쿼드9

Quad9
쿼드9
Quad9 logo.svg
설립.2016년 5월 11일(2016-05-11)
설립자패킷 클리어 하우스
IBM
글로벌 사이버 얼라이언스
스위치
유형공공의 이익. 비영리적인 토대
등록번호435.091.407
초점인터넷 프라이버시와 보안
위치
서비스 지역
세계적인
직원들.
12
웹 사이트quad9.net

Quad9은 악성 프로그램 및 피싱으로부터 사용자를 보호하는 것을 목적으로 하는 글로벌 퍼블릭 재귀 DNS 해결사입니다.Quad9은 [1]취리히에 본사를 둔 인터넷 사용자의 사생활과 사이버 보안을 개선하기 위한 목적으로 스위스 공익 비영리 재단인 Quad9 Foundation에 의해 운영됩니다.그것은 공익 차원에서 비영리적으로 운영되는 유일한 글로벌 공공 해결사이다.Quad9은 전적으로 스위스 프라이버시법의 적용을 받으며, 스위스 정부는 시민권이나 [2]거주 국가에 관계없이 Quad9의 사용자를 대상으로 법의 보호를 확대하고 있습니다.Quad9은 현재 미국 법률의 적용을 받지 않는 유일한 글로벌 재귀 해결사입니다.다른 재귀 해결사는 각각 샌프란시스코 베이 에리어에 소재하고 있으며 캘리포니아 북부 연방법원에 [3][4][original research?]의해 관리되고 있습니다.

보안과 프라이버시

몇 가지 독립적인 평가 결과 Quad9이 악성 프로그램 및 피싱 [5][6][7][8]도메인을 차단하는 데 가장 효과적인 것으로 나타났습니다(97%).2021년 6월 현재 Quad9은 하루에 [9]1억 개 이상의 악성 프로그램 감염과 피싱 공격을 차단하고 있습니다.Quad9의 말웨어 필터링은 사용자가 선택할 수 있는 옵션입니다.필터링되는 도메인은 Quad9에 의해 결정되는 것이 아니라 다양한 독립적인 위협 정보 분석가가 다양한 방법을 사용하여 Quad9에 공급합니다.Quad9은 평판 스코어링 시스템을 사용하여 이러한 소스를 집약하고 필터 목록에서 "false positive" 도메인을 삭제하지만 필터 [5][10][11][12]목록에 도메인을 추가하지는 않습니다.

Quad9은 표준 기반의 강력한 암호화를 최초로 사용하여 사용자의 DNS 쿼리의 프라이버시를 보호했으며 DNSSEC 암호화 검증을 사용하여 사용자를 도메인 이름 [13][14][15][16][11]탈취로부터 보호했습니다.Quad9은 사용자의 IP 주소를 유지 또는 처리하지 않음으로써 사용자의 프라이버시를 보호하고 결과적으로 GPR에 [17][18][19]준거합니다.

장소

Map of Quad9 recursive resolver locations as of 2021-05-27

2021년 8월 현재 Quad9 재귀 해결기는 6개 대륙 및 106개국의 [20]224개소에 있는 서버 클러스터에서 작동하고 있습니다.

소니 뮤직의 금지 명령

2021년 6월 18일, Quad9은 함부르크 지방 법원으로부터 최초의 금지 명령을 받았다.Sony Music은 Quad9이 저작권 침해 자료가 없는 웹 사이트에서 사용되는 도메인 이름의 DNS 해결을 차단할 것을 요구했다.[21]이것은 저작권 소유 산업이 재귀 DNS 운영자에게 인터넷 도메인 이름의 접근을 차단하도록 강요하는 첫 번째 사례이기 때문에, 이것은 독일법의 참신한 해석이며, 광범위한 결과를 초래하는 선례가 되는 사례라고 생각된다.Quad9의 제너럴 매니저인 John Todd는 언론에서 "우리 기부자들은 소니를 더 부유하게 하기 위해서가 아니라 사이버 위협으로부터 대중을 보호하기 위해 우리를 지지한다"면서 "만약 이 선례가 지속된다면, 그것은 바이러스 대책 소프트웨어, 웹 브라우저, 운영 체제, 파이어와와와 같은 관계없는 다른 제3자에 대한 유사한 금지 명령으로 다시 나타날 것이다"라고 말한 것으로 전해졌다.독일 인터넷 협회 에코의 법률 전문가 토마스 리커트는 "공공 해결사 운영자보다 불법 도메인에 대한 책임에서 더 멀리 떨어진 공급자는 상상할 수 없다"고 말했다.Quad9은 즉시 이 가처분 신청에 이의를 제기할 것이라고 발표했으며 6월 24일 현재 독일 변호사를 보유하고 있으며 [22][23][12][24][25][26][27][28][29]가처분 신청에 이의를 제기할 것이라고 밝혔다.소니 측 변호사인 클레멘스 라슈는 법원 문서 내 소송의 배후로 언론으로부터 널리 의심받고 있는 사이트인 canna.to에 접속하려는 시도가 있었는지에 대해 명확하게 밝히지 않고 있으며 소니가 "그들이 확인될 수 있었다면" 그렇게 했을 것이라고만 말했다.지난 22년 동안 은밀하게요법원 대변인은 신청인 측의 진술만 가처분 신청의 근거로 삼았다며 신청인이 보냈다고 주장하는 통지서가 발송됐을 뿐 아니라 수취인에게도 전달된 것으로 보고 있다고 말했다.분쟁 첫 주 말에 언론은 Quad9에 대한 기부가 전주 대비 900% 증가했으며, 6월 27일 현재 Quad9 서버를 [30]통해 canna.to를 해결할 수 있다고 지적했습니다.

2021년 8월 31일 Quad9은 소니에 의해 제기된 법적 논쟁의 많은 결함을 언급하며 이 가처분 신청에 대해 이의를 제기했지만, 주로 ISP(실제로 침해 당사자들과 비즈니스 관계를 맺고 있는 ISP)가 DNS 재귀 해결기(DNS recursive resolvators)를 운영하고 있음에도 불구하고 제3자 책임으로부터 면제된다는 사실에 의존한다.d 독립 재귀 해결사를 [31][5][32]면제 대상에서 제외하는 것은 법의 잘못된 해석이다.

서비스

Quad9 에서는, 다음의 IP 주소에서 공용으로 재귀 네임 서버가 동작합니다.이러한 주소는 애니캐스트라우팅을 사용하여 가장 가까운 운영서버에 라우팅 됩니다.Quad9은 포트 853을 [33]통한 DNS over TLS, 포트 443을 [34]통한 DNS over HTTPS 및 포트 443을 [35]통한 DNSCrypt를 지원합니다.

고도의 보안 / 고도의 프라이버시 고도의 보안 / 적당한 프라이버시 저보안/고프라이버시
도메인을 필터링합니다. 네. 네. 아니요.
DNSSEC 검증
ECS 통과 아니요.
DoH[36] 경유 https://dns.quad9.net/dns-query https://dns11.quad9.net/dns-query https://dns10.quad9.net/dns-query
Via DoT[36] dns.quad9.net dns11.quad9.net dns10.quad9.net
IPv4[36] 경유 9.9.9.9
149.112.112.112		 9.9.9.11
149.112.112.11		 9.9.9.10
149.112.112.10
IPv6[36] 경유 2620:fe:fe
2620:fe::9		 2620:fe:11
2620:fe::fe:11		 2620:fe:10
2620:fe::fe:10

「 」를 참조해 주세요.

