/encrypted-dns

Configuration profiles for DNS HTTPS and DNS over TLS for iOS 14 and MacOS Big Sur

The UnlicenseUnlicense

encrypted-dns-configs

Configuration profiles for DNS over HTTPS and DNS over TLS.

Check out the article for more info: paulmillr.com/posts/encrypted-dns/

Providers

Name Country Censorship Notes Install button
AdGuard ๐Ÿ‡ท๐Ÿ‡บ ๐Ÿ”ด Operated by AdGuard in Russia HTTPS
AdGuard Family ๐Ÿ‡ท๐Ÿ‡บ ๐Ÿ”ด Filters malware & adult content HTTPS
AdGuard No Filter ๐Ÿ‡ท๐Ÿ‡บ ๐ŸŸข Filters Unfiltered HTTPS, TLS
Alekberg ๐Ÿ‡ณ๐Ÿ‡ฑ ๐ŸŸข Independent hoster in Netherlands HTTPS
BlahDNS CDN Filtered ๐Ÿ‡บ๐Ÿ‡ธ ๐Ÿ”ด Independent HTTPS
BlahDNS CDN Unfiltered ๐Ÿ‡บ๐Ÿ‡ธ ๐ŸŸข Independent HTTPS
BlahDNS Finland Adsblock ๐Ÿ‡ซ๐Ÿ‡ฎ ๐Ÿ”ด Independent HTTPS
BlahDNS Germany Adsblock ๐Ÿ‡ฉ๐Ÿ‡ช ๐Ÿ”ด Independent HTTPS
BlahDNS Japan Adsblock ๐Ÿ‡ฏ๐Ÿ‡ต ๐Ÿ”ด Independent HTTPS
BlahDNS Singapore Adsblock ๐Ÿ‡ธ๐Ÿ‡ฌ ๐Ÿ”ด Independent HTTPS
BlahDNS Swiss Adsblock ๐Ÿ‡จ๐Ÿ‡ฆ ๐Ÿ”ด Independent TLS
Canadian Shield Private ๐Ÿ‡จ๐Ÿ‡ฆ ๐ŸŸข Operated by the Canadian Internet Registration Authority (CIRA) HTTPS, TLS
Canadian Shield Protected ๐Ÿ‡จ๐Ÿ‡ฆ ๐Ÿ”ด Filters malware HTTPS, TLS
Canadian Shield Family ๐Ÿ‡จ๐Ÿ‡ฆ ๐Ÿ”ด Filters malware & adult content HTTPS, TLS
Cloudflare ๐Ÿ‡บ๐Ÿ‡ธ ๐ŸŸข Operated by Cloudflare 1.1.1.1 HTTPS, TLS
Cloudflare Malware ๐Ÿ‡บ๐Ÿ‡ธ ๐Ÿ”ด Filters malware HTTPS
Cloudflare Family ๐Ÿ‡บ๐Ÿ‡ธ ๐Ÿ”ด Filters malware & adult content HTTPS
DNSPod ๐Ÿ‡จ๐Ÿ‡ณ ๐Ÿ”ด Operated in mainland China HTTPS, TLS
Google ๐Ÿ‡บ๐Ÿ‡ธ ๐ŸŸข Operated by Google HTTPS, TLS
OpenDNS ๐Ÿ‡บ๐Ÿ‡ธ ๐ŸŸข Operated by OpenDNS HTTPS
OpenDNS Family ๐Ÿ‡บ๐Ÿ‡ธ ๐Ÿ”ด Filters malware & adult content HTTPS
Quad9 ๐Ÿ‡จ๐Ÿ‡ญ ๐Ÿ”ด Operated by CleanerDNS, Inc. Filters malware HTTPS, TLS
Quad9 With ECS ๐Ÿ‡จ๐Ÿ‡ญ ๐Ÿ”ด Operated by CleanerDNS, Inc. Filters malware HTTPS, TLS
Tiar.app ๐Ÿ‡ธ๐Ÿ‡ฌ ๐Ÿ‡บ๐Ÿ‡ธ ๐Ÿ”ด "Privacy-first DNS provider" from SG, hosted on Digital Ocean. Filters malware HTTPS, TLS

Installation

To make settings work across all apps in iOS 14 & MacOS Big Sur, youโ€™ll need to install configuration profile. This profile would tell operating system to use DOH / DOT. Note: itโ€™s not enough to simply set server IPs in System Preferences โ€” you need to install a profile.

To install, simply open the file in GitHib, and then click/tap on install button. The profile should download. On macOS, double click on the downloaded file to open it in settings, and approve instalation. On iOS, go to System Settings => General => Profile, select downloaded profile and tap the โ€œInstallโ€ button.

Signed Profiles

In the signed folder, we have signed versions of the profiles in this repository. These profiles have been signed by @Candygoblen123 so that when you install the profiles, they will have a verified check box on the installation screen. It also ensures that these profiles have not been tampered with. However, since they were signed by a third party, they may lag behind their unsigned counterparts a little.

To verify resolver IPs and hostnames, compare mobileconfig files to their documentation URLs. Internal workings of the profiles are described on developer.apple.com. In order to verify signed mobileconfigs, you will need to download them to your computer and open them in a text editor, because signing profiles makes GitHub think that they are binary files.

Known issues

We can't fix the issues, only Apple can: