mirror of
https://github.com/paulmillr/encrypted-dns.git
synced 2026-05-15 22:28:02 +02:00
Refactor repository, add more scripts, merge similar profiles
This commit is contained in:
Paul Miller
+1
-5
@@ -1,5 +1 @@
|
||||
certs/cert.pem
|
||||
certs/chain.pem
|
||||
certs/fullchain.pem
|
||||
certs/privkey.pem
|
||||
certs/README
|
||||
/src/certificates
|
||||
|
||||
+184
-172
@@ -19,45 +19,45 @@
|
||||
|
||||
“`审查=是`”表示描述文件不会发送某些主机“`主机名=IP`”关系的真实信息。
|
||||
|
||||
| 名称 | 区域 | 审查 | 备注 | 安装 | 安装 (未签名) |
|
||||
| ------------------------------------------------------------------------------------ | ----- | ---- | ------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------- |
|
||||
| [360 安全 DNS][360-dns] | 🇨🇳 | 是 | 由 360 数字安全集团运营 | [HTTPS][360-dns-profile-https-signed] | [HTTPS][360-dns-profile-https] |
|
||||
| [AdGuard DNS 默认][adguard-dns-default] | 🇷🇺 | 是 | 由 AdGuard 运营，拦截广告、跟踪器和钓鱼网站 | [HTTPS][adguard-dns-default-profile-https-signed], [TLS][adguard-dns-default-profile-tls-signed] | [HTTPS][adguard-dns-default-profile-https], [TLS][adguard-dns-default-profile-tls] |
|
||||
| [AdGuard DNS 家庭保护][adguard-dns-family] | 🇷🇺 | 是 | 由 AdGuard 运营，除默认规则外，额外拦截恶意软件和成人内容 | [HTTPS][adguard-dns-family-profile-https-signed], [TLS][adguard-dns-family-profile-tls-signed] | [HTTPS][adguard-dns-family-profile-https], [TLS][adguard-dns-family-profile-tls] |
|
||||
| [AdGuard DNS 无过滤][adguard-dns-unfiltered] | 🇷🇺 | 否 | 由 AdGuard 运营，无过滤 | [HTTPS][adguard-dns-unfiltered-profile-https-signed], [TLS][adguard-dns-unfiltered-profile-tls-signed] | [HTTPS][adguard-dns-unfiltered-profile-https], [TLS][adguard-dns-unfiltered-profile-tls] |
|
||||
| [Alekberg 加密 DNS][alekberg-dns] | 🇳🇱 | 否 | 由个人提供 | [HTTPS][alekberg-dns-profile-https-signed] | [HTTPS][alekberg-dns-profile-https] |
|
||||
| [阿里云公共 DNS][aliyun-dns] | 🇨🇳 | 否 | 由阿里云计算运营 | [HTTPS][aliyun-dns-profile-https-signed], [TLS][aliyun-dns-profile-tls-signed] | [HTTPS][aliyun-dns-profile-https], [TLS][aliyun-dns-profile-tls] |
|
||||
| [BlahDNS CDN 过滤][blahdns] | 🇺🇸 | 是 | 由个人提供，拦截广告、跟踪器和恶意软件 | [HTTPS][blahdns-cdn-filtered-profile-https-signed] | [HTTPS][blahdns-cdn-filtered-profile-https] |
|
||||
| [BlahDNS CDN 无过滤][blahdns] | 🇺🇸 | 否 | 由个人提供，无过滤 | [HTTPS][blahdns-cdn-unfiltered-profile-https-signed] | [HTTPS][blahdns-cdn-unfiltered-profile-https] |
|
||||
| [BlahDNS 德国][blahdns] | 🇩🇪 | 是 | 由个人提供，拦截广告、跟踪器和恶意软件 | [HTTPS][blahdns-germany-profile-https-signed] | [HTTPS][blahdns-germany-profile-https] |
|
||||
| [BlahDNS 新加坡][blahdns] | 🇸🇬 | 是 | 由个人提供，拦截广告、跟踪器和恶意软件 | [HTTPS][blahdns-singapore-profile-https-signed] | [HTTPS][blahdns-singapore-profile-https] |
|
||||
| [Canadian Shield 私人][canadian-shield] | 🇨🇦 | 否 | 由加拿大互联网注册管理局 (CIRA) 运营 | [HTTPS][canadian-shield-private-profile-https-signed], [TLS][canadian-shield-private-profile-tls-signed] | [HTTPS][canadian-shield-private-profile-https], [TLS][canadian-shield-private-profile-tls] |
|
||||
| [Canadian Shield 保护][canadian-shield] | 🇨🇦 | 是 | 由加拿大互联网注册管理局 (CIRA) 运营，拦截恶意软件和钓鱼网站 | [HTTPS][canadian-shield-protected-profile-https-signed], [TLS][canadian-shield-protected-profile-tls-signed] | [HTTPS][canadian-shield-protected-profile-https], [TLS][canadian-shield-protected-profile-tls] |
|
||||
| [Canadian Shield 家庭][canadian-shield] | 🇨🇦 | 是 | 由加拿大互联网注册管理局 (CIRA) 运营，拦截恶意软件、钓鱼和成人内容 | [HTTPS][canadian-shield-family-profile-https-signed], [TLS][canadian-shield-family-profile-tls-signed] | [HTTPS][canadian-shield-family-profile-https], [TLS][canadian-shield-family-profile-tls] |
|
||||
| [Cleanbrowsing 家庭过滤器][cleanbrowsing] | 🇺🇸 | 是 | 过滤恶意软件、成人内容和混合内容 | [HTTPS][cleanbrowsing-family-https-signed], [TLS][cleanbrowsing-family-tls-signed] | [HTTPS][cleanbrowsing-family-https], [TLS][cleanbrowsing-family-tls] |
|
||||
| [Cleanbrowsing 成人过滤器][cleanbrowsing] | 🇺🇸 | 是 | 过滤恶意软件和成人内容 | [HTTPS][cleanbrowsing-adult-https-signed], [TLS][cleanbrowsing-adult-tls-signed] | [HTTPS][cleanbrowsing-adult-https], [TLS][cleanbrowsing-adult-tls] |
|
||||
| [Cleanbrowsing 安全过滤器][cleanbrowsing] | 🇺🇸 | 是 | 过滤恶意软件 | [HTTPS][cleanbrowsing-security-https-signed], [TLS][cleanbrowsing-security-tls-signed] | [HTTPS][cleanbrowsing-security-https], [TLS][cleanbrowsing-security-tls] |
|
||||
| [Cloudflare 1.1.1.1][cloudflare-dns] | 🇺🇸 | 否 | 由 Cloudflare 公司运营 | [HTTPS][cloudflare-dns-profile-https-signed], [TLS][cloudflare-dns-profile-tls-signed] | [HTTPS][cloudflare-dns-profile-https], [TLS][cloudflare-dns-profile-tls] |
|
||||
| [Cloudflare 1.1.1.1 安全][cloudflare-dns-family] | 🇺🇸 | 是 | 由 Cloudflare 公司运营，拦截恶意软件和钓鱼网站 | [HTTPS][cloudflare-dns-security-profile-https-signed] | [HTTPS][cloudflare-dns-security-profile-https] |
|
||||
| [Cloudflare 1.1.1.1 家庭][cloudflare-dns-family] | 🇺🇸 | 是 | 由 Cloudflare 公司运营，拦截恶意软件、钓鱼和成人内容 | [HTTPS][cloudflare-dns-family-profile-https-signed] | [HTTPS][cloudflare-dns-family-profile-https] |
|
||||
| [DNS4EU][dns4eu] | 🇨🇿 | 否 | Operated by a consortium lead by Whalebone. | [HTTPS][dns4eu-profile-https-signed], [TLS][dns4eu-profile-tls-signed] | [HTTPS][dns4eu-profile-https], [TLS][dns4eu-profile-tls] |
|
||||
| [DNS4EU Protective][dns4eu-malware] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware. | [HTTPS][dns4eu-profile-malware-https-signed], [TLS][dns4eu-profile-malware-tls-signed] | [HTTPS][dns4eu-profile-malware-https], [TLS][dns4eu-profile-malware-tls] |
|
||||
| [DNS4EU Protective ad-blocking][dns4eu-protective-ads] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware and Ads | [HTTPS][dns4eu-profile-protective-ads-https-signed], [TLS][dns4eu-profile-protective-ads-tls-signed] | [HTTPS][dns4eu-profile-protective-ads-https], [TLS][dns4eu-profile-protective-ads-tls] |
|
||||
| [DNS4EU Protective with child protection][dns4eu-protective-child] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks malware and explicit content. | [HTTPS][dns4eu-profile-protective-child-https-signed], [TLS][dns4eu-profile-protective-child-tls-signed] | [HTTPS][dns4eu-profile-protective-child-https], [TLS][dns4eu-profile-protective-child-tls] |
|
||||
| [DNS4EU Protective with child protection & ad-blocking][dns4eu-protective-child-ads] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware, Ads and explicit content | [HTTPS][dns4eu-profile-protective-child-ads-https-signed], [TLS][dns4eu-profile-protective-child-ads-tls-signed] | [HTTPS][dns4eu-profile-protective-child-ads-https], [TLS][dns4eu-profile-protective-child-ads-tls] |
|
||||
| [DNSPod 公共 DNS][dnspod-dns] | 🇨🇳 | 否 | 由腾讯公司 DNSPod 运营 | [HTTPS][dnspod-dns-profile-https-signed], [TLS][dnspod-dns-profile-tls-signed] | [HTTPS][dnspod-dns-profile-https], [TLS][dnspod-dns-profile-tls] |
|
||||
| [FDN][fdn-dns] | 🇫🇷 | 否 | 由法国数据网络运营 | [HTTPS][fdn-https-signed], [TLS][fdn-tls-signed] | [HTTPS][fdn-https], [TLS][fdn-tls] |
|
||||
| [FFMUC-DNS][ffmucdns] | 🇩🇪 | 否 | FFMUC free DNS servers provided by Freifunk München. | [HTTPS][ffmuc-profile-https-signed], [TLS][ffmuc-profile-tls-signed] | [HTTPS][ffmuc-profile-https], [TLS][ffmuc-profile-tls] |
|
||||
| [Google 公共 DNS][google-dns] | 🇺🇸 | 否 | 由谷歌公司运营 | [HTTPS][google-dns-profile-https-signed], [TLS][google-dns-profile-tls-signed] | [HTTPS][google-dns-profile-https], [TLS][google-dns-profile-tls] |
|
||||
| [keweonDNS][keweondns] | 🇩🇪 | 否 | 由 Aviontex 运营，拦截广告和跟踪器 | [HTTPS][keweondns-profile-https-signed], [TLS][keweondns-profile-tls-signed] | [HTTPS][keweondns-profile-https], [TLS][keweondns-profile-tls] |
|
||||
| [Mullvad DNS][mullvad-dns] | 🇸🇪 | 是 | 由 Mullvad VPN AB 运营 | [HTTPS][mullvad-dns-profile-https-signed] | [HTTPS][mullvad-dns-profile-https] |
|
||||
| [Mullvad DNS 广告拦截][mullvad-dns] | 🇸🇪 | 是 | 由 Mullvad VPN AB 运营，拦截广告和跟踪器 | [HTTPS][mullvad-dns-adblock-profile-https-signed] | [HTTPS][mullvad-dns-adblock-profile-https] |
|
||||
| [OpenDNS 标准版][opendns] | 🇺🇸 | 否 | 由思科 OpenDNS 运营 | [HTTPS][opendns-standard-profile-https-signed] | [HTTPS][opendns-standard-profile-https] |
|
||||
| [OpenDNS 家庭盾][opendns] | 🇺🇸 | 是 | 由思科 OpenDNS 运营，拦截恶意软件和成人内容 | [HTTPS][opendns-familyshield-profile-https-signed] | [HTTPS][opendns-familyshield-profile-https] |
|
||||
| [Quad9][quad9] | 🇨🇭 | 是 | 由 Quad9 基金会运营，拦截恶意软件 | [HTTPS][quad9-profile-https-signed], [TLS][quad9-profile-tls-signed] | [HTTPS][quad9-profile-https], [TLS][quad9-profile-tls] |
|
||||
| [Quad9 带 ECS][quad9] | 🇨🇭 | 是 | 由 Quad9 基金会运营，支持 ECS，拦截恶意软件 | [HTTPS][quad9-ecs-profile-https-signed], [TLS][quad9-ecs-profile-tls-signed] | [HTTPS][quad9-ecs-profile-https], [TLS][quad9-ecs-profile-tls] |
|
||||
| [Quad9 无过滤][quad9] | 🇨🇭 | 否 | 由 Quad9 基金会运营 | [HTTPS][quad9-profile-unfiltered-https-signed], [TLS][quad9-profile-unfiltered-tls-signed] | [HTTPS][quad9-profile-unfiltered-https], [TLS][quad9-profile-unfiltered-tls] |
|
||||
| [Tiarap][tiarap] | 🇸🇬 🇺🇸 | 是 | 由 Tiarap 公司运营，拦截广告、跟踪器、钓鱼和恶意软件 | [HTTPS][tiarap-profile-https-signed], [TLS][tiarap-profile-tls-signed] | [HTTPS][tiarap-profile-https], [TLS][tiarap-profile-tls] |
|
||||
| 名称 | 区域 | 审查 | 备注 | 安装 | 安装 (未签名) |
|
||||
| ------------------------------------------------------------------------------------ | ----- | ---- | ------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------- |
|
||||
| [360 安全 DNS][360-default] | 🇨🇳 | 是 | 由 360 数字安全集团运营 | [HTTPS][360-default-https-signed] | [HTTPS][360-default-https] |
|
||||
| [AdGuard DNS 默认][adguard-default] | 🇷🇺 | 是 | 由 AdGuard 运营，拦截广告、跟踪器和钓鱼网站 | [HTTPS][adguard-default-https-signed], [TLS][adguard-default-tls-signed] | [HTTPS][adguard-default-https], [TLS][adguard-default-tls] |
|
||||
| [AdGuard DNS 家庭保护][adguard-family] | 🇷🇺 | 是 | 由 AdGuard 运营，除默认规则外，额外拦截恶意软件和成人内容 | [HTTPS][adguard-family-https-signed], [TLS][adguard-family-tls-signed] | [HTTPS][adguard-family-https], [TLS][adguard-family-tls] |
|
||||
| [AdGuard DNS 无过滤][adguard-nofilter] | 🇷🇺 | 否 | 由 AdGuard 运营，无过滤 | [HTTPS][adguard-nofilter-https-signed], [TLS][adguard-nofilter-tls-signed] | [HTTPS][adguard-nofilter-https], [TLS][adguard-nofilter-tls] |
|
||||
| [Alekberg 加密 DNS][alekberg-default] | 🇳🇱 | 否 | 由个人提供 | [HTTPS][alekberg-default-https-signed] | [HTTPS][alekberg-default-https] |
|
||||
| [阿里云公共 DNS][alibaba-default] | 🇨🇳 | 否 | 由阿里云计算运营 | [HTTPS][alibaba-default-https-signed], [TLS][alibaba-default-tls-signed] | [HTTPS][alibaba-default-https], [TLS][alibaba-default-tls] |
|
||||
| [BlahDNS CDN 过滤][blahdns-cdn-adblock] | 🇺🇸 | 是 | 由个人提供，拦截广告、跟踪器和恶意软件 | [HTTPS][blahdns-cdn-adblock-https-signed] | [HTTPS][blahdns-cdn-adblock-https] |
|
||||
| [BlahDNS CDN 无过滤][blahdns-cdn-unfiltered] | 🇺🇸 | 否 | 由个人提供，无过滤 | [HTTPS][blahdns-cdn-unfiltered-https-signed] | [HTTPS][blahdns-cdn-unfiltered-https] |
|
||||
| [BlahDNS 德国][blahdns-germany] | 🇩🇪 | 是 | 由个人提供，拦截广告、跟踪器和恶意软件 | [HTTPS][blahdns-germany-https-signed] | [HTTPS][blahdns-germany-https] |
|
||||
| [BlahDNS 新加坡][blahdns-singapore] | 🇸🇬 | 是 | 由个人提供，拦截广告、跟踪器和恶意软件 | [HTTPS][blahdns-singapore-https-signed] | [HTTPS][blahdns-singapore-https] |
|
||||
| [Canadian Shield 私人][canadianshield-private] | 🇨🇦 | 否 | 由加拿大互联网注册管理局 (CIRA) 运营 | [HTTPS][canadianshield-private-https-signed], [TLS][canadianshield-private-tls-signed] | [HTTPS][canadianshield-private-https], [TLS][canadianshield-private-tls] |
|
||||
| [Canadian Shield 保护][canadianshield-protected] | 🇨🇦 | 是 | 由加拿大互联网注册管理局 (CIRA) 运营，拦截恶意软件和钓鱼网站 | [HTTPS][canadianshield-protected-https-signed], [TLS][canadianshield-protected-tls-signed] | [HTTPS][canadianshield-protected-https], [TLS][canadianshield-protected-tls] |
|
||||
| [Canadian Shield 家庭][canadianshield-family] | 🇨🇦 | 是 | 由加拿大互联网注册管理局 (CIRA) 运营，拦截恶意软件、钓鱼和成人内容 | [HTTPS][canadianshield-family-https-signed], [TLS][canadianshield-family-tls-signed] | [HTTPS][canadianshield-family-https], [TLS][canadianshield-family-tls] |
|
||||
| [Cleanbrowsing 家庭过滤器][cleanbrowsing-family] | 🇺🇸 | 是 | 过滤恶意软件、成人内容和混合内容 | [HTTPS][cleanbrowsing-family-https-signed], [TLS][cleanbrowsing-family-tls-signed] | [HTTPS][cleanbrowsing-family-https], [TLS][cleanbrowsing-family-tls] |
|
||||
| [Cleanbrowsing 成人过滤器][cleanbrowsing-adult] | 🇺🇸 | 是 | 过滤恶意软件和成人内容 | [HTTPS][cleanbrowsing-adult-https-signed], [TLS][cleanbrowsing-adult-tls-signed] | [HTTPS][cleanbrowsing-adult-https], [TLS][cleanbrowsing-adult-tls] |
|
||||
| [Cleanbrowsing 安全过滤器][cleanbrowsing-security] | 🇺🇸 | 是 | 过滤恶意软件 | [HTTPS][cleanbrowsing-security-https-signed], [TLS][cleanbrowsing-security-tls-signed] | [HTTPS][cleanbrowsing-security-https], [TLS][cleanbrowsing-security-tls] |
|
||||
| [Cloudflare 1.1.1.1][cloudflare-default] | 🇺🇸 | 否 | 由 Cloudflare 公司运营 | [HTTPS][cloudflare-default-https-signed], [TLS][cloudflare-default-tls-signed] | [HTTPS][cloudflare-default-https], [TLS][cloudflare-default-tls] |
|
||||
| [Cloudflare 1.1.1.1 安全][cloudflare-malware] | 🇺🇸 | 是 | 由 Cloudflare 公司运营，拦截恶意软件和钓鱼网站 | [HTTPS][cloudflare-malware-https-signed] | [HTTPS][cloudflare-malware-https] |
|
||||
| [Cloudflare 1.1.1.1 家庭][cloudflare-family] | 🇺🇸 | 是 | 由 Cloudflare 公司运营，拦截恶意软件、钓鱼和成人内容 | [HTTPS][cloudflare-family-https-signed] | [HTTPS][cloudflare-family-https] |
|
||||
| [DNS4EU][dns4eu-default] | 🇨🇿 | 否 | Operated by a consortium lead by Whalebone. | [HTTPS][dns4eu-default-https-signed], [TLS][dns4eu-default-tls-signed] | [HTTPS][dns4eu-default-https], [TLS][dns4eu-default-tls] |
|
||||
| [DNS4EU Protective][dns4eu-malware] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware. | [HTTPS][dns4eu-malware-https-signed], [TLS][dns4eu-malware-tls-signed] | [HTTPS][dns4eu-malware-https], [TLS][dns4eu-malware-tls] |
|
||||
| [DNS4EU Protective ad-blocking][dns4eu-protective-ads] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware and Ads | [HTTPS][dns4eu-protective-ads-https-signed], [TLS][dns4eu-protective-ads-tls-signed] | [HTTPS][dns4eu-protective-ads-https], [TLS][dns4eu-protective-ads-tls] |
|
||||
| [DNS4EU Protective with child protection][dns4eu-protective-child] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks malware and explicit content. | [HTTPS][dns4eu-protective-child-https-signed], [TLS][dns4eu-protective-child-tls-signed] | [HTTPS][dns4eu-protective-child-https], [TLS][dns4eu-protective-child-tls] |
|
||||
| [DNS4EU Protective with child protection & ad-blocking][dns4eu-protective-child-ads] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware, Ads and explicit content | [HTTPS][dns4eu-protective-child-ads-https-signed], [TLS][dns4eu-protective-child-ads-tls-signed] | [HTTPS][dns4eu-protective-child-ads-https], [TLS][dns4eu-protective-child-ads-tls] |
|
||||
| [DNSPod 公共 DNS][dnspod-default] | 🇨🇳 | 否 | 由腾讯公司 DNSPod 运营 | [HTTPS][dnspod-default-https-signed], [TLS][dnspod-default-tls-signed] | [HTTPS][dnspod-default-https], [TLS][dnspod-default-tls] |
|
||||
| [FDN][fdn-default] | 🇫🇷 | 否 | 由法国数据网络运营 | [HTTPS][fdn-default-https-signed], [TLS][fdn-default-tls-signed] | [HTTPS][fdn-default-https], [TLS][fdn-default-tls] |
|
||||
| [FFMUC-DNS][ffmuc-dns-default] | 🇩🇪 | 否 | FFMUC free DNS servers provided by Freifunk München. | [HTTPS][ffmuc-dns-default-https-signed], [TLS][ffmuc-dns-default-tls-signed] | [HTTPS][ffmuc-dns-default-https], [TLS][ffmuc-dns-default-tls] |
|
||||
