Quad9 provides DNSSEC validation on our primary resolvers.
in addition Quad9 validate DNSSEC on our EDNS enabled service.
Quad9 does not and never will share any of its data with marketers, nor will it use this data for demographic analysis.
This means that for domains that implement DNSSEC security, the Quad9 system will cryptographically ensure that the response provided matches the intended response of the domain operator. In the event of a cryptographic failure, our system will not return an answer at all. This ensures protection against domain spoofing or other attacks that attempt to provide false data. Learn more about DNSSEC here: https://www.icann.org/resources/pages/dnssec-qaa-2014-01-29-en
