0

Nextdns AI vs Quad9

Uptil before AI in Nextdns , a comparison between Nextdns and Quad9 was like a close call. Except for the fact that Nextdns also blocks ads.

But since now Nextdns has AI threat Intelligence, does it definitively beat Quad9 in terms of security?

5 replies

null
    • Christos_S
    • 2 yrs ago
    • Reported - view
      • Sohan_Ray
      • 2 yrs ago
      • Reported - view

      Christos S well thats what I found over different posts in the internet. In terms of malicious sites blocking security.

    • Hey
    • 2 yrs ago
    • Reported - view

    I personally don't think security should be viewed that way. AI Driven Threat Detection does help, I found around 50+ sites that were blocked by it, around a dozen or so that no filters I had blocked so it's an additional layer of defense and it works but raw detection figures isn't everything.

    Tere is no universal NextDNS test, the tests done through what filters the user decided to use. NextDNS gives that flexibility. It's your choice to be as secure or as free as you'd like.

    There are filters that give you more protection from Malwaretisements and general malicious websites but some of them with the highest detection also have false positives, a great example would be 1HostPro, I haven't personally seen any other filter that blacklists websites as fast as they do but certain things that shouldn't be blocked are blocked, resulting in some sites not functioning properly.

    From there, you can even have a near perfect DNS protection if you simply block everything and only whitelist the sites you use, even then the site that's trusted can be compromised.

    What I'm trying to say is that, NextDNS is so flexible that the results change from person to person, you can increase or decrease the protection level by turning On/Off options like Newly Registered Domains, AI and general filters. It's up to you to decide. 

    For what I mean by saying that security shouldn't be viewed by the basis of raw blockage / performance is.

    Security should be unintrusive, if you have problems that security in my opinion is unnecessary and creates headaches. I don't personally use some filters that I know get the malicious sites faster, knowing that they tend to also block sites that brake functionality.

    So instead of worrying about how much it can block, this is my opinion but look at the usability of the DNS, how speedy is it, what does it give you and how does it work. I'm not saying that Quad9 is intrusive or has false positives but what I'm trying to say is, Quad9 is setup for you, it only blocks Malicious sites and doesn't do anything else and it doesn't use third party filters so when you do a test on it, it's universal, it applies to everyone who uses it.

    On NextDNS that's not the case, so set it up to your liking, based on what you prioritize and make it work your way.

    As for a comparison, you can take the precautions aka using a VM that's setup properly a VPN to hide your IP for security reasons and comparing how you use NextDNS to how Quad9 does, then you end up with a result that you can compare. But even then it's not how NextDNS does but how your configuration deals with it. 

    It's long and complicated, but I tried to explain why you can't exactly compare the two and that honestly raw blocking performance matters but it's not to an extent that it's make or brake.

    • David_Rosberg
    • 2 yrs ago
    • Reported - view

    Im having a hard time to see how 1HostPro works. Could someone please give some details? Is it good for phishing, malware, cryptohijack etc.. Would be awsome if its a good one for security :)

      • Hey
      • 2 yrs ago
      • Reported - view

      David Rosberg It works the same way as other filters, it's just more active and aggressive. So the time they get new domains blacklisted is quicker than things like OISD and Adguard. So if you want pure security it works but there are false positives.

Content aside

  • 2 yrs agoLast active
  • 5Replies
  • 1103Views
  • 4 Following