| [Google 公共 DNS][google-default] | 🇺🇸 | 否 | 由谷歌公司运营 | [HTTPS][google-default-https-signed], [TLS][google-default-tls-signed] | [HTTPS][google-default-https], [TLS][google-default-tls] |
|
||||
| [keweonDNS][keweondns-default] | 🇩🇪 | 否 | 由 Aviontex 运营，拦截广告和跟踪器 | [HTTPS][keweondns-default-https-signed], [TLS][keweondns-default-tls-signed] | [HTTPS][keweondns-default-https], [TLS][keweondns-default-tls] |
|
||||
| [Mullvad DNS][mullvad-default] | 🇸🇪 | 是 | 由 Mullvad VPN AB 运营 | [HTTPS][mullvad-default-https-signed] | [HTTPS][mullvad-default-https] |
|
||||
| [Mullvad DNS 广告拦截][mullvad-adblock] | 🇸🇪 | 是 | 由 Mullvad VPN AB 运营，拦截广告和跟踪器 | [HTTPS][mullvad-adblock-https-signed] | [HTTPS][mullvad-adblock-https] |
|
||||
| [OpenDNS 标准版][opendns-default] | 🇺🇸 | 否 | 由思科 OpenDNS 运营 | [HTTPS][opendns-default-https-signed] | [HTTPS][opendns-default-https] |
|
||||
| [OpenDNS 家庭盾][opendns-family] | 🇺🇸 | 是 | 由思科 OpenDNS 运营，拦截恶意软件和成人内容 | [HTTPS][opendns-family-https-signed] | [HTTPS][opendns-family-https] |
|
||||
| [Quad9][quad9-default] | 🇨🇭 | 是 | 由 Quad9 基金会运营，拦截恶意软件 | [HTTPS][quad9-default-https-signed], [TLS][quad9-default-tls-signed] | [HTTPS][quad9-default-https], [TLS][quad9-default-tls] |
|
||||
| [Quad9 带 ECS][quad9-ECS] | 🇨🇭 | 是 | 由 Quad9 基金会运营，支持 ECS，拦截恶意软件 | [HTTPS][quad9-ECS-https-signed], [TLS][quad9-ECS-tls-signed] | [HTTPS][quad9-ECS-https], [TLS][quad9-ECS-tls] |
|
||||
| [Quad9 无过滤][quad9-nofilter] | 🇨🇭 | 否 | 由 Quad9 基金会运营 | [HTTPS][quad9-nofilter-https-signed], [TLS][quad9-nofilter-tls-signed] | [HTTPS][quad9-nofilter-https], [TLS][quad9-nofilter-tls] |
|
||||
| [Tiarap][tiarapp-default] | 🇸🇬 🇺🇸 | 是 | 由 Tiarap 公司运营，拦截广告、跟踪器、钓鱼和恶意软件 | [HTTPS][tiarapp-default-https-signed], [TLS][tiarapp-default-tls-signed] | [HTTPS][tiarapp-default-https], [TLS][tiarapp-default-tls] |
|
||||
|
||||
## 安装
|
||||
|
||||
@@ -120,152 +120,164 @@ cat /proc/sys/kernel/random/uuid
|
||||
New-Guid
|
||||
```
|
||||
|
||||
[360-dns]: https://sdns.360.net/dnsPublic.html
|
||||
[360-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/360-https.mobileconfig
|
||||
[adguard-dns-default]: https://adguard-dns.io/kb/general/dns-providers/#default
|
||||
[adguard-dns-default-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-default-https.mobileconfig
|
||||
[adguard-dns-default-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-default-tls.mobileconfig
|
||||
[adguard-dns-family]: https://adguard-dns.io/kb/general/dns-providers/#family-protection
|
||||
[adguard-dns-family-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-family-https.mobileconfig
|
||||
[adguard-dns-family-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-family-tls.mobileconfig
|
||||
[adguard-dns-unfiltered]: https://adguard-dns.io/kb/general/dns-providers/#non-filtering
|
||||
[adguard-dns-unfiltered-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-nofilter-https.mobileconfig
|
||||
[adguard-dns-unfiltered-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-nofilter-tls.mobileconfig
|
||||
[alekberg-dns]: https://alekberg.net
|
||||
[alekberg-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alekberg-https.mobileconfig
|
||||
[aliyun-dns]: https://www.alidns.com/
|
||||
[aliyun-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-https.mobileconfig
|
||||
[aliyun-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-tls.mobileconfig
|
||||
[blahdns]: https://blahdns.com/
|
||||
[blahdns-cdn-filtered-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-adblock-https.mobileconfig
|
||||
[blahdns-cdn-unfiltered-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-unfiltered-https.mobileconfig
|
||||
[blahdns-germany-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-germany-https.mobileconfig
|
||||
[blahdns-singapore-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-singapore-https.mobileconfig
|
||||
[canadian-shield]: https://www.cira.ca/cybersecurity-services/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses
|
||||
[canadian-shield-private-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-private-https.mobileconfig
|
||||
[canadian-shield-private-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-private-tls.mobileconfig
|
||||
[canadian-shield-protected-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-protected-https.mobileconfig
|
||||
[canadian-shield-protected-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-protected-tls.mobileconfig
|
||||
[canadian-shield-family-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-family-https.mobileconfig
|
||||
[canadian-shield-family-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-family-tls.mobileconfig
|
||||
[cleanbrowsing]: https://cleanbrowsing.org/filters/
|
||||
[360-default]: https://sdns.360.net/dnsPublic.html
|
||||
[360-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/360-default-https.mobileconfig
|
||||
[adguard-default]: https://adguard-dns.io/kb/general/dns-providers/#default
|
||||
[adguard-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-default-https.mobileconfig
|
||||
[adguard-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-default-tls.mobileconfig
|
||||
[adguard-family]: https://adguard-dns.io/kb/general/dns-providers/#family-protection
|
||||
[adguard-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-family-https.mobileconfig
|
||||
[adguard-family-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-family-tls.mobileconfig
|
||||
[adguard-nofilter]: https://adguard-dns.io/kb/general/dns-providers/#non-filtering
|
||||
[adguard-nofilter-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-nofilter-https.mobileconfig
|
||||
[adguard-nofilter-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-nofilter-tls.mobileconfig
|
||||
[alekberg-default]: https://alekberg.net
|
||||
[alekberg-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alekberg-default-https.mobileconfig
|
||||
[alibaba-default]: https://www.alidns.com/
|
||||
[alibaba-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-default-https.mobileconfig
|
||||
[alibaba-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-default-tls.mobileconfig
|
||||
[blahdns-cdn-adblock]: https://blahdns.com/
|
||||
[blahdns-cdn-adblock-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-adblock-https.mobileconfig
|
||||
[blahdns-cdn-unfiltered]: https://blahdns.com/
|
||||
[blahdns-cdn-unfiltered-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-unfiltered-https.mobileconfig
|
||||
[blahdns-germany]: https://blahdns.com/
|
||||
[blahdns-germany-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-germany-https.mobileconfig
|
||||
[blahdns-singapore]: https://blahdns.com/
|
||||
[blahdns-singapore-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-singapore-https.mobileconfig
|
||||
[canadianshield-private]: https://www.cira.ca/cybersecurity-services/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses
|
||||
[canadianshield-private-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-private-https.mobileconfig
|
||||
[canadianshield-private-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-private-tls.mobileconfig
|
||||
[canadianshield-protected]: https://www.cira.ca/cybersecurity-services/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses
|
||||
[canadianshield-protected-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-protected-https.mobileconfig
|
||||
[canadianshield-protected-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-protected-tls.mobileconfig
|
||||
[canadianshield-family]: https://www.cira.ca/cybersecurity-services/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses
|
||||
[canadianshield-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-family-https.mobileconfig
|
||||
[canadianshield-family-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-family-tls.mobileconfig
|
||||
[cleanbrowsing-family]: https://cleanbrowsing.org/filters/
|
||||
[cleanbrowsing-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-family-https.mobileconfig
|
||||
[cleanbrowsing-family-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-family-tls.mobileconfig
|
||||
[cleanbrowsing-adult]: https://cleanbrowsing.org/filters/
|
||||
[cleanbrowsing-adult-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-adult-https.mobileconfig
|
||||
[cleanbrowsing-adult-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-adult-tls.mobileconfig
|
||||
[cleanbrowsing-security]: https://cleanbrowsing.org/filters/
|
||||
[cleanbrowsing-security-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-security-https.mobileconfig
|
||||
[cleanbrowsing-security-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-security-tls.mobileconfig
|
||||
[cloudflare-dns]: https://developers.cloudflare.com/1.1.1.1/encryption/
|
||||
[cloudflare-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-https.mobileconfig
|
||||
[cloudflare-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-tls.mobileconfig
|
||||
[cloudflare-dns-security-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-malware-https.mobileconfig
|
||||
[cloudflare-dns-family]: https://developers.cloudflare.com/1.1.1.1/setup/#1111-for-families
|
||||
[cloudflare-dns-family-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-family-https.mobileconfig
|
||||
[dnspod-dns]: https://www.dnspod.com/products/public.dns
|
||||
[dnspod-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dnspod-https.mobileconfig
|
||||
[dnspod-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dnspod-tls.mobileconfig
|
||||
[fdn-dns]: https://www.fdn.fr/actions/dns/
|
||||
[fdn-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/fdn-https.mobileconfig
|
||||
[fdn-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/fdn-tls.mobileconfig
|
||||
[google-dns]: https://developers.google.com/speed/public-dns/docs/secure-transports
|
||||
[google-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-https.mobileconfig
|
||||
[google-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-tls.mobileconfig
|
||||
[keweondns]: https://forum.xda-developers.com/t/keweondns-info-facts-and-what-is-keweon-actually.4576651/
|
||||
[keweondns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/keweondns-https.mobileconfig
|
||||
[keweondns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/keweondns-tls.mobileconfig
|
||||
[mullvad-dns]: https://mullvad.net/help/dns-over-https-and-dns-over-tls/
|
||||
[mullvad-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/mullvad-https.mobileconfig
|
||||
[mullvad-dns-adblock-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/mullvad-adblock-https.mobileconfig
|
||||
[opendns]: https://support.opendns.com/hc/articles/360038086532
|
||||
[opendns-standard-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-https.mobileconfig
|
||||
[opendns-familyshield-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-family-https.mobileconfig
|
||||
[quad9]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/
|
||||
[quad9-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-https.mobileconfig
|
||||
[quad9-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-tls.mobileconfig
|
||||
[quad9-ecs-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-https.mobileconfig
|
||||
[quad9-ecs-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-tls.mobileconfig
|
||||
[quad9-profile-unfiltered-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-https.mobileconfig
|
||||
[quad9-profile-unfiltered-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-tls.mobileconfig
|
||||
[tiarap]: https://doh.tiar.app
|
||||
[tiarap-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-https.mobileconfig
|
||||
[tiarap-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-tls.mobileconfig
|
||||
[dns4eu]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-https.mobileconfig
|
||||
[dns4eu-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-tls.mobileconfig
|
||||
[cloudflare-default]: https://developers.cloudflare.com/1.1.1.1/encryption/
|
||||
[cloudflare-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-default-https.mobileconfig
|
||||
[cloudflare-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-default-tls.mobileconfig
|
||||
[cloudflare-malware]: https://developers.cloudflare.com/1.1.1.1/encryption/
|
||||
[cloudflare-malware-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-malware-https.mobileconfig
|
||||
[cloudflare-family]: https://developers.cloudflare.com/1.1.1.1/setup/#1111-for-families
|
||||
[cloudflare-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-family-https.mobileconfig
|
||||
[dns4eu-default]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-default-https.mobileconfig
|
||||
[dns4eu-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-default-tls.mobileconfig
|
||||
[dns4eu-malware]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-malware-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-malware-https.mobileconfig
|
||||
[dns4eu-profile-malware-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-malware-tls.mobileconfig
|
||||
[dns4eu-malware-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-malware-https.mobileconfig
|
||||
[dns4eu-malware-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-malware-tls.mobileconfig
|
||||
[dns4eu-protective-ads]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-protective-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-ads-https.mobileconfig
|
||||
[dns4eu-profile-protective-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-ads-tls.mobileconfig
|
||||
[dns4eu-protective-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-ads-https.mobileconfig
|
||||
[dns4eu-protective-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-ads-tls.mobileconfig
|
||||
[dns4eu-protective-child]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-protective-child-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-https.mobileconfig
|
||||
[dns4eu-profile-protective-child-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-tls.mobileconfig
|
||||
[dns4eu-protective-child-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-https.mobileconfig
|
||||
[dns4eu-protective-child-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-tls.mobileconfig
|
||||
[dns4eu-protective-child-ads]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-protective-child-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-https.mobileconfig
|
||||
[dns4eu-profile-protective-child-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-tls.mobileconfig
|
||||
[ffmucdns]: https://ffmuc.net/wiki/knb:dohdot_en
|
||||
[ffmuc-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmucdns-https.mobileconfig
|
||||
[ffmuc-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmucdns-tls.mobileconfig
|
||||
[360-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/360-https.mobileconfig
|
||||
[adguard-dns-default-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-https.mobileconfig
|
||||
[adguard-dns-default-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-tls.mobileconfig
|
||||
[adguard-dns-family-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-family-https.mobileconfig
|
||||