레퍼런스

  1. ^ "Quad9 moves to Switzerland". ncsc.admin.ch. Swiss National Cyber Security Centre. 2021-02-17. Retrieved 2021-05-27. Non-profit organisation Quad9 is relocating its headquarters to Zurich.
  2. ^ Steiger, Martin (2021-02-18). "Quad9 Foundation – Recursive DNS Resolver in Switzerland / Applicability of Swiss and European Data Protection Law" (PDF). steigerlegal.ch. Steiger Legal. Archived from the original (PDF) on 2021-05-27. Retrieved 2021-05-27. Quad9 is entirely and fully subject to Swiss data protection law including the Swiss Federal Act on Data Protection (FADP) and its corresponding ordinance with regard to all data subjects, i.e., for all persons worldwide whose data is being processed by Quad9. Compliance with Swiss data protection law is subject to the independent supervision of the Swiss Federal Data Protection and Information Commissioner (FDPIC). Data subjects may file a complaint with the FDPIC regardless of their citizenship or country of residence.
  3. ^ "Cloudflare corporate headquarters". linkedin.com. 2021-05-27. Retrieved 2021-05-27. Cloudflare corporate headquarters: San Francisco, California
  4. ^ "Cisco corporate headquarters". cisco.com. 2021-05-27. Retrieved 2021-05-27. Cisco corporate headquarters: San Jose, California
  5. ^ a b c Reda, Julia (2021-08-30). "Quad9 in Störerhaftung – neue Rechtsunsicherheit für DNS-Resolver". Heise Online. Retrieved 1 September 2021. Quad9 service is characterized by significantly increasing IT security compared to alternative, mostly commercial DNS services. Independent tests have determined that Quad9 filters over 97 percent of tested malware and phishing domains.
  6. ^ Lawrence, Tom (2020-05-03). DNS Malware Filtering Compared: Quad9 VS Cloudflare VS DNS Filter VS OpenDNS. lawrencesystems.com. Lawrence Systems. Retrieved 2021-05-27. Quad9: 97.16% effective, Cloudflare: 56.74% effective, OpenDNS: 9.22% effective
  7. ^ Young, Andrew (2020-05-31). "Comparing Malware-blocking DNS Resolvers". andryou.com. Andryou. Retrieved 2021-05-27. Quad9: 97.08% effective, Cloudflare: 56.20% effective, OpenDNS: 2.19% effective
  8. ^ Kod, Skadlig (2020-05-02). "Malicious Site Filters on DNS". skadligkod.se. Skadlig Kod. Retrieved 2021-05-27. Quad9: 96% effective, Cloudflare: 13% effective, OpenDNS: 46% effective
  9. ^ Editor 3 (25 May 2021). "Quad9: Witnesses Extensive Growth in Blocked DNS Strength". EaDnsKeep. EaDnsKeep. Retrieved 9 June 2021. Quad9 is currently seeing a new record-setting rate of approximately 60 million of these blocking events per day, representing a 600% year-over-year growth rate. During heavy “storms” of cybercrime venture, this volume has increased to over 100M events per day. {{cite web}}: last1=범용명(도움말)이 있습니다.
  10. ^ "Quad9 Partners". Retrieved 1 September 2021. Quad9 partners with a large number of threat intelligence sources who provide up-to-the-minute data about domains that pose a threat because of malware, phishing, botnets, or other malicious activities. Quad9 uses vetted open-source threat data as well as donated information from commercial sources.
  11. ^ a b Schmitt, Paul; Edmundson, Anne; Mankin, Allison; Feamster, Nick (2019). "Oblivious DNS: Practical Privacy for DNS Queries". Proceedings on Privacy Enhancing Technologies. 2019 (2): 228–244. arXiv:1806.00276. doi:10.2478/popets-2019-0028. S2CID 44126163. Retrieved 13 June 2021. Quad9 provides both security and privacy features for DNS. Quad9 uses threat intelligence data at the recursive resolver to prevent a client from accessing a malicious site. This recursive resolver does not store or distribute the DNS data passing through.
  12. ^ a b Jackson, Mark (2021-06-21). "DNS Providers May Be Forced to Block Internet Piracy Websites". ISPreview. Retrieved 21 June 2021. The court also seemed to accept Sony’s argument that Quad9 already blocks problematic websites (e.g. those that contain malware – viruses, spyware etc.), despite that being a very different consideration. Quad9’s General Manager, John Todd, said: 'Quad9 derives its threat intelligence from qualified experts on malware and phishing, not from the claims of parties without relevant expertise. We would be unable to maintain our 98% success rate in blocking cyber-threats if we accepted input based on self-interested claims, rather than on forensics and expert analysis.' we could imagine that many more Rights Holders may rush to make use of this for similar websites. Naturally, Quad9 intends to appeal and so the battle is not yet over.
