{"id":18795,"date":"2026-09-18T15:21:41","date_gmt":"2026-09-18T22:21:41","guid":{"rendered":"https:\/\/jasonsblog.ddns.net\/?p=18795"},"modified":"2026-09-18T15:21:41","modified_gmt":"2026-09-18T22:21:41","slug":"the-nonprofit-fighting-to-keep-dns-private-quad9-interview","status":"publish","type":"post","link":"https:\/\/jasonsblog.ddns.net\/index.php\/2026\/09\/18\/the-nonprofit-fighting-to-keep-dns-private-quad9-interview\/","title":{"rendered":"The Nonprofit Fighting to Keep DNS Private (Quad9 Interview)"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

If you’re not running your own recursive DNS servers, this looks like a solid option. Myself, on the home network I run Pi-Hole<\/a>\/Unbound<\/a> recursive DNS servers distributed to clients by my router, and when using Mullvad VPN I’m using their DNS servers that offer the same services with blocklists for ads, telemetry, malware… The really interesting bit was that Quad9<\/a> is being sued in the EU to have them block domains connected to copyright infringement, though I’m sure governments would like to expand that eventually. Quad9 has won one lawsuit, but have a new one to deal with. And you’d have to wonder if this is to financially penalize their non-profit to prevent further privacy measures. By default the Quad9 primary DNS server includes malware blocking, 9.9.9.9, or you can use unfiltered internet with 9.9.9.10. I’d use the ECS DNSSEC 9.9.9.11, backup 149.112.112.11 that include malware blocking. I was going to make a donation to Quad9, but you have to identify yourself even if using Bitcoin. Probably regulatory, but I just don’t do that and it’s not necessary and defeating the purpose of using Bitcoin.<\/p>\n\n\n\n

\n