[adguard-dns-family-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-family-tls.mobileconfig
|
||||
[adguard-dns-unfiltered-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-nofilter-https.mobileconfig
|
||||
[adguard-dns-unfiltered-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-nofilter-tls.mobileconfig
|
||||
[alekberg-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alekberg-https.mobileconfig
|
||||
[aliyun-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alibaba-https.mobileconfig
|
||||
[aliyun-dns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alibaba-tls.mobileconfig
|
||||
[blahdns-cdn-filtered-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-cdn-adblock-https.mobileconfig
|
||||
[blahdns-cdn-unfiltered-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-cdn-unfiltered-https.mobileconfig
|
||||
[blahdns-germany-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-germany-https.mobileconfig
|
||||
[blahdns-singapore-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-singapore-https.mobileconfig
|
||||
[canadian-shield-private-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-private-https.mobileconfig
|
||||
[canadian-shield-private-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-private-tls.mobileconfig
|
||||
[canadian-shield-protected-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-protected-https.mobileconfig
|
||||
[canadian-shield-protected-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-protected-tls.mobileconfig
|
||||
[canadian-shield-family-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-family-https.mobileconfig
|
||||
[canadian-shield-family-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-family-tls.mobileconfig
|
||||
[dns4eu-protective-child-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-https.mobileconfig
|
||||
[dns4eu-protective-child-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-tls.mobileconfig
|
||||
[dnspod-default]: https://www.dnspod.com/products/public.dns
|
||||
[dnspod-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dnspod-default-https.mobileconfig
|
||||
[dnspod-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dnspod-default-tls.mobileconfig
|
||||
[fdn-default]: https://www.fdn.fr/actions/dns/
|
||||
[fdn-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/fdn-default-https.mobileconfig
|
||||
[fdn-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/fdn-default-tls.mobileconfig
|
||||
[ffmuc-dns-default]: https://ffmuc.net/wiki/knb:dohdot_en
|
||||
[ffmuc-dns-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmuc-dns-default-https.mobileconfig
|
||||
[ffmuc-dns-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmuc-dns-default-tls.mobileconfig
|
||||
[google-default]: https://developers.google.com/speed/public-dns/docs/secure-transports
|
||||
[google-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-default-https.mobileconfig
|
||||
[google-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-default-tls.mobileconfig
|
||||
[keweondns-default]: https://forum.xda-developers.com/t/keweondns-info-facts-and-what-is-keweon-actually.4576651/
|
||||
[keweondns-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/keweondns-default-https.mobileconfig
|
||||
[keweondns-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/keweondns-default-tls.mobileconfig
|
||||
[mullvad-default]: https://mullvad.net/help/dns-over-https-and-dns-over-tls/
|
||||
[mullvad-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/mullvad-default-https.mobileconfig
|
||||
[mullvad-adblock]: https://mullvad.net/help/dns-over-https-and-dns-over-tls/
|
||||
[mullvad-adblock-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/mullvad-adblock-https.mobileconfig
|
||||
[opendns-default]: https://support.opendns.com/hc/articles/360038086532
|
||||
[opendns-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-default-https.mobileconfig
|
||||
[opendns-family]: https://support.opendns.com/hc/articles/360038086532
|
||||
[opendns-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-family-https.mobileconfig
|
||||
[quad9-default]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/
|
||||
[quad9-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-default-https.mobileconfig
|
||||
[quad9-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-default-tls.mobileconfig
|
||||
[quad9-ECS]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/
|
||||
[quad9-ECS-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-https.mobileconfig
|
||||
[quad9-ECS-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-tls.mobileconfig
|
||||
[quad9-nofilter]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/
|
||||
[quad9-nofilter-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-https.mobileconfig
|
||||
[quad9-nofilter-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-tls.mobileconfig
|
||||
[tiarapp-default]: https://doh.tiar.app
|
||||
[tiarapp-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-default-https.mobileconfig
|
||||
[tiarapp-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-default-tls.mobileconfig
|
||||
[360-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/360-default-https.mobileconfig
|
||||
[adguard-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-https.mobileconfig
|
||||
[adguard-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-tls.mobileconfig
|
||||
[adguard-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-family-https.mobileconfig
|
||||
[adguard-family-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-family-tls.mobileconfig
|
||||
[adguard-nofilter-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-nofilter-https.mobileconfig
|
||||
[adguard-nofilter-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-nofilter-tls.mobileconfig
|
||||
[alekberg-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alekberg-default-https.mobileconfig
|
||||
[alibaba-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alibaba-default-https.mobileconfig
|
||||
[alibaba-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alibaba-default-tls.mobileconfig
|
||||
[blahdns-cdn-adblock-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-cdn-adblock-https.mobileconfig
|
||||
[blahdns-cdn-unfiltered-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-cdn-unfiltered-https.mobileconfig
|
||||
[blahdns-germany-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-germany-https.mobileconfig
|
||||
[blahdns-singapore-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-singapore-https.mobileconfig
|
||||
[canadianshield-private-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-private-https.mobileconfig
|
||||
[canadianshield-private-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-private-tls.mobileconfig
|
||||
[canadianshield-protected-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-protected-https.mobileconfig
|
||||
[canadianshield-protected-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-protected-tls.mobileconfig
|
||||
[canadianshield-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-family-https.mobileconfig
|
||||
[canadianshield-family-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-family-tls.mobileconfig
|
||||
[cleanbrowsing-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-family-https.mobileconfig
|
||||
[cleanbrowsing-family-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-family-tls.mobileconfig
|
||||
[cleanbrowsing-adult-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-adult-https.mobileconfig
|
||||
[cleanbrowsing-adult-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-adult-tls.mobileconfig
|
||||
[cleanbrowsing-security-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-security-https.mobileconfig
|
||||
[cleanbrowsing-security-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-security-tls.mobileconfig
|
||||
[cloudflare-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-https.mobileconfig
|
||||
[cloudflare-dns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-tls.mobileconfig
|
||||
[cloudflare-dns-security-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-malware-https.mobileconfig
|
||||
[cloudflare-dns-family-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-family-https.mobileconfig
|
||||
[dnspod-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dnspod-https.mobileconfig
|
||||
[dnspod-dns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dnspod-tls.mobileconfig
|
||||
[fdn-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/fdn-https.mobileconfig
|
||||
[fdn-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/fdn-tls.mobileconfig
|
||||
[google-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/google-https.mobileconfig
|
||||
[google-dns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/google-tls.mobileconfig
|
||||
[keweondns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/keweondns-https.mobileconfig
|
||||
[keweondns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/keweondns-tls.mobileconfig
|
||||
[mullvad-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/mullvad-https.mobileconfig
|
||||
[mullvad-dns-adblock-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/mullvad-adblock-https.mobileconfig
|
||||
[opendns-standard-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/opendns-https.mobileconfig
|
||||
[opendns-familyshield-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/opendns-family-https.mobileconfig
|
||||
[quad9-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-https.mobileconfig
|
||||
[quad9-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-tls.mobileconfig
|
||||
[quad9-ecs-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-ECS-https.mobileconfig
|
||||
[quad9-ecs-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-ECS-tls.mobileconfig
|
||||
[quad9-profile-unfiltered-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-nofilter-https.mobileconfig
|
||||
[quad9-profile-unfiltered-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-nofilter-tls.mobileconfig
|
||||
[tiarap-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/tiarapp-https.mobileconfig
|
||||
[tiarap-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/tiarapp-tls.mobileconfig
|
||||
[dns4eu-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-https.mobileconfig
|
||||
[dns4eu-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-tls.mobileconfig
|
||||
[dns4eu-profile-malware-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-malware-https.mobileconfig
|
||||
[dns4eu-profile-malware-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-malware-tls.mobileconfig
|
||||
[dns4eu-profile-protective-ads-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-ads-https.mobileconfig
|
||||
[dns4eu-profile-protective-ads-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-ads-tls.mobileconfig
|
||||
[dns4eu-profile-protective-child-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-https.mobileconfig
|
||||
[dns4eu-profile-protective-child-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-tls.mobileconfig
|
||||
[dns4eu-profile-protective-child-ads-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-ads-https.mobileconfig
|
||||
[dns4eu-profile-protective-child-ads-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-ads-tls.mobileconfig
|
||||
[ffmuc-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/ffmucdns-https.mobileconfig
|
||||
[ffmuc-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/ffmucdns-tls.mobileconfig
|
||||
[cloudflare-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-default-https.mobileconfig
|
||||
[cloudflare-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-default-tls.mobileconfig
|
||||
[cloudflare-malware-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-malware-https.mobileconfig
|
||||
[cloudflare-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-family-https.mobileconfig
|
||||
[dns4eu-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-default-https.mobileconfig
|
||||
[dns4eu-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-default-tls.mobileconfig
|
||||
[dns4eu-malware-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-malware-https.mobileconfig
|
||||
[dns4eu-malware-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-malware-tls.mobileconfig
|
||||
[dns4eu-protective-ads-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-ads-https.mobileconfig
|
||||
[dns4eu-protective-ads-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-ads-tls.mobileconfig
|
||||
[dns4eu-protective-child-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-https.mobileconfig
|
||||
[dns4eu-protective-child-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-tls.mobileconfig
|
||||
[dns4eu-protective-child-ads-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-ads-https.mobileconfig
|
||||
[dns4eu-protective-child-ads-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-ads-tls.mobileconfig
|
||||
[dnspod-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dnspod-default-https.mobileconfig
|
||||
[dnspod-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dnspod-default-tls.mobileconfig
|
||||
[fdn-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/fdn-default-https.mobileconfig
|
||||
[fdn-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/fdn-default-tls.mobileconfig
|
||||
[ffmuc-dns-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/ffmuc-dns-default-https.mobileconfig
|
||||
[ffmuc-dns-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/ffmuc-dns-default-tls.mobileconfig
|
||||
[google-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/google-default-https.mobileconfig
|
||||
[google-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/google-default-tls.mobileconfig
|
||||
[keweondns-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/keweondns-default-https.mobileconfig
|
||||
[keweondns-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/keweondns-default-tls.mobileconfig
|
||||
[mullvad-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/mullvad-default-https.mobileconfig
|
||||
[mullvad-adblock-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/mullvad-adblock-https.mobileconfig
|
||||
[opendns-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/opendns-default-https.mobileconfig
|
||||
[opendns-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/opendns-family-https.mobileconfig
|
||||
[quad9-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-default-https.mobileconfig
|
||||
[quad9-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-default-tls.mobileconfig
|
||||
[quad9-ECS-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-ECS-https.mobileconfig
|
||||
[quad9-ECS-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-ECS-tls.mobileconfig
|
||||
[quad9-nofilter-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-nofilter-https.mobileconfig
|
||||
[quad9-nofilter-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-nofilter-tls.mobileconfig
|
||||
[tiarapp-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/tiarapp-default-https.mobileconfig
|
||||
