blocking is…
Interesting to see this on HN - it's a few miles from my house, and was very happy to see the sale to the state. Note that there are TWO possible paths down to Abiqua creek that are quite close to one another at the top…
I will say that Vidmar, Lista, and Rousseau make thin drawer cabinets that work well for cables if you have graduated from "big box of cables" to "cabinets full of cables". Also, old map or blueprint drawers work well.…
This place was amazing, and worth a whole afternoon every time I went there. The owner was even more interesting, and a whole story in his own right. (I just looked at his wikipedia entry- wasn't aware there have been…
No, canaries in our opinion are not a particularly good idea for a variety of reasons. We have not received any requests/demands for information in 2026 - we'll try to update the page to reflect that this is no longer a…
This is an area that is fraught with challenges. Serving a truly global audience means standards are difficult to measure as to what is "adult content" - it varies widely (Wikipedia in some areas is "adult content", as…
We actually quite like DOQ and DOH3, both of which use QUIC. All modern Apple systems use QUIC. For instance if given 9.9.9.9 via DHCP they will automatically upgrade to encryption via DDR, then then upgrade to DOH3…
Our goal is not "insulation" as much as it is "transparency." Governments that do not adhere to legal frameworks like the ones you reference above are also governments that have inconsistent or easily-changed legal…
Cost and staff time to pursue were not significantly higher than the return. We just want to help people with security and privacy and do DNS stuff - this legal fighting is absurd and misplaced and a spectacular waste…
What's even worse: the court fined us because they claimed this use case was in some way in contempt of their ruling. Then, when we won the overall case, that money was never returned because it wasn't specifically…
Hi - I'm with Quad9 (CTO). I'm going to try to put together a single post replying to some of these topics. First: We welcome the Mullvad users who will be shifted onto our systems, and we appreciate that Mullvad…
I am constantly amazed that people rely on anyone else's compute infrastructure for things like doorbells, cameras, locks, switches, or sensors (network infrastructure is, at the moment, a seemingly acceptable…
Works sporadically - some sites just have no "copied to clipboard" even after a 3-4 minute delay. However, works enough that it's quite useful to have in the inventory of tools - thanks, random internet link!
I purchased quite a few of those systems when they came out of production and went into the surplus supply chain. I don't recall anything unusual about the cubes with NeXTDimension boards that were in there though. Some…
Quad9 employs DNSSEC on all endpoints now. https://quad9.net/news/blog/quad9-enables-dnssec-on-all-serv...
One approach to solving this for a very limited set of intervals is to actually block namespace that has been removed at the registry level. There is a paper on this from Raffaele Sommese:…
This is conflating BGP routes and DNS. DNS data: Root server data is available via AXFR ("dig . AXFR @f.root-servers.net") but this isn't what you're referencing. Second level TLD server data is available is available…
This is a great project and I'd use it immediately, but I'm heavily invested in ONVIF devices and have no VISCA-based cameras. Plus, I'm betting that most VISCA devices aren't weatherproof. I know that VISCA has the…
Hi - the guy who wrote the blog speaking here - I'm the General Manager for Quad9. You're right - this was done by the team a bit too hastily. However, the document is public as a court filing, try to be as cautious as…
(context: I am the CTO of Quad9) Using those threat intelligence feeds is optional, as the blog post indicates. 9.9.9.10 & secondaries have no filtering. The threat feeds we offer are in alignment with what the user…
French law does not care if the servers are in France or anywhere else - just that the users are in France. This sounds unexpected, but that is the law. There is a treaty called the "Lugano Convention" that allows civil…
Quad9 is not a telecommunications service provider as defined by Swiss law, which is where that application becomes enforced. Details of this (and many other things) can be found on the "Compliance and Applicable Law"…
Reply in separate thread: https://news.ycombinator.com/item?id=50200111
Reply in separate thread: https://news.ycombinator.com/item?id=50200111
(context: I'm the CTO of Quad9 and am one of the people dealing with the lawyers) There is an understandable focus on "how are you going to block French users" when we have also claimed that geoIP blocking is…
Interesting to see this on HN - it's a few miles from my house, and was very happy to see the sale to the state. Note that there are TWO possible paths down to Abiqua creek that are quite close to one another at the top…
I will say that Vidmar, Lista, and Rousseau make thin drawer cabinets that work well for cables if you have graduated from "big box of cables" to "cabinets full of cables". Also, old map or blueprint drawers work well.…
This place was amazing, and worth a whole afternoon every time I went there. The owner was even more interesting, and a whole story in his own right. (I just looked at his wikipedia entry- wasn't aware there have been…
No, canaries in our opinion are not a particularly good idea for a variety of reasons. We have not received any requests/demands for information in 2026 - we'll try to update the page to reflect that this is no longer a…
This is an area that is fraught with challenges. Serving a truly global audience means standards are difficult to measure as to what is "adult content" - it varies widely (Wikipedia in some areas is "adult content", as…
We actually quite like DOQ and DOH3, both of which use QUIC. All modern Apple systems use QUIC. For instance if given 9.9.9.9 via DHCP they will automatically upgrade to encryption via DDR, then then upgrade to DOH3…
Our goal is not "insulation" as much as it is "transparency." Governments that do not adhere to legal frameworks like the ones you reference above are also governments that have inconsistent or easily-changed legal…
Cost and staff time to pursue were not significantly higher than the return. We just want to help people with security and privacy and do DNS stuff - this legal fighting is absurd and misplaced and a spectacular waste…
What's even worse: the court fined us because they claimed this use case was in some way in contempt of their ruling. Then, when we won the overall case, that money was never returned because it wasn't specifically…
Hi - I'm with Quad9 (CTO). I'm going to try to put together a single post replying to some of these topics. First: We welcome the Mullvad users who will be shifted onto our systems, and we appreciate that Mullvad…
I am constantly amazed that people rely on anyone else's compute infrastructure for things like doorbells, cameras, locks, switches, or sensors (network infrastructure is, at the moment, a seemingly acceptable…
Works sporadically - some sites just have no "copied to clipboard" even after a 3-4 minute delay. However, works enough that it's quite useful to have in the inventory of tools - thanks, random internet link!
I purchased quite a few of those systems when they came out of production and went into the surplus supply chain. I don't recall anything unusual about the cubes with NeXTDimension boards that were in there though. Some…
Quad9 employs DNSSEC on all endpoints now. https://quad9.net/news/blog/quad9-enables-dnssec-on-all-serv...
One approach to solving this for a very limited set of intervals is to actually block namespace that has been removed at the registry level. There is a paper on this from Raffaele Sommese:…
This is conflating BGP routes and DNS. DNS data: Root server data is available via AXFR ("dig . AXFR @f.root-servers.net") but this isn't what you're referencing. Second level TLD server data is available is available…
This is a great project and I'd use it immediately, but I'm heavily invested in ONVIF devices and have no VISCA-based cameras. Plus, I'm betting that most VISCA devices aren't weatherproof. I know that VISCA has the…
Hi - the guy who wrote the blog speaking here - I'm the General Manager for Quad9. You're right - this was done by the team a bit too hastily. However, the document is public as a court filing, try to be as cautious as…