Why Unfiltered DNS Matters
Filtering policy should be explicit
A recursive resolver can alter an answer, return NXDOMAIN, redirect a name or refuse a query according to a policy list. Some users deliberately choose malware, family or advertising filters; others need the authoritative DNS result without a voluntary category policy.
The trade-off
Resolver filtering can block known malicious domains, but it also creates false positives, opaque decisions and a single policy for every user behind the resolver. Neither approach is universally correct. The important part is that the behavior is explicit and chosen.
le_dns policy
le_dns does not apply voluntary advertising, parental-control, “safe search” or commercial category blocklists. It does not redirect blocked or failed names to advertising.
Exceptions remain:
- valid legal orders that apply to the operator;
- DNSSEC validation failures;
- malformed or abusive traffic; and
- ordinary upstream or network failures.
For those reasons, le_dns does not promise a “correct answer for every domain.” It promises not to add a voluntary content-filtering business model on top of DNS.
Legal caution
Which blocking duties apply in France depends on the legal instrument and operator. The service maintains a mechanism for legally required response policy, but this page does not claim an exemption from French law. Any detailed statement about ISP, resolver or hosting-provider obligations requires qualified French counsel.