[tiarapp-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/tiarapp-default-tls.mobileconfig
|
||||
|
||||
+184
-172
@@ -19,45 +19,45 @@
|
||||
|
||||
「`審查=是`」意味著描述檔不會發送某些主機「`主機名=IP`」關係的真實訊息。
|
||||
|
||||
| 名稱 | 區域 | 審查 | 備註 | 安裝連結 | |
|
||||
| ------------------------------------------------------------------------------------ | ----- | ---- | ------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------- |
|
||||
| [360 安全 DNS][360-dns] | 🇨🇳 | 是 | 由 360 數位安全集團營運 | [HTTPS][360-dns-profile-https-signed] | [HTTPS][360-dns-profile-https] |
|
||||
| [AdGuard DNS 預設][adguard-dns-default] | 🇷🇺 | 是 | 由 AdGuard 營運，阻擋廣告、追蹤器和釣魚網站 | [HTTPS][adguard-dns-default-profile-https-signed], [TLS][adguard-dns-default-profile-tls-signed] | [HTTPS][adguard-dns-default-profile-https], [TLS][adguard-dns-default-profile-tls] |
|
||||
| [AdGuard DNS 家庭保護][adguard-dns-family] | 🇷🇺 | 是 | 由 AdGuard 營運，除預設規則外，額外阻擋惡意軟體和成人內容 | [HTTPS][adguard-dns-family-profile-https-signed], [TLS][adguard-dns-family-profile-tls-signed] | [HTTPS][adguard-dns-family-profile-https], [TLS][adguard-dns-family-profile-tls] |
|
||||
| [AdGuard DNS 無過濾][adguard-dns-unfiltered] | 🇷🇺 | 否 | 由 AdGuard 營運，無過濾 | [HTTPS][adguard-dns-unfiltered-profile-https-signed], [TLS][adguard-dns-unfiltered-profile-tls-signed] | [HTTPS][adguard-dns-unfiltered-profile-https], [TLS][adguard-dns-unfiltered-profile-tls] |
|
||||
| [Alekberg 加密 DNS][alekberg-dns] | 🇳🇱 | 否 | 由個人提供 | [HTTPS][alekberg-dns-profile-https-signed] | [HTTPS][alekberg-dns-profile-https] |
|
||||
| [阿里雲公共 DNS][aliyun-dns] | 🇨🇳 | 否 | 由阿里雲計算營運 | [HTTPS][aliyun-dns-profile-https-signed], [TLS][aliyun-dns-profile-tls-signed] | [HTTPS][aliyun-dns-profile-https], [TLS][aliyun-dns-profile-tls] |
|
||||
| [BlahDNS CDN 過濾][blahdns] | 🇺🇸 | 是 | 由個人提供，阻擋廣告、追蹤器和惡意軟體 | [HTTPS][blahdns-cdn-filtered-profile-https-signed] | [HTTPS][blahdns-cdn-filtered-profile-https] |
|
||||
| [BlahDNS CDN 無過濾][blahdns] | 🇺🇸 | 否 | 由個人提供，無過濾 | [HTTPS][blahdns-cdn-unfiltered-profile-https-signed] | [HTTPS][blahdns-cdn-unfiltered-profile-https] |
|
||||
| [BlahDNS 德國][blahdns] | 🇩🇪 | 是 | 由個人提供，阻擋廣告、追蹤器和惡意軟體 | [HTTPS][blahdns-germany-profile-https-signed] | [HTTPS][blahdns-germany-profile-https] |
|
||||
| [BlahDNS 新加坡][blahdns] | 🇸🇬 | 是 | 由個人提供，阻擋廣告、追蹤器和惡意軟體 | [HTTPS][blahdns-singapore-profile-https-signed] | [HTTPS][blahdns-singapore-profile-https] |
|
||||
| [Canadian Shield 私人][canadian-shield] | 🇨🇦 | 否 | 由加拿大網際網路註冊管理局 (CIRA) 營運 | [HTTPS][canadian-shield-private-profile-https-signed], [TLS][canadian-shield-private-profile-tls-signed] | [HTTPS][canadian-shield-private-profile-https], [TLS][canadian-shield-private-profile-tls] |
|
||||
| [Canadian Shield 保護][canadian-shield] | 🇨🇦 | 是 | 由加拿大網際網路註冊管理局 (CIRA) 營運，阻擋惡意軟體和釣魚網站 | [HTTPS][canadian-shield-protected-profile-https-signed], [TLS][canadian-shield-protected-profile-tls-signed] | [HTTPS][canadian-shield-protected-profile-https], [TLS][canadian-shield-protected-profile-tls] |
|
||||
| [Canadian Shield 家庭][canadian-shield] | 🇨🇦 | 是 | 由加拿大網際網路註冊管理局 (CIRA) 營運，阻擋惡意軟體、釣魚和成人內容 | [HTTPS][canadian-shield-family-profile-https-signed], [TLS][canadian-shield-family-profile-tls-signed] | [HTTPS][canadian-shield-family-profile-https], [TLS][canadian-shield-family-profile-tls] |
|
||||
| [Cleanbrowsing 家庭過濾器][cleanbrowsing] | 🇺🇸 | 是 | 過濾惡意軟體、成人內容和混合內容 | [HTTPS][cleanbrowsing-family-https-signed], [TLS][cleanbrowsing-family-tls-signed] | [HTTPS][cleanbrowsing-family-https], [TLS][cleanbrowsing-family-tls] |
|
||||
| [Cleanbrowsing 成人過濾器][cleanbrowsing] | 🇺🇸 | 是 | 過濾惡意軟體和成人內容 | [HTTPS][cleanbrowsing-adult-https-signed], [TLS][cleanbrowsing-adult-tls-signed] | [HTTPS][cleanbrowsing-adult-https], [TLS][cleanbrowsing-adult-tls] |
|
||||
| [Cleanbrowsing 安全過濾器][cleanbrowsing] | 🇺🇸 | 是 | 過濾惡意軟體 | [HTTPS][cleanbrowsing-security-https-signed], [TLS][cleanbrowsing-security-tls-signed] | [HTTPS][cleanbrowsing-security-https], [TLS][cleanbrowsing-security-tls] |
|
||||
| [Cloudflare 1.1.1.1][cloudflare-dns] | 🇺🇸 | 否 | 由 Cloudflare 公司營運 | [HTTPS][cloudflare-dns-profile-https-signed], [TLS][cloudflare-dns-profile-tls-signed] | [HTTPS][cloudflare-dns-profile-https], [TLS][cloudflare-dns-profile-tls] |
|
||||
| [Cloudflare 1.1.1.1 安全][cloudflare-dns-family] | 🇺🇸 | 是 | 由 Cloudflare 公司營運，阻擋惡意軟體和釣魚網站 | [HTTPS][cloudflare-dns-security-profile-https-signed] | [HTTPS][cloudflare-dns-security-profile-https] |
|
||||
| [Cloudflare 1.1.1.1 家庭][cloudflare-dns-family] | 🇺🇸 | 是 | 由 Cloudflare 公司營運，阻擋惡意軟體、釣魚和成人內容 | [HTTPS][cloudflare-dns-family-profile-https-signed] | [HTTPS][cloudflare-dns-family-profile-https] |
|
||||
| [DNS4EU][dns4eu] | 🇨🇿 | 否 | Operated by a consortium lead by Whalebone. | [HTTPS][dns4eu-profile-https-signed], [TLS][dns4eu-profile-tls-signed] | [HTTPS][dns4eu-profile-https], [TLS][dns4eu-profile-tls] |
|
||||
| [DNS4EU Protective][dns4eu-malware] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware. | [HTTPS][dns4eu-profile-malware-https-signed], [TLS][dns4eu-profile-malware-tls-signed] | [HTTPS][dns4eu-profile-malware-https], [TLS][dns4eu-profile-malware-tls] |
|
||||
| [DNS4EU Protective ad-blocking][dns4eu-protective-ads] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware and Ads | [HTTPS][dns4eu-profile-protective-ads-https-signed], [TLS][dns4eu-profile-protective-ads-tls-signed] | [HTTPS][dns4eu-profile-protective-ads-https], [TLS][dns4eu-profile-protective-ads-tls] |
|
||||
| [DNS4EU Protective with child protection][dns4eu-protective-child] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks malware and explicit content. | [HTTPS][dns4eu-profile-protective-child-https-signed], [TLS][dns4eu-profile-protective-child-tls-signed] | [HTTPS][dns4eu-profile-protective-child-https], [TLS][dns4eu-profile-protective-child-tls] |
|
||||
| [DNS4EU Protective with child protection & ad-blocking][dns4eu-protective-child-ads] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware, Ads and explicit content | [HTTPS][dns4eu-profile-protective-child-ads-https-signed], [TLS][dns4eu-profile-protective-child-ads-tls-signed] | [HTTPS][dns4eu-profile-protective-child-ads-https], [TLS][dns4eu-profile-protective-child-ads-tls] |
|
||||
| [DNSPod 公共 DNS][dnspod-dns] | 🇨🇳 | 否 | 由騰訊公司 DNSPod 營運 | [HTTPS][dnspod-dns-profile-https-signed], [TLS][dnspod-dns-profile-tls-signed] | [HTTPS][dnspod-dns-profile-https], [TLS][dnspod-dns-profile-tls] |
|
||||
| [FDN][fdn-dns] | 🇫🇷 | 否 | 由法國資料網路營運 | [HTTPS][fdn-https-signed], [TLS][fdn-tls-signed] | [HTTPS][fdn-https], [TLS][fdn-tls] |
|
||||
| [FFMUC-DNS][ffmucdns] | 🇩🇪 | 否 | FFMUC free DNS servers provided by Freifunk München. | [HTTPS][ffmuc-profile-https-signed], [TLS][ffmuc-profile-tls-signed] | [HTTPS][ffmuc-profile-https], [TLS][ffmuc-profile-tls] |
|
||||
| [Google 公共 DNS][google-dns] | 🇺🇸 | 否 | 由谷歌公司營運 | [HTTPS][google-dns-profile-https-signed], [TLS][google-dns-profile-tls-signed] | [HTTPS][google-dns-profile-https], [TLS][google-dns-profile-tls] |
|
||||
| [keweonDNS][keweondns] | 🇩🇪 | 否 | 由 Aviontex 營運，阻擋廣告和追蹤器 | [HTTPS][keweondns-profile-https-signed], [TLS][keweondns-profile-tls-signed] | [HTTPS][keweondns-profile-https], [TLS][keweondns-profile-tls] |
|
||||
| [Mullvad DNS][mullvad-dns] | 🇸🇪 | 是 | 由 Mullvad VPN AB 營運 | [HTTPS][mullvad-dns-profile-https-signed] | [HTTPS][mullvad-dns-profile-https] |
|
||||
| [Mullvad DNS 廣告阻擋][mullvad-dns] | 🇸🇪 | 是 | 由 Mullvad VPN AB 營運，阻擋廣告和追蹤器 | [HTTPS][mullvad-dns-adblock-profile-https-signed] | [HTTPS][mullvad-dns-adblock-profile-https] |
|
||||
| [OpenDNS 標準版][opendns] | 🇺🇸 | 否 | 由思科 OpenDNS 營運 | [HTTPS][opendns-standard-profile-https-signed] | [HTTPS][opendns-standard-profile-https] |
|
||||
| [OpenDNS 家庭盾][opendns] | 🇺🇸 | 是 | 由思科 OpenDNS 營運，阻擋惡意軟體和成人內容 | [HTTPS][opendns-familyshield-profile-https-signed] | [HTTPS][opendns-familyshield-profile-https] |
|
||||
| [Quad9][quad9] | 🇨🇭 | 是 | 由 Quad9 基金會營運，阻擋惡意軟體 | [HTTPS][quad9-profile-https-signed], [TLS][quad9-profile-tls-signed] | [HTTPS][quad9-profile-https], [TLS][quad9-profile-tls] |
|
||||
| [Quad9 帶 ECS][quad9] | 🇨🇭 | 是 | 由 Quad9 基金會營運，支援 ECS，阻擋惡意軟體 | [HTTPS][quad9-ecs-profile-https-signed], [TLS][quad9-ecs-profile-tls-signed] | [HTTPS][quad9-ecs-profile-https], [TLS][quad9-ecs-profile-tls] |
|
||||
| [Quad9 無過濾][quad9] | 🇨🇭 | 否 | 由 Quad9 基金會營運 | [HTTPS][quad9-profile-unfiltered-https-signed], [TLS][quad9-profile-unfiltered-tls-signed] | [HTTPS][quad9-profile-unfiltered-https], [TLS][quad9-profile-unfiltered-tls] |
|
||||
| [Tiarap][tiarap] | 🇸🇬 🇺🇸 | 是 | 由 Tiarap 公司營運，阻擋廣告、追蹤器、釣魚和惡意軟體 | [HTTPS][tiarap-profile-https-signed], [TLS][tiarap-profile-tls-signed] | [HTTPS][tiarap-profile-https], [TLS][tiarap-profile-tls] |
|
||||
| 名稱 | 區域 | 審查 | 備註 | 安裝連結 | |
|
||||
| ------------------------------------------------------------------------------------ | ----- | ---- | ------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------- |
|
||||
| [360 安全 DNS][360-default] | 🇨🇳 | 是 | 由 360 數位安全集團營運 | [HTTPS][360-default-https-signed] | [HTTPS][360-default-https] |
|
||||
| [AdGuard DNS 預設][adguard-default] | 🇷🇺 | 是 | 由 AdGuard 營運，阻擋廣告、追蹤器和釣魚網站 | [HTTPS][adguard-default-https-signed], [TLS][adguard-default-tls-signed] | [HTTPS][adguard-default-https], [TLS][adguard-default-tls] |
|
||||
| [AdGuard DNS 家庭保護][adguard-family] | 🇷🇺 | 是 | 由 AdGuard 營運，除預設規則外，額外阻擋惡意軟體和成人內容 | [HTTPS][adguard-family-https-signed], [TLS][adguard-family-tls-signed] | [HTTPS][adguard-family-https], [TLS][adguard-family-tls] |
|
||||
| [AdGuard DNS 無過濾][adguard-nofilter] | 🇷🇺 | 否 | 由 AdGuard 營運，無過濾 | [HTTPS][adguard-nofilter-https-signed], [TLS][adguard-nofilter-tls-signed] | [HTTPS][adguard-nofilter-https], [TLS][adguard-nofilter-tls] |
|
||||
| [Alekberg 加密 DNS][alekberg-default] | 🇳🇱 | 否 | 由個人提供 | [HTTPS][alekberg-default-https-signed] | [HTTPS][alekberg-default-https] |
|
||||
| [阿里雲公共 DNS][alibaba-default] | 🇨🇳 | 否 | 由阿里雲計算營運 | [HTTPS][alibaba-default-https-signed], [TLS][alibaba-default-tls-signed] | [HTTPS][alibaba-default-https], [TLS][alibaba-default-tls] |
|
||||
| [BlahDNS CDN 過濾][blahdns-cdn-adblock] | 🇺🇸 | 是 | 由個人提供，阻擋廣告、追蹤器和惡意軟體 | [HTTPS][blahdns-cdn-adblock-https-signed] | [HTTPS][blahdns-cdn-adblock-https] |
|
||||
| [BlahDNS CDN 無過濾][blahdns-cdn-unfiltered] | 🇺🇸 | 否 | 由個人提供，無過濾 | [HTTPS][blahdns-cdn-unfiltered-https-signed] | [HTTPS][blahdns-cdn-unfiltered-https] |
|
||||
| [BlahDNS 德國][blahdns-germany] | 🇩🇪 | 是 | 由個人提供，阻擋廣告、追蹤器和惡意軟體 | [HTTPS][blahdns-germany-https-signed] | [HTTPS][blahdns-germany-https] |
|
||||
| [BlahDNS 新加坡][blahdns-singapore] | 🇸🇬 | 是 | 由個人提供，阻擋廣告、追蹤器和惡意軟體 | [HTTPS][blahdns-singapore-https-signed] | [HTTPS][blahdns-singapore-https] |
|
||||
| [Canadian Shield 私人][canadianshield-private] | 🇨🇦 | 否 | 由加拿大網際網路註冊管理局 (CIRA) 營運 | [HTTPS][canadianshield-private-https-signed], [TLS][canadianshield-private-tls-signed] | [HTTPS][canadianshield-private-https], [TLS][canadianshield-private-tls] |
|
||||
| [Canadian Shield 保護][canadianshield-protected] | 🇨🇦 | 是 | 由加拿大網際網路註冊管理局 (CIRA) 營運，阻擋惡意軟體和釣魚網站 | [HTTPS][canadianshield-protected-https-signed], [TLS][canadianshield-protected-tls-signed] | [HTTPS][canadianshield-protected-https], [TLS][canadianshield-protected-tls] |
|
||||
| [Canadian Shield 家庭][canadianshield-family] | 🇨🇦 | 是 | 由加拿大網際網路註冊管理局 (CIRA) 營運，阻擋惡意軟體、釣魚和成人內容 | [HTTPS][canadianshield-family-https-signed], [TLS][canadianshield-family-tls-signed] | [HTTPS][canadianshield-family-https], [TLS][canadianshield-family-tls] |
|
||||
| [Cleanbrowsing 家庭過濾器][cleanbrowsing-family] | 🇺🇸 | 是 | 過濾惡意軟體、成人內容和混合內容 | [HTTPS][cleanbrowsing-family-https-signed], [TLS][cleanbrowsing-family-tls-signed] | [HTTPS][cleanbrowsing-family-https], [TLS][cleanbrowsing-family-tls] |
|
||||
| [Cleanbrowsing 成人過濾器][cleanbrowsing-adult] | 🇺🇸 | 是 | 過濾惡意軟體和成人內容 | [HTTPS][cleanbrowsing-adult-https-signed], [TLS][cleanbrowsing-adult-tls-signed] | [HTTPS][cleanbrowsing-adult-https], [TLS][cleanbrowsing-adult-tls] |
|
||||
| [Cleanbrowsing 安全過濾器][cleanbrowsing-security] | 🇺🇸 | 是 | 過濾惡意軟體 | [HTTPS][cleanbrowsing-security-https-signed], [TLS][cleanbrowsing-security-tls-signed] | [HTTPS][cleanbrowsing-security-https], [TLS][cleanbrowsing-security-tls] |
|
||||
| [Cloudflare 1.1.1.1][cloudflare-default] | 🇺🇸 | 否 | 由 Cloudflare 公司營運 | [HTTPS][cloudflare-default-https-signed], [TLS][cloudflare-default-tls-signed] | [HTTPS][cloudflare-default-https], [TLS][cloudflare-default-tls] |
|
||||
| [Cloudflare 1.1.1.1 安全][cloudflare-malware] | 🇺🇸 | 是 | 由 Cloudflare 公司營運，阻擋惡意軟體和釣魚網站 | [HTTPS][cloudflare-malware-https-signed] | [HTTPS][cloudflare-malware-https] |
|
||||
| [Cloudflare 1.1.1.1 家庭][cloudflare-family] | 🇺🇸 | 是 | 由 Cloudflare 公司營運，阻擋惡意軟體、釣魚和成人內容 | [HTTPS][cloudflare-family-https-signed] | [HTTPS][cloudflare-family-https] |
|
||||
| [DNS4EU][dns4eu-default] | 🇨🇿 | 否 | Operated by a consortium lead by Whalebone. | [HTTPS][dns4eu-default-https-signed], [TLS][dns4eu-default-tls-signed] | [HTTPS][dns4eu-default-https], [TLS][dns4eu-default-tls] |
|
||||
| [DNS4EU Protective][dns4eu-malware] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware. | [HTTPS][dns4eu-malware-https-signed], [TLS][dns4eu-malware-tls-signed] | [HTTPS][dns4eu-malware-https], [TLS][dns4eu-malware-tls] |
|
||||
| [DNS4EU Protective ad-blocking][dns4eu-protective-ads] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware and Ads | [HTTPS][dns4eu-protective-ads-https-signed], [TLS][dns4eu-protective-ads-tls-signed] | [HTTPS][dns4eu-protective-ads-https], [TLS][dns4eu-protective-ads-tls] |
|
||||
| [DNS4EU Protective with child protection][dns4eu-protective-child] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks malware and explicit content. | [HTTPS][dns4eu-protective-child-https-signed], [TLS][dns4eu-protective-child-tls-signed] | [HTTPS][dns4eu-protective-child-https], [TLS][dns4eu-protective-child-tls] |
|
||||
| [DNS4EU Protective with child protection & ad-blocking][dns4eu-protective-child-ads] | 🇨🇿 | 是 | Operated by a consortium lead by Whalebone. Blocks Malware, Ads and explicit content | [HTTPS][dns4eu-protective-child-ads-https-signed], [TLS][dns4eu-protective-child-ads-tls-signed] | [HTTPS][dns4eu-protective-child-ads-https], [TLS][dns4eu-protective-child-ads-tls] |
|
||||
| [DNSPod 公共 DNS][dnspod-default] | 🇨🇳 | 否 | 由騰訊公司 DNSPod 營運 | [HTTPS][dnspod-default-https-signed], [TLS][dnspod-default-tls-signed] | [HTTPS][dnspod-default-https], [TLS][dnspod-default-tls] |
|
||||
| [FDN][fdn-default] | 🇫🇷 | 否 | 由法國資料網路營運 | [HTTPS][fdn-default-https-signed], [TLS][fdn-default-tls-signed] | [HTTPS][fdn-default-https], [TLS][fdn-default-tls] |
|
||||
| [FFMUC-DNS][ffmuc-dns-default] | 🇩🇪 | 否 | FFMUC free DNS servers provided by Freifunk München. | [HTTPS][ffmuc-dns-default-https-signed], [TLS][ffmuc-dns-default-tls-signed] | [HTTPS][ffmuc-dns-default-https], [TLS][ffmuc-dns-default-tls] |
|
||||
| [Google 公共 DNS][google-default] | 🇺🇸 | 否 | 由谷歌公司營運 | [HTTPS][google-default-https-signed], [TLS][google-default-tls-signed] | [HTTPS][google-default-https], [TLS][google-default-tls] |
|
||||
| [keweonDNS][keweondns-default] | 🇩🇪 | 否 | 由 Aviontex 營運，阻擋廣告和追蹤器 | [HTTPS][keweondns-default-https-signed], [TLS][keweondns-default-tls-signed] | [HTTPS][keweondns-default-https], [TLS][keweondns-default-tls] |