  13. ^ "New "Quad9" DNS service blocks malicious domains for everyone". Ars Technica. 16 November 2017. Retrieved 2018-04-08.
  14. ^ Bortzmeyer, Stéphane (2017-11-21). "Quad9, a Public DNS Resolver - with Security". labs.ripe.net. RIPE Labs. Retrieved 2021-05-27. Last week, the new DNS resolver Quad9 has been announced. It is a public DNS resolver with the additional benefit that it is accessible in a secure way. There are other public DNS resolvers, but the link to them is not secure. This allows hijackings as well as third-party monitoring. The new Quad9 service on the other hand is operated by the not-for-profit Packet Clearing House (PCH), which manages large parts of the DNS infrastructure, and it allows access to the DNS over TLS. This makes it very difficult for third parties to listen in. And it makes it possible to authenticate the resolver.
  15. ^ Woodcock, Bill (2021-02-09). "Statement by Bill Woodcock, chairman of Quad9's board". Reddit. Retrieved 2021-05-27.
  16. ^ Dickinson, Sara (2019-11-28). "DNS Privacy Public Resolvers". DNS Privacy Project. Retrieved 2021-05-27.
  17. ^ "Quad9 Data and Privacy Policy". Quad9. Retrieved 2021-05-27. The Reply To Address is purged from RAM as soon as we have transmitted the reply to the user's Reply To Address. The Reply To Address (or any representation of, or proxy for, it) is not copied to permanent storage, nor is it transmitted across the network to any destination other than the user. It leaves the machine on which we received it only in the form of a reply to the user – to no other destination, in no other form, for no other purpose.
  18. ^ "A Deeper Dive Into Public DNS Resolver Quad9". Internet Society. Retrieved 2018-04-08.
  19. ^ Brennan, Jim (2017-11-16). "New Quad9 DNS Service Makes the Internet Safer and More Private". securityintelligence.com. Security Intelligence. Retrieved 2021-05-27. Quad9 goes far beyond standard DNS name resolution. Unlike many other DNS services, Quad9 does not store, correlate or otherwise employ any personally identifiable information (PII).
  20. ^ "Internet Exchange Points Quad9 is Present In". pch.net. Packet Clearing House. 2021-05-27. Retrieved 2021-05-27.
  21. ^ Huston, Geoff (11 February 2022). "Opinion: DNS4EU". APNIC. Sony Music Germany bought a suit against the DNS open resolver provider Quad9 in a German court. The court ruled that Quad9 must block the resolution of a domain name of a website in Ukraine that itself does not hold copyright-infringing material, but instead contains pointers to another website that is reported to hold alleged copyright infringements. Quad9’s interpretation of this ruling is that queries received from IP addresses that can be geolocated to Germany must generate a SERVFAIL response from Quad9’s recursive resolvers.
  22. ^ Van der Sar, Ernesto (2021-06-21). "Sony Wins Pirate Site Blocking Order Against DNS-Resolver Quad9". TorrentFreak. Retrieved 21 June 2021. Sony Music has obtained an injunction that requires the freely available DNS-resolver Quad9 to block a popular pirate site. The order, issued by the District Court in Hamburg, Germany, is the first of its kind. The Quad9 foundation has already announced that it will protest the judgment, which could have far-reaching consequences. The Hamburg court found that the DNS service is not eligible for the liability protections that other third-party intermediaries such as ISPs and domain registrars typically enjoy. And if Quad9 fails to comply with the injunction, it will have to pay a fine of 250,000 euros per ‘infringing’ DNS query plus potentially two years in prison.
  23. ^ Ermert, Monika (2021-06-19). "Copyright infringement: Sony obtains injunction against DNS resolvers". Heise Online. Retrieved 21 June 2021. Sony wants to ban the DNS resolution of domains by injunction. The district court in Hamburg ruled that Quad9 was not covered by the usual liability privileges for pure intermediaries like an Internet service provider or even domain registrars.
