Mullvad's Encrypted DNS Service Concludes

Mullvad, the privacy-focused VPN provider, has announced the discontinuation of its public encrypted DNS servers. The service, which offered DNS-over-TLS (DoT) and DNS-over-HTTPS (DoH) to enhance user privacy by encrypting DNS queries, will cease operations. This decision marks a significant shift for the company, which has historically championed user privacy through various technical means. The company stated that while their service was appreciated, maintaining it required substantial resources, and they believe their efforts can be better utilized elsewhere to further privacy goals. Mullvad's encrypted DNS service was a valuable tool for users seeking to prevent their Internet Service Providers (ISPs) and network operators from logging their browsing activity. By encrypting DNS requests, the service aimed to provide a layer of anonymity, ensuring that the queries themselves were not easily intercepted or monitored. This aligns with Mullvad's broader mission to protect user privacy online, offering a VPN service that emphasizes minimal logging and strong encryption.

Strategic Pivot to Sponsoring Quad9

Instead of continuing to operate its own public DNS infrastructure, Mullvad will now focus its resources on sponsoring Quad9, another prominent encrypted DNS provider. This strategic move allows Mullvad to leverage an existing, robust, and widely adopted service, while still contributing to the broader ecosystem of privacy-preserving internet infrastructure. Quad9 is known for its commitment to privacy, blocking malicious domains, and operating globally with a strong emphasis on data protection. Mullvad's sponsorship will provide Quad9 with financial and potentially technical support, helping to sustain and enhance its operations. The decision to back Quad9 is rooted in the recognition that operating and maintaining a global DNS infrastructure is a complex and resource-intensive undertaking. By consolidating their efforts and resources with Quad9, Mullvad aims to have a more significant impact on the privacy landscape. Quad9 already serves millions of users worldwide and has established a strong reputation for its security features and privacy-friendly policies. Mullvad's contribution will help Quad9 continue its mission to provide a secure and private DNS resolution service for everyone.
Mullvad VPN interface showing DNS settings, illustrating the service being phased out.

Why This Shift Matters

For users who relied on Mullvad's specific encrypted DNS servers, this change necessitates a migration to alternative services. The good news is that Quad9 is a direct replacement and, in many respects, an upgrade due to its scale and additional security features, such as blocking known malicious domains. Mullvad has provided clear guidance on its website for users who wish to switch their DNS settings to Quad9, ensuring a smooth transition. The company has also assured its users that this change does not impact the core VPN service, which remains unaffected. The broader implication of this move is the consolidation within the privacy-enhancing technology space. As the internet landscape becomes more complex, with increasing concerns about surveillance and data collection, organizations like Mullvad and Quad9 play a crucial role. By collaborating and pooling resources, these entities can more effectively counter these threats. This partnership signals a pragmatic approach to achieving privacy goals: focusing on supporting established, high-impact projects rather than duplicating efforts. It’s a recognition that community-driven, open-source infrastructure for privacy is vital, and supporting it directly is often more effective than building and maintaining parallel systems.

The Future of Encrypted DNS

This development highlights the ongoing evolution of internet privacy tools. Encrypted DNS protocols like DoT and DoH are becoming increasingly important as users seek to regain control over their online data. The growth of services like Quad9, and the support they receive from organizations like Mullvad, indicates a growing demand for these technologies. While Mullvad's public servers are shutting down, the underlying technologies and the mission to provide private DNS resolution are being strengthened through this sponsorship. The success of such initiatives depends on continued community support and adoption, ensuring that these privacy tools remain accessible and effective against evolving threats. Mullvad's decision is not an abandonment of privacy principles but rather a strategic reallocation of resources to maximize impact. By partnering with Quad9, Mullvad is betting on a collaborative future for internet privacy, where established infrastructure providers are strengthened to serve a wider audience. This move is likely to be observed by other privacy-focused organizations as a potential model for how to best support critical internet infrastructure without the immense overhead of operating it independently. The question that remains is how this strengthened Quad9 will further innovate and adapt to new privacy challenges.