|
||||
| [Mullvad DNS][mullvad-default] | 🇸🇪 | 是 | 由 Mullvad VPN AB 營運 | [HTTPS][mullvad-default-https-signed] | [HTTPS][mullvad-default-https] |
|
||||
| [Mullvad DNS 廣告阻擋][mullvad-adblock] | 🇸🇪 | 是 | 由 Mullvad VPN AB 營運，阻擋廣告和追蹤器 | [HTTPS][mullvad-adblock-https-signed] | [HTTPS][mullvad-adblock-https] |
|
||||
| [OpenDNS 標準版][opendns-default] | 🇺🇸 | 否 | 由思科 OpenDNS 營運 | [HTTPS][opendns-default-https-signed] | [HTTPS][opendns-default-https] |
|
||||
| [OpenDNS 家庭盾][opendns-family] | 🇺🇸 | 是 | 由思科 OpenDNS 營運，阻擋惡意軟體和成人內容 | [HTTPS][opendns-family-https-signed] | [HTTPS][opendns-family-https] |
|
||||
| [Quad9][quad9-default] | 🇨🇭 | 是 | 由 Quad9 基金會營運，阻擋惡意軟體 | [HTTPS][quad9-default-https-signed], [TLS][quad9-default-tls-signed] | [HTTPS][quad9-default-https], [TLS][quad9-default-tls] |
|
||||
| [Quad9 帶 ECS][quad9-ECS] | 🇨🇭 | 是 | 由 Quad9 基金會營運，支援 ECS，阻擋惡意軟體 | [HTTPS][quad9-ECS-https-signed], [TLS][quad9-ECS-tls-signed] | [HTTPS][quad9-ECS-https], [TLS][quad9-ECS-tls] |
|
||||
| [Quad9 無過濾][quad9-nofilter] | 🇨🇭 | 否 | 由 Quad9 基金會營運 | [HTTPS][quad9-nofilter-https-signed], [TLS][quad9-nofilter-tls-signed] | [HTTPS][quad9-nofilter-https], [TLS][quad9-nofilter-tls] |
|
||||
| [Tiarap][tiarapp-default] | 🇸🇬 🇺🇸 | 是 | 由 Tiarap 公司營運，阻擋廣告、追蹤器、釣魚和惡意軟體 | [HTTPS][tiarapp-default-https-signed], [TLS][tiarapp-default-tls-signed] | [HTTPS][tiarapp-default-https], [TLS][tiarapp-default-tls] |
|
||||
|
||||
## 安裝
|
||||
|
||||
@@ -120,152 +120,164 @@ cat /proc/sys/kernel/random/uuid
|
||||
New-Guid
|
||||
```
|
||||
|
||||
[360-dns]: https://sdns.360.net/dnsPublic.html
|
||||
[360-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/360-https.mobileconfig
|
||||
[adguard-dns-default]: https://adguard-dns.io/kb/general/dns-providers/#default
|
||||
[adguard-dns-default-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-default-https.mobileconfig
|
||||
[adguard-dns-default-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-default-tls.mobileconfig
|
||||
[adguard-dns-family]: https://adguard-dns.io/kb/general/dns-providers/#family-protection
|
||||
[adguard-dns-family-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-family-https.mobileconfig
|
||||
[adguard-dns-family-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-family-tls.mobileconfig
|
||||
[adguard-dns-unfiltered]: https://adguard-dns.io/kb/general/dns-providers/#non-filtering
|
||||
[adguard-dns-unfiltered-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-nofilter-https.mobileconfig
|
||||
[adguard-dns-unfiltered-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-nofilter-tls.mobileconfig
|
||||
[alekberg-dns]: https://alekberg.net
|
||||
[alekberg-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alekberg-https.mobileconfig
|
||||
[aliyun-dns]: https://www.alidns.com/
|
||||
[aliyun-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-https.mobileconfig
|
||||
[aliyun-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-tls.mobileconfig
|
||||
[blahdns]: https://blahdns.com/
|
||||
[blahdns-cdn-filtered-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-adblock-https.mobileconfig
|
||||
[blahdns-cdn-unfiltered-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-unfiltered-https.mobileconfig
|
||||
[blahdns-germany-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-germany-https.mobileconfig
|
||||
[blahdns-singapore-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-singapore-https.mobileconfig
|
||||
[canadian-shield]: https://www.cira.ca/cybersecurity-services/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses
|
||||
[canadian-shield-private-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-private-https.mobileconfig
|
||||
[canadian-shield-private-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-private-tls.mobileconfig
|
||||
[canadian-shield-protected-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-protected-https.mobileconfig
|
||||
[canadian-shield-protected-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-protected-tls.mobileconfig
|
||||
[canadian-shield-family-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-family-https.mobileconfig
|
||||
[canadian-shield-family-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-family-tls.mobileconfig
|
||||
[cleanbrowsing]: https://cleanbrowsing.org/filters/
|
||||
[360-default]: https://sdns.360.net/dnsPublic.html
|
||||
[360-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/360-default-https.mobileconfig
|
||||
[adguard-default]: https://adguard-dns.io/kb/general/dns-providers/#default
|
||||
[adguard-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-default-https.mobileconfig
|
||||
[adguard-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-default-tls.mobileconfig
|
||||
[adguard-family]: https://adguard-dns.io/kb/general/dns-providers/#family-protection
|
||||
[adguard-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-family-https.mobileconfig
|
||||
[adguard-family-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-family-tls.mobileconfig
|
||||
[adguard-nofilter]: https://adguard-dns.io/kb/general/dns-providers/#non-filtering
|
||||
[adguard-nofilter-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-nofilter-https.mobileconfig
|
||||
[adguard-nofilter-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-nofilter-tls.mobileconfig
|
||||
[alekberg-default]: https://alekberg.net
|
||||
[alekberg-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alekberg-default-https.mobileconfig
|
||||
[alibaba-default]: https://www.alidns.com/
|
||||
[alibaba-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-default-https.mobileconfig
|
||||
[alibaba-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-default-tls.mobileconfig
|
||||
[blahdns-cdn-adblock]: https://blahdns.com/
|
||||
[blahdns-cdn-adblock-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-adblock-https.mobileconfig
|
||||
[blahdns-cdn-unfiltered]: https://blahdns.com/
|
||||
[blahdns-cdn-unfiltered-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-unfiltered-https.mobileconfig
|
||||
[blahdns-germany]: https://blahdns.com/
|
||||
[blahdns-germany-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-germany-https.mobileconfig
|
||||
[blahdns-singapore]: https://blahdns.com/
|
||||
[blahdns-singapore-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-singapore-https.mobileconfig
|
||||
[canadianshield-private]: https://www.cira.ca/cybersecurity-services/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses
|
||||
[canadianshield-private-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-private-https.mobileconfig
|
||||
[canadianshield-private-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-private-tls.mobileconfig
|
||||
[canadianshield-protected]: https://www.cira.ca/cybersecurity-services/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses
|
||||
[canadianshield-protected-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-protected-https.mobileconfig
|
||||
[canadianshield-protected-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-protected-tls.mobileconfig
|
||||
[canadianshield-family]: https://www.cira.ca/cybersecurity-services/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses
|
||||
[canadianshield-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-family-https.mobileconfig
|
||||
[canadianshield-family-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-family-tls.mobileconfig
|
||||
[cleanbrowsing-family]: https://cleanbrowsing.org/filters/
|
||||
[cleanbrowsing-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-family-https.mobileconfig
|
||||
[cleanbrowsing-family-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-family-tls.mobileconfig
|
||||
[cleanbrowsing-adult]: https://cleanbrowsing.org/filters/
|
||||
[cleanbrowsing-adult-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-adult-https.mobileconfig
|
||||
[cleanbrowsing-adult-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-adult-tls.mobileconfig
|
||||
[cleanbrowsing-security]: https://cleanbrowsing.org/filters/
|
||||
[cleanbrowsing-security-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-security-https.mobileconfig
|
||||
[cleanbrowsing-security-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-security-tls.mobileconfig
|
||||
[cloudflare-dns]: https://developers.cloudflare.com/1.1.1.1/encryption/
|
||||
[cloudflare-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-https.mobileconfig
|
||||
[cloudflare-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-tls.mobileconfig
|
||||
[cloudflare-dns-security-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-malware-https.mobileconfig
|
||||
[cloudflare-dns-family]: https://developers.cloudflare.com/1.1.1.1/setup/#1111-for-families
|
||||
[cloudflare-dns-family-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-family-https.mobileconfig
|
||||
[dnspod-dns]: https://www.dnspod.com/products/public.dns
|
||||
[dnspod-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dnspod-https.mobileconfig
|
||||
[dnspod-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dnspod-tls.mobileconfig
|
||||
[fdn-dns]: https://www.fdn.fr/actions/dns/
|
||||
[fdn-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/fdn-https.mobileconfig
|
||||
[fdn-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/fdn-tls.mobileconfig
|
||||
[google-dns]: https://developers.google.com/speed/public-dns/docs/secure-transports
|
||||
[google-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-https.mobileconfig
|
||||
[google-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-tls.mobileconfig
|
||||
[keweondns]: https://forum.xda-developers.com/t/keweondns-info-facts-and-what-is-keweon-actually.4576651/
|
||||
[keweondns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/keweondns-https.mobileconfig
|
||||
[keweondns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/keweondns-tls.mobileconfig
|
||||
[mullvad-dns]: https://mullvad.net/help/dns-over-https-and-dns-over-tls/
|
||||
[mullvad-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/mullvad-https.mobileconfig
|
||||
[mullvad-dns-adblock-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/mullvad-adblock-https.mobileconfig
|
||||
[opendns]: https://support.opendns.com/hc/articles/360038086532
|
||||
[opendns-standard-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-https.mobileconfig
|
||||
[opendns-familyshield-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-family-https.mobileconfig
|
||||
[quad9]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/
|
||||
[quad9-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-https.mobileconfig
|
||||
[quad9-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-tls.mobileconfig
|
||||
[quad9-ecs-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-https.mobileconfig
|
||||
[quad9-ecs-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-tls.mobileconfig
|
||||
[quad9-profile-unfiltered-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-https.mobileconfig
|
||||
[quad9-profile-unfiltered-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-tls.mobileconfig
|
||||
[tiarap]: https://doh.tiar.app
|
||||
[tiarap-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-https.mobileconfig
|
||||
[tiarap-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-tls.mobileconfig
|
||||
[dns4eu]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-https.mobileconfig
|
||||
[dns4eu-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-tls.mobileconfig
|
||||
[cloudflare-default]: https://developers.cloudflare.com/1.1.1.1/encryption/
|
||||
[cloudflare-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-default-https.mobileconfig
|
||||
[cloudflare-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-default-tls.mobileconfig
|
||||
[cloudflare-malware]: https://developers.cloudflare.com/1.1.1.1/encryption/
|
||||
[cloudflare-malware-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-malware-https.mobileconfig
|
||||
[cloudflare-family]: https://developers.cloudflare.com/1.1.1.1/setup/#1111-for-families
|
||||
[cloudflare-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-family-https.mobileconfig
|
||||
[dns4eu-default]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-default-https.mobileconfig
|
||||
[dns4eu-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-default-tls.mobileconfig
|
||||
[dns4eu-malware]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-malware-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-malware-https.mobileconfig
|
||||
[dns4eu-profile-malware-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-malware-tls.mobileconfig
|
||||
[dns4eu-malware-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-malware-https.mobileconfig
|
||||
[dns4eu-malware-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-malware-tls.mobileconfig
|
||||
[dns4eu-protective-ads]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-protective-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-ads-https.mobileconfig
|
||||
[dns4eu-profile-protective-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-ads-tls.mobileconfig
|
||||
[dns4eu-protective-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-ads-https.mobileconfig
|
||||
[dns4eu-protective-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-ads-tls.mobileconfig
|
||||
[dns4eu-protective-child]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-protective-child-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-https.mobileconfig
|
||||
[dns4eu-profile-protective-child-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-tls.mobileconfig
|
||||
[dns4eu-protective-child-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-https.mobileconfig
|
||||
[dns4eu-protective-child-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-tls.mobileconfig
|
||||
[dns4eu-protective-child-ads]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-protective-child-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-https.mobileconfig
|
||||
[dns4eu-profile-protective-child-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-tls.mobileconfig
|
||||
[ffmucdns]: https://ffmuc.net/wiki/knb:dohdot_en
|
||||
[ffmuc-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmucdns-https.mobileconfig
|
||||
[ffmuc-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmucdns-tls.mobileconfig
|
||||
[360-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/360-https.mobileconfig
|
||||
[adguard-dns-default-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-https.mobileconfig
|
||||
[adguard-dns-default-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-tls.mobileconfig
|
||||
[adguard-dns-family-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-family-https.mobileconfig
|
||||
[adguard-dns-family-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-family-tls.mobileconfig
|
||||
[adguard-dns-unfiltered-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-nofilter-https.mobileconfig
|
||||
[adguard-dns-unfiltered-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-nofilter-tls.mobileconfig