  24. ^ Grüner, Sebastian (2021-06-21). "Sony will DNS-Sperre bei Quad9 durchsetzen". Golem. Retrieved 21 June 2021. The DNS provider Quad9, which is now officially located in Switzerland, is held liable as a "Stoerer" (interferer) in this case, because the DNS resolution of the service enables copyright infringement. The "Stoererhaftung" (Breach of Duty of Care), its effects on copyright law, and any associated warnings against private individuals or even companies have been a point of contention in the law-making process of politics and the judiciary for decades. What is surprising about the current case is that Internet providers and registrars are actually exempt from "Stoererhaftung" (Breach of Duty of Care) under the so-called provider privilege. However, the Hamburg Regional Court apparently sees things differently.
  25. ^ "Sony zieht gegen Schweizer NPO Quad9 vor Gericht". IT-MARKT. 2021-06-21. Retrieved 21 June 2021. Sony has obtained an injunction from the district court of Hamburg against Quad9, a non-profit organization (NPO) recently based in Switzerland. … Not Quad9's size, but the fact that Quad9 is the only major DNS resolver no longer based in the US prompted Sony to obtain the injunction, Woodcock says to the news portal. (translation from German)
  26. ^ King, Ashley (2021-06-24). "Sony Music Wins Injunction Requiring DNS Resolver to Block Pirate Site". Digital Music News. Retrieved 25 June 2021. Sony Music has won an injunction requiring a DNS resolver to block a popular piracy site. The ruling is the first of its kind and may signal a new direction in tackling music piracy. The order was issued by the District Court in Hamburg, Germany. The Hamburg Court ruling finds that DNS resolvers like Quad9 are not eligible for liability protections like ISPs and domain registrars. If Quad9 fails to block the infringing site, it faces a fine of up to $298,356.00 (€250,000) per infringing DNS query it processes and a potential prison stint of up to two years.
  27. ^ "Quad9 and Sony Music: German Injunction Status". Quad9. 2021-06-24. Retrieved 25 June 2021. Quad9 was notified last Friday that Sony Music had obtained an injunction against Quad9 in the lower court of Hamburg, Germany, seeking to block DNS resolution of domains used to host music content files on the grounds that such resolution contributes to infringement upon Sony’s copyrights. Quad9 has no relationship with any of the parties to the alleged infringement. Our systems resolve domain names, conveying public information on the public Internet, as any other recursive resolver would do, and there is no allegation that the domain names themselves, or any information that Quad9 has handled, infringe upon Sony’s copyrights. We have retained counsel, and we are in the process of filing an objection to the injunction.
  28. ^ "Beschluss In der Sache Sony Music Entertainment Germany GmbH gegen Quad9 Stiftung" (PDF). Landgericht Hamburg. 2021-05-21. Archived from the original (PDF) on 2021-06-24. Retrieved 25 June 2021.
  29. ^ "Resolution in the case Sony Music Entertainment Germany GmbH versus Quad9 Foundation" (PDF). Hamburg Lower Court. 2021-05-21. Archived from the original (PDF) on 2021-06-24. Retrieved 25 June 2021. By way of interim injunction - for reasons of urgency without oral proceedings - the defendant is ordered to avoid a Tine to be determined by the court for each case of culpable infringement and, in the event that this cannot be recovered, to serve a term of imprisonment of up to six months (fine in individual cases not exceeding 250,000.00, imprisonment for a total of not more than two years) prohibited to enable third parties in the territory of the Federal Republic of Germany the music album "Evanescence - The Bitter Truth" to be made publicly available.
  30. ^ Ermert, Monika (2021-06-27). "Sony vs. Quad9: a wave of donations for the DNS resolver". Heise Online. Retrieved 27 June 2021.
  31. ^ Stegeman, Koen (2021-09-02). "Quad9 Files Appeal Against Copyright Lawsuit from Sony Music Germany". Hosting Journalist. Retrieved 3 September 2021.
  32. ^ Carnesi, Ken (2021-07-27). "DNSFilter CEO Responds to Quad9 Injunction: "DNS resolvers should not police the Internet for copyright violations"". DNSfilter. Retrieved 3 September 2021.
  33. ^ Dickinson, Sara (2019-11-28). "DNS Privacy Public Resolvers: DNS-over-TLS (DoT)". DNS Privacy Project. Retrieved 2021-05-27.
  34. ^ Dickinson, Sara (2019-11-28). "DNS Privacy Public Resolvers: DNS-over-HTTPS (DoH)". DNS Privacy Project. Retrieved 2021-05-27.
  35. ^ Kumar, Arvind (2021-05-27). "DNScrypt Resolvers". github.com. EnKrypt. Retrieved 2021-05-27. quad9-dnscrypt-ip4-filter-pri Quad9 (anycast) dnssec/no-log/filter 9.9.9.9 / 149.112.112.9
  36. ^ a b c d "Service Addresses & Features". Quad9. Retrieved 2021-10-05.

외부 링크