Summary
The Defender’s Log episode features John Todd from Quad9, discussing their mission to protect the internet through secure DNS. Quad9, a non-profit launched in 2017 with founding partners Global Cyber Alliance, Packet Clearing House, and IBM, provides a free, global recursive DNS resolver that blocks malicious domains.
Todd emphasizes that Quad9’s success is a team effort and highlights their network of 260 locations in 130 countries, largely sustained by donated infrastructure. He explains their threat intelligence ecosystem, where 35 providers contribute data, receiving usage insights in return, allowing them to improve their services. Quad9 prioritizes a low false-positive rate to maintain user trust, acknowledging the challenge of balancing comprehensive blocking with minimal disruption. Todd also touches on future innovations like Zero Trust DNS and EDSR, aiming to decentralize DNS operations and enhance privacy. Quad9’s Swiss location provides strong legal protection for user data, reinforcing their commitment to privacy and security.
Defending the DNS: How Quad9 Protects the Internet | John Todd – CTO, Quad9 | The Defender’s Log
TL;DR:
How Quad9 Protects the Internet
- Quad9 is a free, non-profit DNS security platform that blocks malicious domains.
- It was founded by Global Cyber Alliance, Packet Clearing House, and IBM (who provided the 9.9.9.9 IP address).
- Quad9 leverages threat intelligence from 35 providers, sharing anonymized data back to improve their services.
- They prioritize a very low false positive rate to maintain user trust, as their service is free and has no user commitment.
- Quad9 operates a global anycast network with over 260 points of presence, largely built on donated infrastructure.
- Future goals include IP-based blocking and a “Zero Trust DNS” model with EDSR (Encrypted DNS Server Redirection) to decentralize DNS.
- Located in Switzerland, Quad9 benefits from strong legal protections for user privacy and is constantly seeking funding to continue its mission.