|
||||
[alekberg-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alekberg-https.mobileconfig
|
||||
[aliyun-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alibaba-https.mobileconfig
|
||||
[aliyun-dns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alibaba-tls.mobileconfig
|
||||
[blahdns-cdn-filtered-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-cdn-adblock-https.mobileconfig
|
||||
[blahdns-cdn-unfiltered-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-cdn-unfiltered-https.mobileconfig
|
||||
[blahdns-germany-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-germany-https.mobileconfig
|
||||
[blahdns-singapore-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-singapore-https.mobileconfig
|
||||
[canadian-shield-private-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-private-https.mobileconfig
|
||||
[canadian-shield-private-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-private-tls.mobileconfig
|
||||
[canadian-shield-protected-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-protected-https.mobileconfig
|
||||
[canadian-shield-protected-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-protected-tls.mobileconfig
|
||||
[canadian-shield-family-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-family-https.mobileconfig
|
||||
[canadian-shield-family-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-family-tls.mobileconfig
|
||||
[dns4eu-protective-child-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-https.mobileconfig
|
||||
[dns4eu-protective-child-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-tls.mobileconfig
|
||||
[dnspod-default]: https://www.dnspod.com/products/public.dns
|
||||
[dnspod-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dnspod-default-https.mobileconfig
|
||||
[dnspod-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dnspod-default-tls.mobileconfig
|
||||
[fdn-default]: https://www.fdn.fr/actions/dns/
|
||||
[fdn-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/fdn-default-https.mobileconfig
|
||||
[fdn-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/fdn-default-tls.mobileconfig
|
||||
[ffmuc-dns-default]: https://ffmuc.net/wiki/knb:dohdot_en
|
||||
[ffmuc-dns-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmuc-dns-default-https.mobileconfig
|
||||
[ffmuc-dns-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmuc-dns-default-tls.mobileconfig
|
||||
[google-default]: https://developers.google.com/speed/public-dns/docs/secure-transports
|
||||
[google-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-default-https.mobileconfig
|
||||
[google-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-default-tls.mobileconfig
|
||||
[keweondns-default]: https://forum.xda-developers.com/t/keweondns-info-facts-and-what-is-keweon-actually.4576651/
|
||||
[keweondns-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/keweondns-default-https.mobileconfig
|
||||
[keweondns-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/keweondns-default-tls.mobileconfig
|
||||
[mullvad-default]: https://mullvad.net/help/dns-over-https-and-dns-over-tls/
|
||||
[mullvad-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/mullvad-default-https.mobileconfig
|
||||
[mullvad-adblock]: https://mullvad.net/help/dns-over-https-and-dns-over-tls/
|
||||
[mullvad-adblock-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/mullvad-adblock-https.mobileconfig
|
||||
[opendns-default]: https://support.opendns.com/hc/articles/360038086532
|
||||
[opendns-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-default-https.mobileconfig
|
||||
[opendns-family]: https://support.opendns.com/hc/articles/360038086532
|
||||
[opendns-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-family-https.mobileconfig
|
||||
[quad9-default]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/
|
||||
[quad9-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-default-https.mobileconfig
|
||||
[quad9-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-default-tls.mobileconfig
|
||||
[quad9-ECS]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/
|
||||
[quad9-ECS-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-https.mobileconfig
|
||||
[quad9-ECS-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-tls.mobileconfig
|
||||
[quad9-nofilter]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/
|
||||
[quad9-nofilter-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-https.mobileconfig
|
||||
[quad9-nofilter-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-tls.mobileconfig
|
||||
[tiarapp-default]: https://doh.tiar.app
|
||||
[tiarapp-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-default-https.mobileconfig
|
||||
[tiarapp-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-default-tls.mobileconfig
|
||||
[360-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/360-default-https.mobileconfig
|
||||
[adguard-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-https.mobileconfig
|
||||
[adguard-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-tls.mobileconfig
|
||||
[adguard-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-family-https.mobileconfig
|
||||
[adguard-family-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-family-tls.mobileconfig
|
||||
[adguard-nofilter-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-nofilter-https.mobileconfig
|
||||
[adguard-nofilter-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-nofilter-tls.mobileconfig
|
||||
[alekberg-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alekberg-default-https.mobileconfig
|
||||
[alibaba-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alibaba-default-https.mobileconfig
|
||||
[alibaba-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alibaba-default-tls.mobileconfig
|
||||
[blahdns-cdn-adblock-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-cdn-adblock-https.mobileconfig
|
||||
[blahdns-cdn-unfiltered-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-cdn-unfiltered-https.mobileconfig
|
||||
[blahdns-germany-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-germany-https.mobileconfig
|
||||
[blahdns-singapore-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-singapore-https.mobileconfig
|
||||
[canadianshield-private-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-private-https.mobileconfig
|
||||
[canadianshield-private-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-private-tls.mobileconfig
|
||||
[canadianshield-protected-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-protected-https.mobileconfig
|
||||
[canadianshield-protected-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-protected-tls.mobileconfig
|
||||
[canadianshield-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-family-https.mobileconfig
|
||||
[canadianshield-family-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-family-tls.mobileconfig
|
||||
[cleanbrowsing-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-family-https.mobileconfig
|
||||
[cleanbrowsing-family-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-family-tls.mobileconfig
|
||||
[cleanbrowsing-adult-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-adult-https.mobileconfig
|
||||
[cleanbrowsing-adult-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-adult-tls.mobileconfig
|
||||
[cleanbrowsing-security-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-security-https.mobileconfig
|
||||
[cleanbrowsing-security-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-security-tls.mobileconfig
|
||||
[cloudflare-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-https.mobileconfig
|
||||
[cloudflare-dns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-tls.mobileconfig
|
||||
[cloudflare-dns-security-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-malware-https.mobileconfig
|
||||
[cloudflare-dns-family-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-family-https.mobileconfig
|
||||
[dnspod-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dnspod-https.mobileconfig
|
||||
[dnspod-dns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dnspod-tls.mobileconfig
|
||||
[fdn-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/fdn-https.mobileconfig
|
||||
[fdn-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/fdn-tls.mobileconfig
|
||||
[google-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/google-https.mobileconfig
|
||||
[google-dns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/google-tls.mobileconfig
|
||||
[keweondns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/keweondns-https.mobileconfig
|
||||
[keweondns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/keweondns-tls.mobileconfig
|
||||
[mullvad-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/mullvad-https.mobileconfig
|
||||
[mullvad-dns-adblock-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/mullvad-adblock-https.mobileconfig
|
||||
[opendns-standard-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/opendns-https.mobileconfig
|
||||
[opendns-familyshield-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/opendns-family-https.mobileconfig
|
||||
[quad9-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-https.mobileconfig
|
||||
[quad9-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-tls.mobileconfig
|
||||
[quad9-ecs-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-ECS-https.mobileconfig
|
||||
[quad9-ecs-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-ECS-tls.mobileconfig
|
||||
[quad9-profile-unfiltered-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-nofilter-https.mobileconfig
|
||||
[quad9-profile-unfiltered-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-nofilter-tls.mobileconfig
|
||||
[tiarap-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/tiarapp-https.mobileconfig
|
||||
[tiarap-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/tiarapp-tls.mobileconfig
|
||||
[dns4eu-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-https.mobileconfig
|
||||
[dns4eu-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-tls.mobileconfig
|
||||
[dns4eu-profile-malware-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-malware-https.mobileconfig
|
||||
[dns4eu-profile-malware-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-malware-tls.mobileconfig
|
||||
[dns4eu-profile-protective-ads-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-ads-https.mobileconfig
|
||||
[dns4eu-profile-protective-ads-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-ads-tls.mobileconfig
|
||||
[dns4eu-profile-protective-child-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-https.mobileconfig
|
||||
[dns4eu-profile-protective-child-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-tls.mobileconfig
|
||||
[dns4eu-profile-protective-child-ads-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-ads-https.mobileconfig
|
||||
[dns4eu-profile-protective-child-ads-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-ads-tls.mobileconfig
|
||||
[ffmuc-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/ffmucdns-https.mobileconfig
|
||||
[ffmuc-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/ffmucdns-tls.mobileconfig
|
||||
[cloudflare-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-default-https.mobileconfig
|
||||
[cloudflare-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-default-tls.mobileconfig
|
||||
[cloudflare-malware-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-malware-https.mobileconfig
|
||||
[cloudflare-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-family-https.mobileconfig
|
||||
[dns4eu-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-default-https.mobileconfig
|
||||
[dns4eu-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-default-tls.mobileconfig
|
||||
[dns4eu-malware-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-malware-https.mobileconfig
|
||||
[dns4eu-malware-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-malware-tls.mobileconfig
|
||||
[dns4eu-protective-ads-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-ads-https.mobileconfig
|
||||
[dns4eu-protective-ads-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-ads-tls.mobileconfig
|
||||
[dns4eu-protective-child-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-https.mobileconfig
|
||||
[dns4eu-protective-child-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-tls.mobileconfig
|
||||
[dns4eu-protective-child-ads-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-ads-https.mobileconfig
|
||||
[dns4eu-protective-child-ads-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-ads-tls.mobileconfig
|
||||
[dnspod-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dnspod-default-https.mobileconfig
|
||||
[dnspod-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dnspod-default-tls.mobileconfig
|
||||
[fdn-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/fdn-default-https.mobileconfig
|
||||
[fdn-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/fdn-default-tls.mobileconfig
|
||||
[ffmuc-dns-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/ffmuc-dns-default-https.mobileconfig
|
||||
[ffmuc-dns-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/ffmuc-dns-default-tls.mobileconfig
|
||||
[google-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/google-default-https.mobileconfig
|
||||
[google-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/google-default-tls.mobileconfig
|
||||
[keweondns-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/keweondns-default-https.mobileconfig
|
||||
[keweondns-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/keweondns-default-tls.mobileconfig
|
||||
[mullvad-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/mullvad-default-https.mobileconfig
|
||||
[mullvad-adblock-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/mullvad-adblock-https.mobileconfig
|
||||
[opendns-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/opendns-default-https.mobileconfig
|
||||
[opendns-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/opendns-family-https.mobileconfig
|
||||
[quad9-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-default-https.mobileconfig
|
||||
[quad9-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-default-tls.mobileconfig
|
||||
[quad9-ECS-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-ECS-https.mobileconfig
|
||||
[quad9-ECS-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-ECS-tls.mobileconfig
|
||||
[quad9-nofilter-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-nofilter-https.mobileconfig
|
||||
[quad9-nofilter-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-nofilter-tls.mobileconfig
|
||||
[tiarapp-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/tiarapp-default-https.mobileconfig
|
||||
[tiarapp-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/tiarapp-default-tls.mobileconfig
|
||||
|
||||
@@ -25,45 +25,45 @@ Mac:
|
||||
|
||||
Censorship (also known as "filtering") means the profile will not send true information about `hostname=IP` relation for some hosts.
