Shutting down our public encrypted DNS (mullvad.net)

Article summary

Mullvad is shutting down its public encrypted DNS servers and will instead support Quad9, a leading provider of privacy-focused public DNS services. The decision is based on the specialized nature of running a public DNS service and the desire to allocate resources more efficiently. Mullvad's public DNS servers were used by its browser and as a free public service, but users will need to migrate to Quad9 by November 2nd, 2026. The change will not affect Mullvad VPN users, who already have their traffic encrypted and DNS handled internally.

Main themes

• DNS services
• Privacy and security
• Adblocking and filtering
• Quad9 and Mullvad
• DNSSEC validation
• Self-hosting and customization
• Cloud-based DNS services
• Performance and convenience trade-offs

What commenters say

• Some users appreciate the decision to support Quad9, considering it a leader in the field of privacy-focused public DNS services.
• Others express concerns about the potential for Quad9 to poison DNS records, highlighting the limitations of DNSSEC validation.
• The discussion highlights the importance of adblocking DNS services, which Quad9 does not provide, leading some users to consider alternative solutions like NextDNS or running their own adblocking services.
• There is a debate about the effectiveness of DNS-based adblocking, with some users finding it useful for blocking in-app ads, while others prefer using browser extensions like uBlock Origin.
• Some users recommend running their own DNS services, such as Adguard Home or Pi-Hole, for greater control and customization.
• Others prefer the simplicity of using a cloud-based DNS service, like NextDNS, which offers a free tier and easy setup.
• The conversation also touches on the trade-offs between security, performance, and convenience in choosing a DNS service.
• Some users discuss the limitations of DNSSEC validation and the potential for malicious resolvers to compromise security.