{
  "slug": "google-public-dns",
  "category": "dns-resolvers",
  "name": "Google Public DNS",
  "description": "Free public DNS resolver run by Google at 8.8.8.8 and 8.8.4.4 that validates DNSSEC and supports DNS over HTTPS and DNS over TLS.",
  "website": "https://developers.google.com/speed/public-dns",
  "license": null,
  "platforms": [],
  "jurisdiction": {
    "code": "US",
    "name": "United States",
    "eyes": "Five Eyes",
    "eu": false,
    "gdpr": false,
    "cloud_act": "provider"
  },
  "pick": false,
  "pick_reason": null,
  "disclosure": null,
  "grade": "D",
  "score": 45,
  "coverage": 100,
  "summary": "Google Public DNS scores 45 out of 100 (grade D) on the DNS resolvers criteria. It meets 5 of 10 criteria: transparency report, tells users about requests, security headers, Encrypted DNS and DNSSEC validation. It partly meets no query logs. It does not meet open source, no trackers or telemetry, no ads or data sales and independent audit. It is based in the United States: Five Eyes member; subject to the US CLOUD Act. Automated tests: Mozilla HTTP Observatory grade A+.",
  "url": "https://privacyratings.com/dns-resolvers/google-public-dns/",
  "markdown": "https://privacyratings.com/dns-resolvers/google-public-dns/index.md",
  "answers": {
    "open_source": {
      "title": "Open source",
      "weight": 3,
      "answer": "no",
      "evidence": null,
      "note": "Closed source."
    },
    "no_trackers": {
      "title": "No trackers or telemetry",
      "weight": 3,
      "answer": "no",
      "evidence": "https://developers.google.com/speed/public-dns",
      "note": "The documentation website loads Google Analytics."
    },
    "no_ads": {
      "title": "No ads or data sales",
      "weight": 2,
      "answer": "no",
      "evidence": "https://developers.google.com/speed/public-dns/privacy",
      "note": "Free service funded by Google's advertising business. The privacy page states DNS logs are not combined with other Google data for ads."
    },
    "independent_audit": {
      "title": "Independent audit",
      "weight": 2,
      "answer": "no",
      "evidence": null,
      "note": "No independent audit is published."
    },
    "transparency_report": {
      "title": "Transparency report",
      "weight": 2,
      "answer": "yes",
      "evidence": "https://transparencyreport.google.com/user-data/overview",
      "note": "Google publishes counts of government requests for user data twice a year."
    },
    "user_notice": {
      "title": "Tells users about requests",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://policies.google.com/terms/information-requests",
      "note": "Google states it notifies users before disclosing their information unless prohibited by law or in emergencies."
    },
    "tls": {
      "title": "TLS configuration",
      "weight": 2,
      "answer": "pending",
      "evidence": null,
      "note": "Could not test: No endpoint could be graded"
    },
    "security_headers": {
      "title": "Security headers",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://developer.mozilla.org/en-US/observatory/analyze?host=dns.google",
      "note": "Grade A+ (100/100+)"
    },
    "web_standards": {
      "title": "Modern web standards",
      "weight": 1,
      "answer": "pending",
      "evidence": null,
      "note": "Not tested yet."
    },
    "encrypted_dns": {
      "title": "Encrypted DNS",
      "weight": 3,
      "answer": "yes",
      "evidence": "https://developers.google.com/speed/public-dns/docs/secure-transports",
      "note": "DNS over HTTPS and DNS over TLS are both supported."
    },
    "no_query_logs": {
      "title": "No query logs",
      "weight": 3,
      "answer": "partial",
      "evidence": "https://developers.google.com/speed/public-dns/privacy",
      "note": "Temporary logs with full IP addresses are kept for 24 to 48 hours. Sampled permanent logs keep only city or region. Not audited."
    },
    "dnssec_validation": {
      "title": "DNSSEC validation",
      "weight": 1,
      "answer": "yes",
      "evidence": "https://developers.google.com/speed/public-dns/faq",
      "note": "Google Public DNS is a validating resolver for all DNSSEC-signed zones."
    }
  },
  "tests": {
    "ssllabs": null,
    "observatory": "A+",
    "internetnl_web": null,
    "internetnl_mail": null,
    "trackers": [
      {
        "name": "Google Analytics",
        "host": "www.google-analytics.com",
        "effect": "no"
      },
      {
        "name": "Google Fonts",
        "host": "fonts.googleapis.com",
        "effect": "none"
      },
      {
        "name": "Google Tag Manager",
        "host": "inline code",
        "effect": "no"
      }
    ],
    "tested_at": "2026-10-01T06:38:52.571Z"
  },
  "last_modified": "2026-10-01T06:56:31Z"
}