|
||||
|
||||
| Name | Region | Censorship | Notes | Install | Install (unsigned) |
|
||||
| ------------------------------------------------------------------------------------ | ------ | ---------- | --------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------- |
|
||||
| [360 Security DNS][360-dns] | 🇨🇳 | Yes | Operated by 360 Digital Security Group | [HTTPS][360-dns-profile-https-signed] | [HTTPS][360-dns-profile-https] |
|
||||
| [AdGuard DNS Default][adguard-dns-default] | 🇷🇺 | Yes | Operated by AdGuard Software Ltd. Blocks ads, tracking & phishing | [HTTPS][adguard-dns-default-profile-https-signed], [TLS][adguard-dns-default-profile-tls-signed] | [HTTPS][adguard-dns-default-profile-https], [TLS][adguard-dns-default-profile-tls] |
|
||||
| [AdGuard DNS Family Protection][adguard-dns-family] | 🇷🇺 | Yes | Operated by AdGuard Software Ltd. Blocks `Default` + malware & adult content | [HTTPS][adguard-dns-family-profile-https-signed], [TLS][adguard-dns-family-profile-tls-signed] | [HTTPS][adguard-dns-family-profile-https], [TLS][adguard-dns-family-profile-tls] |
|
||||
| [AdGuard DNS Non-filtering][adguard-dns-unfiltered] | 🇷🇺 | No | Operated by AdGuard Software Ltd. Non-filtering | [HTTPS][adguard-dns-unfiltered-profile-https-signed], [TLS][adguard-dns-unfiltered-profile-tls-signed] | [HTTPS][adguard-dns-unfiltered-profile-https], [TLS][adguard-dns-unfiltered-profile-tls] |
|
||||
| [Alekberg Encrypted DNS][alekberg-dns] | 🇳🇱 | No | Independent | [HTTPS][alekberg-dns-profile-https-signed] | [HTTPS][alekberg-dns-profile-https] |
|
||||
| [Aliyun Public DNS][aliyun-dns] | 🇨🇳 | No | Operated by Alibaba Cloud Ltd. | [HTTPS][aliyun-dns-profile-https-signed], [TLS][aliyun-dns-profile-tls-signed] | [HTTPS][aliyun-dns-profile-https], [TLS][aliyun-dns-profile-tls] |
|
||||
| [BlahDNS CDN Filtered][blahdns] | 🇺🇸 | Yes | Independent. Blocks ads, tracking & malware | [HTTPS][blahdns-cdn-filtered-profile-https-signed] | [HTTPS][blahdns-cdn-filtered-profile-https] |
|
||||
| [BlahDNS CDN Unfiltered][blahdns] | 🇺🇸 | No | Independent. Non-filtering | [HTTPS][blahdns-cdn-unfiltered-profile-https-signed] | [HTTPS][blahdns-cdn-unfiltered-profile-https] |
|
||||
| [BlahDNS Germany][blahdns] | 🇩🇪 | Yes | Independent. Blocks ads, tracking & malware | [HTTPS][blahdns-germany-profile-https-signed] | [HTTPS][blahdns-germany-profile-https] |
|
||||
| [BlahDNS Singapore][blahdns] | 🇸🇬 | Yes | Independent. Blocks ads, tracking & malware | [HTTPS][blahdns-singapore-profile-https-signed] | [HTTPS][blahdns-singapore-profile-https] |
|
||||
| [Canadian Shield Private][canadian-shield] | 🇨🇦 | No | Operated by the Canadian Internet Registration Authority (CIRA) | [HTTPS][canadian-shield-private-profile-https-signed], [TLS][canadian-shield-private-profile-tls-signed] | [HTTPS][canadian-shield-private-profile-https], [TLS][canadian-shield-private-profile-tls] |
|
||||
| [Canadian Shield Protected][canadian-shield] | 🇨🇦 | Yes | Operated by the Canadian Internet Registration Authority (CIRA). Blocks malware & phishing | [HTTPS][canadian-shield-protected-profile-https-signed], [TLS][canadian-shield-protected-profile-tls-signed] | [HTTPS][canadian-shield-protected-profile-https], [TLS][canadian-shield-protected-profile-tls] |
|
||||
| [Canadian Shield Family][canadian-shield] | 🇨🇦 | Yes | Operated by the Canadian Internet Registration Authority (CIRA). Blocks malware, phishing & adult content | [HTTPS][canadian-shield-family-profile-https-signed], [TLS][canadian-shield-family-profile-tls-signed] | [HTTPS][canadian-shield-family-profile-https], [TLS][canadian-shield-family-profile-tls] |
|
||||
| [Cleanbrowsing Family Filter][cleanbrowsing] | 🇺🇸 | Yes | Filters malware & adult, mixed content | [HTTPS][cleanbrowsing-family-https-signed], [TLS][cleanbrowsing-family-tls-signed] | [HTTPS][cleanbrowsing-family-https], [TLS][cleanbrowsing-family-tls] |
|
||||
| [Cleanbrowsing Adult Filter][cleanbrowsing] | 🇺🇸 | Yes | Filters malware & adult content | [HTTPS][cleanbrowsing-adult-https-signed], [TLS][cleanbrowsing-adult-tls-signed] | [HTTPS][cleanbrowsing-adult-https], [TLS][cleanbrowsing-adult-tls] |
|
||||
| [Cleanbrowsing Security Filter][cleanbrowsing] | 🇺🇸 | Yes | Filters malware | [HTTPS][cleanbrowsing-security-https-signed], [TLS][cleanbrowsing-security-tls-signed] | [HTTPS][cleanbrowsing-security-https], [TLS][cleanbrowsing-security-tls] |
|
||||
| [Cloudflare 1.1.1.1][cloudflare-dns] | 🇺🇸 | No | Operated by Cloudflare Inc. | [HTTPS][cloudflare-dns-profile-https-signed], [TLS][cloudflare-dns-profile-tls-signed] | [HTTPS][cloudflare-dns-profile-https], [TLS][cloudflare-dns-profile-tls] |
|
||||
| [Cloudflare 1.1.1.1 Security][cloudflare-dns-family] | 🇺🇸 | Yes | Operated by Cloudflare Inc. Blocks malware & phishing | [HTTPS][cloudflare-dns-security-profile-https-signed] | [HTTPS][cloudflare-dns-security-profile-https] |
|
||||
| [Cloudflare 1.1.1.1 Family][cloudflare-dns-family] | 🇺🇸 | Yes | Operated by Cloudflare Inc. Blocks malware, phishing & adult content | [HTTPS][cloudflare-dns-family-profile-https-signed] | [HTTPS][cloudflare-dns-family-profile-https] |
|
||||
| [DNS4EU][dns4eu] | 🇨🇿 | No | Operated by a consortium lead by Whalebone. | [HTTPS][dns4eu-profile-https-signed], [TLS][dns4eu-profile-tls-signed] | [HTTPS][dns4eu-profile-https], [TLS][dns4eu-profile-tls] |
|
||||
| [DNS4EU Protective][dns4eu-malware] | 🇨🇿 | Yes | Operated by a consortium lead by Whalebone. Blocks Malware. | [HTTPS][dns4eu-profile-malware-https-signed], [TLS][dns4eu-profile-malware-tls-signed] | [HTTPS][dns4eu-profile-malware-https], [TLS][dns4eu-profile-malware-tls] |
|
||||
| [DNS4EU Protective ad-blocking][dns4eu-protective-ads] | 🇨🇿 | Yes | Operated by a consortium lead by Whalebone. Blocks Malware and Ads | [HTTPS][dns4eu-profile-protective-ads-https-signed], [TLS][dns4eu-profile-protective-ads-tls-signed] | [HTTPS][dns4eu-profile-protective-ads-https], [TLS][dns4eu-profile-protective-ads-tls] |
|
||||
| [DNS4EU Protective with child protection][dns4eu-protective-child] | 🇨🇿 | Yes | Operated by a consortium lead by Whalebone. Blocks malware and explicit content. | [HTTPS][dns4eu-profile-protective-child-https-signed], [TLS][dns4eu-profile-protective-child-tls-signed] | [HTTPS][dns4eu-profile-protective-child-https], [TLS][dns4eu-profile-protective-child-tls] |
|
||||
| [DNS4EU Protective with child protection & ad-blocking][dns4eu-protective-child-ads] | 🇨🇿 | Yes | Operated by a consortium lead by Whalebone. Blocks Malware, Ads and explicit content | [HTTPS][dns4eu-profile-protective-child-ads-https-signed], [TLS][dns4eu-profile-protective-child-ads-tls-signed] | [HTTPS][dns4eu-profile-protective-child-ads-https], [TLS][dns4eu-profile-protective-child-ads-tls] |
|
||||
| [DNSPod Public DNS][dnspod-dns] | 🇨🇳 | No | Operated by DNSPod Inc., a Tencent Cloud Company | [HTTPS][dnspod-dns-profile-https-signed], [TLS][dnspod-dns-profile-tls-signed] | [HTTPS][dnspod-dns-profile-https], [TLS][dnspod-dns-profile-tls] |
|
||||
| [FDN][fdn-dns] | 🇫🇷 | No | Operated by French Data Network | [HTTPS][fdn-https-signed], [TLS][fdn-tls-signed] | [HTTPS][fdn-https], [TLS][fdn-tls] |
|
||||
| [FFMUC-DNS][ffmucdns] | 🇩🇪 | No | FFMUC free DNS servers provided by Freifunk München. | [HTTPS][ffmuc-profile-https-signed], [TLS][ffmuc-profile-tls-signed] | [HTTPS][ffmuc-profile-https], [TLS][ffmuc-profile-tls] |
|
||||
| [Google Public DNS][google-dns] | 🇺🇸 | No | Operated by Google LLC | [HTTPS][google-dns-profile-https-signed], [TLS][google-dns-profile-tls-signed] | [HTTPS][google-dns-profile-https], [TLS][google-dns-profile-tls] |
|
||||
| [keweonDNS][keweondns] | 🇩🇪 | No | Operated by Aviontex. Blocks ads & tracking | [HTTPS][keweondns-profile-https-signed], [TLS][keweondns-profile-tls-signed] | [HTTPS][keweondns-profile-https], [TLS][keweondns-profile-tls] |
|
||||
| [Mullvad DNS][mullvad-dns] | 🇸🇪 | Yes | Operated by Mullvad VPN AB | [HTTPS][mullvad-dns-profile-https-signed] | [HTTPS][mullvad-dns-profile-https] |
|
||||
| [Mullvad DNS Adblock][mullvad-dns] | 🇸🇪 | Yes | Operated by Mullvad VPN AB. Blocks ads & tracking | [HTTPS][mullvad-dns-adblock-profile-https-signed] | [HTTPS][mullvad-dns-adblock-profile-https] |
|
||||
| [OpenDNS Standard][opendns] | 🇺🇸 | No | Operated by Cisco OpenDNS LLC | [HTTPS][opendns-standard-profile-https-signed] | [HTTPS][opendns-standard-profile-https] |
|
||||
| [OpenDNS FamilyShield][opendns] | 🇺🇸 | Yes | Operated by Cisco OpenDNS LLC. Blocks malware & adult content | [HTTPS][opendns-familyshield-profile-https-signed] | [HTTPS][opendns-familyshield-profile-https] |
|
||||
| [Quad9][quad9] | 🇨🇭 | Yes | Operated by Quad9 Foundation. Blocks malware | [HTTPS][quad9-profile-https-signed], [TLS][quad9-profile-tls-signed] | [HTTPS][quad9-profile-https], [TLS][quad9-profile-tls] |
|
||||
| [Quad9 w/ ECS][quad9] | 🇨🇭 | Yes | Operated by Quad9 Foundation. Supports ECS. Blocks malware | [HTTPS][quad9-ecs-profile-https-signed], [TLS][quad9-ecs-profile-tls-signed] | [HTTPS][quad9-ecs-profile-https], [TLS][quad9-ecs-profile-tls] |
|
||||
| [Quad9 Unfiltered][quad9] | 🇨🇭 | No | Operated by Quad9 Foundation. | [HTTPS][quad9-profile-unfiltered-https-signed], [TLS][quad9-profile-unfiltered-tls-signed] | [HTTPS][quad9-profile-unfiltered-https], [TLS][quad9-profile-unfiltered-tls] |
|
||||
| [Tiarap][tiarap] | 🇸🇬 🇺🇸 | Yes | Operated by Tiarap Inc. Blocks ads, tracking, phising & malware | [HTTPS][tiarap-profile-https-signed], [TLS][tiarap-profile-tls-signed] | [HTTPS][tiarap-profile-https], [TLS][tiarap-profile-tls] |
|
||||
| Name | Region | Censorship | Notes | Install | Install (unsigned) |
|
||||
| ------------------------------------------------------------------------------------ | ------ | ---------- | --------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------ | ---------------------------------------------------------------------------------- |
|
||||
| [360 Security DNS][360-default] | 🇨🇳 | Yes | Operated by 360 Digital Security Group | [HTTPS][360-default-https-signed] | [HTTPS][360-default-https] |
|
||||
| [AdGuard DNS Default][adguard-default] | 🇷🇺 | Yes | Operated by AdGuard Software Ltd. Blocks ads, tracking & phishing | [HTTPS][adguard-default-https-signed], [TLS][adguard-default-tls-signed] | [HTTPS][adguard-default-https], [TLS][adguard-default-tls] |
|
||||
| [AdGuard DNS Family Protection][adguard-family] | 🇷🇺 | Yes | Operated by AdGuard Software Ltd. Blocks `Default` + malware & adult content | [HTTPS][adguard-family-https-signed], [TLS][adguard-family-tls-signed] | [HTTPS][adguard-family-https], [TLS][adguard-family-tls] |
|
||||
| [AdGuard DNS Non-filtering][adguard-nofilter] | 🇷🇺 | No | Operated by AdGuard Software Ltd. Non-filtering | [HTTPS][adguard-nofilter-https-signed], [TLS][adguard-nofilter-tls-signed] | [HTTPS][adguard-nofilter-https], [TLS][adguard-nofilter-tls] |
|
||||
| [Alekberg Encrypted DNS][alekberg-default] | 🇳🇱 | No | Independent | [HTTPS][alekberg-default-https-signed] | [HTTPS][alekberg-default-https] |
|
||||
| [Aliyun Public DNS][alibaba-default] | 🇨🇳 | No | Operated by Alibaba Cloud Ltd. | [HTTPS][alibaba-default-https-signed], [TLS][alibaba-default-tls-signed] | [HTTPS][alibaba-default-https], [TLS][alibaba-default-tls] |
|
||||
| [BlahDNS CDN Filtered][blahdns-cdn-adblock] | 🇺🇸 | Yes | Independent. Blocks ads, tracking & malware | [HTTPS][blahdns-cdn-adblock-https-signed] | [HTTPS][blahdns-cdn-adblock-https] |
|
||||
| [BlahDNS CDN Unfiltered][blahdns-cdn-unfiltered] | 🇺🇸 | No | Independent. Non-filtering | [HTTPS][blahdns-cdn-unfiltered-https-signed] | [HTTPS][blahdns-cdn-unfiltered-https] |
|
||||
| [BlahDNS Germany][blahdns-germany] | 🇩🇪 | Yes | Independent. Blocks ads, tracking & malware | [HTTPS][blahdns-germany-https-signed] | [HTTPS][blahdns-germany-https] |
|
||||
| [BlahDNS Singapore][blahdns-singapore] | 🇸🇬 | Yes | Independent. Blocks ads, tracking & malware | [HTTPS][blahdns-singapore-https-signed] | [HTTPS][blahdns-singapore-https] |
|
||||
| [Canadian Shield Private][canadianshield-private] | 🇨🇦 | No | Operated by the Canadian Internet Registration Authority (CIRA) | [HTTPS][canadianshield-private-https-signed], [TLS][canadianshield-private-tls-signed] | [HTTPS][canadianshield-private-https], [TLS][canadianshield-private-tls] |
|
||||
| [Canadian Shield Protected][canadianshield-protected] | 🇨🇦 | Yes | Operated by the Canadian Internet Registration Authority (CIRA). Blocks malware & phishing | [HTTPS][canadianshield-protected-https-signed], [TLS][canadianshield-protected-tls-signed] | [HTTPS][canadianshield-protected-https], [TLS][canadianshield-protected-tls] |
|
||||
| [Canadian Shield Family][canadianshield-family] | 🇨🇦 | Yes | Operated by the Canadian Internet Registration Authority (CIRA). Blocks malware, phishing & adult content | [HTTPS][canadianshield-family-https-signed], [TLS][canadianshield-family-tls-signed] | [HTTPS][canadianshield-family-https], [TLS][canadianshield-family-tls] |
|
||||
| [Cleanbrowsing Family Filter][cleanbrowsing-family] | 🇺🇸 | Yes | Filters malware & adult, mixed content | [HTTPS][cleanbrowsing-family-https-signed], [TLS][cleanbrowsing-family-tls-signed] | [HTTPS][cleanbrowsing-family-https], [TLS][cleanbrowsing-family-tls] |
|
||||
| [Cleanbrowsing Adult Filter][cleanbrowsing-adult] | 🇺🇸 | Yes | Filters malware & adult content | [HTTPS][cleanbrowsing-adult-https-signed], [TLS][cleanbrowsing-adult-tls-signed] | [HTTPS][cleanbrowsing-adult-https], [TLS][cleanbrowsing-adult-tls] |
|
||||
| [Cleanbrowsing Security Filter][cleanbrowsing-security] | 🇺🇸 | Yes | Filters malware | [HTTPS][cleanbrowsing-security-https-signed], [TLS][cleanbrowsing-security-tls-signed] | [HTTPS][cleanbrowsing-security-https], [TLS][cleanbrowsing-security-tls] |
|
||||
| [Cloudflare 1.1.1.1][cloudflare-default] | 🇺🇸 | No | Operated by Cloudflare Inc. | [HTTPS][cloudflare-default-https-signed], [TLS][cloudflare-default-tls-signed] | [HTTPS][cloudflare-default-https], [TLS][cloudflare-default-tls] |
|
||||
| [Cloudflare 1.1.1.1 Security][cloudflare-malware] | 🇺🇸 | Yes | Operated by Cloudflare Inc. Blocks malware & phishing | [HTTPS][cloudflare-malware-https-signed] | [HTTPS][cloudflare-malware-https] |
|
||||
| [Cloudflare 1.1.1.1 Family][cloudflare-family] | 🇺🇸 | Yes | Operated by Cloudflare Inc. Blocks malware, phishing & adult content | [HTTPS][cloudflare-family-https-signed] | [HTTPS][cloudflare-family-https] |
|
||||
| [DNS4EU][dns4eu-default] | 🇨🇿 | No | Operated by a consortium lead by Whalebone. | [HTTPS][dns4eu-default-https-signed], [TLS][dns4eu-default-tls-signed] | [HTTPS][dns4eu-default-https], [TLS][dns4eu-default-tls] |
|
||||
| [DNS4EU Protective][dns4eu-malware] | 🇨🇿 | Yes | Operated by a consortium lead by Whalebone. Blocks Malware. | [HTTPS][dns4eu-malware-https-signed], [TLS][dns4eu-malware-tls-signed] | [HTTPS][dns4eu-malware-https], [TLS][dns4eu-malware-tls] |
|
||||
| [DNS4EU Protective ad-blocking][dns4eu-protective-ads] | 🇨🇿 | Yes | Operated by a consortium lead by Whalebone. Blocks Malware and Ads | [HTTPS][dns4eu-protective-ads-https-signed], [TLS][dns4eu-protective-ads-tls-signed] | [HTTPS][dns4eu-protective-ads-https], [TLS][dns4eu-protective-ads-tls] |
|
||||
| [DNS4EU Protective with child protection][dns4eu-protective-child] | 🇨🇿 | Yes | Operated by a consortium lead by Whalebone. Blocks malware and explicit content. | [HTTPS][dns4eu-protective-child-https-signed], [TLS][dns4eu-protective-child-tls-signed] | [HTTPS][dns4eu-protective-child-https], [TLS][dns4eu-protective-child-tls] |
|
||||
| [DNS4EU Protective with child protection & ad-blocking][dns4eu-protective-child-ads] | 🇨🇿 | Yes | Operated by a consortium lead by Whalebone. Blocks Malware, Ads and explicit content | [HTTPS][dns4eu-protective-child-ads-https-signed], [TLS][dns4eu-protective-child-ads-tls-signed] | [HTTPS][dns4eu-protective-child-ads-https], [TLS][dns4eu-protective-child-ads-tls] |
|
||||
| [DNSPod Public DNS][dnspod-default] | 🇨🇳 | No | Operated by DNSPod Inc., a Tencent Cloud Company | [HTTPS][dnspod-default-https-signed], [TLS][dnspod-default-tls-signed] | [HTTPS][dnspod-default-https], [TLS][dnspod-default-tls] |
|
||||
| [FDN][fdn-default] | 🇫🇷 | No | Operated by French Data Network | [HTTPS][fdn-default-https-signed], [TLS][fdn-default-tls-signed] | [HTTPS][fdn-default-https], [TLS][fdn-default-tls] |
|
||||
| [FFMUC-DNS][ffmuc-dns-default] | 🇩🇪 | No | FFMUC free DNS servers provided by Freifunk München. | [HTTPS][ffmuc-dns-default-https-signed], [TLS][ffmuc-dns-default-tls-signed] | [HTTPS][ffmuc-dns-default-https], [TLS][ffmuc-dns-default-tls] |
|
||||
| [Google Public DNS][google-default] | 🇺🇸 | No | Operated by Google LLC | [HTTPS][google-default-https-signed], [TLS][google-default-tls-signed] | [HTTPS][google-default-https], [TLS][google-default-tls] |
|
||||
| [keweonDNS][keweondns-default] | 🇩🇪 | No | Operated by Aviontex. Blocks ads & tracking | [HTTPS][keweondns-default-https-signed], [TLS][keweondns-default-tls-signed] | [HTTPS][keweondns-default-https], [TLS][keweondns-default-tls] |
|
||||
| [Mullvad DNS][mullvad-default] | 🇸🇪 | Yes | Operated by Mullvad VPN AB | [HTTPS][mullvad-default-https-signed] | [HTTPS][mullvad-default-https] |
|
||||
| [Mullvad DNS Adblock][mullvad-adblock] | 🇸🇪 | Yes | Operated by Mullvad VPN AB. Blocks ads & tracking | [HTTPS][mullvad-adblock-https-signed] | [HTTPS][mullvad-adblock-https] |
|
||||
| [OpenDNS Standard][opendns-default] | 🇺🇸 | No | Operated by Cisco OpenDNS LLC | [HTTPS][opendns-default-https-signed] | [HTTPS][opendns-default-https] |
|
||||
| [OpenDNS FamilyShield][opendns-family] | 🇺🇸 | Yes | Operated by Cisco OpenDNS LLC. Blocks malware & adult content | [HTTPS][opendns-family-https-signed] | [HTTPS][opendns-family-https] |
|
||||
| [Quad9][quad9-default] | 🇨🇭 | Yes | Operated by Quad9 Foundation. Blocks malware | [HTTPS][quad9-default-https-signed], [TLS][quad9-default-tls-signed] | [HTTPS][quad9-default-https], [TLS][quad9-default-tls] |
|
||||
| [Quad9 w/ ECS][quad9-ECS] | 🇨🇭 | Yes | Operated by Quad9 Foundation. Supports ECS. Blocks malware | [HTTPS][quad9-ECS-https-signed], [TLS][quad9-ECS-tls-signed] | [HTTPS][quad9-ECS-https], [TLS][quad9-ECS-tls] |
|
||||
| [Quad9 Unfiltered][quad9-nofilter] | 🇨🇭 | No | Operated by Quad9 Foundation. | [HTTPS][quad9-nofilter-https-signed], [TLS][quad9-nofilter-tls-signed] | [HTTPS][quad9-nofilter-https], [TLS][quad9-nofilter-tls] |
|
||||
| [Tiarap][tiarapp-default] | 🇸🇬 🇺🇸 | Yes | Operated by Tiarap Inc. Blocks ads, tracking, phising & malware | [HTTPS][tiarapp-default-https-signed], [TLS][tiarapp-default-tls-signed] | [HTTPS][tiarapp-default-https], [TLS][tiarapp-default-tls] |
|
||||
|
||||
## Known issues
|
||||
|
||||
@@ -102,163 +102,174 @@ Censorship (also known as "filtering") means the profile will not send true info
|
||||
- `npm run new` - interactively creates new profile from CLI options. Can also be ran with flags.
|
||||
- `scripts/new.test.ts` includes CLI snapshot tests and a PTY interactive flow test.
|
||||
- PTY test runs by default; set `NEW_TEST_PTY=0` to opt out.
|
||||
- `node scripts/sign-single.ts --ca cert.pem --priv_key key.pem [--chain chain.pem] path.mobileconfig` - sings single mobileconfig
|
||||
- `node scripts/sign-single-openssl.ts --ca cert.pem --priv_key key.pem [--chain chain.pem] path.mobileconfig` Sign one `.mobileconfig` using OpenSSL.
|
||||
- `src/scripts/sign-single.ts --ca cert.pem --priv_key key.pem [--chain chain.pem] path.mobileconfig` - sings single mobileconfig
|
||||
- `src/scripts/sign-single-openssl.ts --ca cert.pem --priv_key key.pem [--chain chain.pem] path.mobileconfig` Sign one `.mobileconfig` using OpenSSL.
|
||||
- Uses `-nosmimecap` to match local CMS signing policy.
|
||||
- `node scripts/detach.ts signed.mobileconfig` - detach CMS signature from signed profile and print PEM to stdout.
|
||||
- `node test/sign-single.test.ts` - Parity check for `sign-single.ts` vs `sign-single-openssl.sh`.
|
||||
- Runs under `npm run test`.
|
||||
- `src/scripts/detach.ts signed.mobileconfig` - detach CMS signature from signed profile and print PEM to stdout.
|
||||
- `npm run test` - Parity check for `sign-single.ts` vs `sign-single-openssl.sh`.
|
||||
- Generates temporary test root/signer certificates and keys via OpenSSL.
|
||||
- Signs the same profile with `scripts/sign.ts` and `scripts/sign_openssl.sh`.
|
||||
- Verifies detached content and embedded certificate set parity.
|
||||
|
||||
[360-dns]: https://sdns.360.net/dnsPublic.html
|
||||
[360-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/360-https.mobileconfig
|
||||
[adguard-dns-default]: https://adguard-dns.io/kb/general/dns-providers/#default
|
||||
[adguard-dns-default-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-default-https.mobileconfig
|
||||
[adguard-dns-default-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-default-tls.mobileconfig
|
||||
[adguard-dns-family]: https://adguard-dns.io/kb/general/dns-providers/#family-protection
|
||||
[adguard-dns-family-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-family-https.mobileconfig
|
||||
[adguard-dns-family-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-family-tls.mobileconfig
|
||||
[adguard-dns-unfiltered]: https://adguard-dns.io/kb/general/dns-providers/#non-filtering
|
||||
[adguard-dns-unfiltered-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-nofilter-https.mobileconfig
|
||||
[adguard-dns-unfiltered-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-nofilter-tls.mobileconfig
|
||||
[alekberg-dns]: https://alekberg.net
|
||||
[alekberg-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alekberg-https.mobileconfig
|
||||
[aliyun-dns]: https://www.alidns.com/
|
||||
[aliyun-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-https.mobileconfig
|
||||
[aliyun-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-tls.mobileconfig
|
||||
[blahdns]: https://blahdns.com/
|
||||
[blahdns-cdn-filtered-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-adblock-https.mobileconfig
|
||||
[blahdns-cdn-unfiltered-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-unfiltered-https.mobileconfig
|
||||
[blahdns-germany-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-germany-https.mobileconfig
|
||||
[blahdns-singapore-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-singapore-https.mobileconfig
|
||||
[canadian-shield]: https://www.cira.ca/cybersecurity-services/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses
|
||||
[canadian-shield-private-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-private-https.mobileconfig
|
||||
[canadian-shield-private-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-private-tls.mobileconfig
|
||||
[canadian-shield-protected-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-protected-https.mobileconfig
|
||||
[canadian-shield-protected-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-protected-tls.mobileconfig
|
||||
[canadian-shield-family-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-family-https.mobileconfig
|
||||
[canadian-shield-family-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-family-tls.mobileconfig
|
||||
[cleanbrowsing]: https://cleanbrowsing.org/filters/
|
||||
[360-default]: https://sdns.360.net/dnsPublic.html
|
||||
[360-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/360-default-https.mobileconfig
|
||||
[adguard-default]: https://adguard-dns.io/kb/general/dns-providers/#default
|
||||
[adguard-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-default-https.mobileconfig
|
||||
[adguard-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-default-tls.mobileconfig
|
||||
[adguard-family]: https://adguard-dns.io/kb/general/dns-providers/#family-protection
|
||||
[adguard-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-family-https.mobileconfig
|
||||
[adguard-family-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-family-tls.mobileconfig
|
||||
[adguard-nofilter]: https://adguard-dns.io/kb/general/dns-providers/#non-filtering
|
||||
[adguard-nofilter-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-nofilter-https.mobileconfig
|
||||
[adguard-nofilter-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/adguard-nofilter-tls.mobileconfig
|
||||
[alekberg-default]: https://alekberg.net
|
||||
[alekberg-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alekberg-default-https.mobileconfig
|
||||
[alibaba-default]: https://www.alidns.com/
|
||||
[alibaba-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-default-https.mobileconfig
|
||||
[alibaba-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/alibaba-default-tls.mobileconfig
|
||||
[blahdns-cdn-adblock]: https://blahdns.com/
|
||||
[blahdns-cdn-adblock-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-adblock-https.mobileconfig
|
||||
[blahdns-cdn-unfiltered]: https://blahdns.com/
|
||||
[blahdns-cdn-unfiltered-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-cdn-unfiltered-https.mobileconfig
|
||||
[blahdns-germany]: https://blahdns.com/
|
||||
[blahdns-germany-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-germany-https.mobileconfig
|
||||
[blahdns-singapore]: https://blahdns.com/
|
||||
[blahdns-singapore-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/blahdns-singapore-https.mobileconfig
|
||||
[canadianshield-private]: https://www.cira.ca/cybersecurity-services/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses
|
||||
[canadianshield-private-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-private-https.mobileconfig
|
||||
[canadianshield-private-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-private-tls.mobileconfig
|
||||
[canadianshield-protected]: https://www.cira.ca/cybersecurity-services/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses
|
||||
[canadianshield-protected-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-protected-https.mobileconfig
|
||||
[canadianshield-protected-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-protected-tls.mobileconfig
|
||||
[canadianshield-family]: https://www.cira.ca/cybersecurity-services/canadian-shield/configure/summary-cira-canadian-shield-dns-resolver-addresses
|
||||
[canadianshield-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-family-https.mobileconfig
|
||||
[canadianshield-family-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/canadianshield-family-tls.mobileconfig
|
||||
[cleanbrowsing-family]: https://cleanbrowsing.org/filters/
|
||||
[cleanbrowsing-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-family-https.mobileconfig
|
||||
[cleanbrowsing-family-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-family-tls.mobileconfig
|
||||
[cleanbrowsing-adult]: https://cleanbrowsing.org/filters/
|
||||
[cleanbrowsing-adult-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-adult-https.mobileconfig
|
||||
[cleanbrowsing-adult-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-adult-tls.mobileconfig
|
||||
[cleanbrowsing-security]: https://cleanbrowsing.org/filters/
|
||||
[cleanbrowsing-security-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-security-https.mobileconfig
|
||||
[cleanbrowsing-security-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cleanbrowsing-security-tls.mobileconfig
|
||||
[cloudflare-dns]: https://developers.cloudflare.com/1.1.1.1/encryption/
|
||||
[cloudflare-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-https.mobileconfig
|
||||
[cloudflare-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-tls.mobileconfig
|
||||
[cloudflare-dns-security-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-malware-https.mobileconfig
|
||||
[cloudflare-dns-family]: https://developers.cloudflare.com/1.1.1.1/setup/#1111-for-families
|
||||
[cloudflare-dns-family-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-family-https.mobileconfig
|
||||
[dnspod-dns]: https://www.dnspod.com/products/public.dns
|
||||
[dnspod-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dnspod-https.mobileconfig
|
||||
[dnspod-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dnspod-tls.mobileconfig
|
||||
[fdn-dns]: https://www.fdn.fr/actions/dns/
|
||||
[fdn-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/fdn-https.mobileconfig
|
||||
[fdn-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/fdn-tls.mobileconfig
|
||||
[google-dns]: https://developers.google.com/speed/public-dns/docs/secure-transports
|
||||
[google-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-https.mobileconfig
|
||||
[google-dns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-tls.mobileconfig
|
||||
[keweondns]: https://forum.xda-developers.com/t/keweondns-info-facts-and-what-is-keweon-actually.4576651/
|
||||
[keweondns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/keweondns-https.mobileconfig
|
||||
[keweondns-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/keweondns-tls.mobileconfig
|
||||
[mullvad-dns]: https://mullvad.net/help/dns-over-https-and-dns-over-tls/
|
||||
[mullvad-dns-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/mullvad-https.mobileconfig
|
||||
[mullvad-dns-adblock-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/mullvad-adblock-https.mobileconfig
|
||||
[opendns]: https://support.opendns.com/hc/articles/360038086532
|
||||
[opendns-standard-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-https.mobileconfig
|
||||
[opendns-familyshield-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-family-https.mobileconfig
|
||||
[quad9]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/
|
||||
[quad9-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-https.mobileconfig
|
||||
[quad9-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-tls.mobileconfig
|
||||
[quad9-ecs-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-https.mobileconfig
|
||||
[quad9-ecs-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-tls.mobileconfig
|
||||
[quad9-profile-unfiltered-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-https.mobileconfig
|
||||
[quad9-profile-unfiltered-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-tls.mobileconfig
|
||||
[tiarap]: https://doh.tiar.app
|
||||
[tiarap-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-https.mobileconfig
|
||||
[tiarap-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-tls.mobileconfig
|
||||
[dns4eu]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-https.mobileconfig
|
||||
[dns4eu-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-tls.mobileconfig
|
||||
[cloudflare-default]: https://developers.cloudflare.com/1.1.1.1/encryption/
|
||||
[cloudflare-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-default-https.mobileconfig
|
||||
[cloudflare-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-default-tls.mobileconfig
|
||||
[cloudflare-malware]: https://developers.cloudflare.com/1.1.1.1/encryption/
|
||||
[cloudflare-malware-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-malware-https.mobileconfig
|
||||
[cloudflare-family]: https://developers.cloudflare.com/1.1.1.1/setup/#1111-for-families
|
||||
[cloudflare-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/cloudflare-family-https.mobileconfig
|
||||
[dns4eu-default]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-default-https.mobileconfig
|
||||
[dns4eu-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-default-tls.mobileconfig
|
||||
[dns4eu-malware]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-malware-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-malware-https.mobileconfig
|
||||
[dns4eu-profile-malware-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-malware-tls.mobileconfig
|
||||
[dns4eu-malware-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-malware-https.mobileconfig
|
||||
[dns4eu-malware-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-malware-tls.mobileconfig
|
||||
[dns4eu-protective-ads]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-protective-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-ads-https.mobileconfig
|
||||
[dns4eu-profile-protective-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-ads-tls.mobileconfig
|
||||
[dns4eu-protective-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-ads-https.mobileconfig
|
||||
[dns4eu-protective-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-ads-tls.mobileconfig
|
||||
[dns4eu-protective-child]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-protective-child-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-https.mobileconfig
|
||||
[dns4eu-profile-protective-child-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-tls.mobileconfig
|
||||
[dns4eu-protective-child-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-https.mobileconfig
|
||||
[dns4eu-protective-child-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-tls.mobileconfig
|
||||
[dns4eu-protective-child-ads]: https://www.joindns4.eu/for-public
|
||||
[dns4eu-profile-protective-child-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-https.mobileconfig
|
||||
[dns4eu-profile-protective-child-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-tls.mobileconfig
|
||||
[ffmucdns]: https://ffmuc.net/wiki/knb:dohdot_en
|
||||
[ffmuc-profile-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmucdns-https.mobileconfig
|
||||
[ffmuc-profile-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmucdns-tls.mobileconfig
|
||||
[360-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/360-https.mobileconfig
|
||||
[adguard-dns-default-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-https.mobileconfig
|
||||
[adguard-dns-default-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-tls.mobileconfig
|
||||
[adguard-dns-family-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-family-https.mobileconfig
|
||||
[adguard-dns-family-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-family-tls.mobileconfig
|
||||
[adguard-dns-unfiltered-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-nofilter-https.mobileconfig
|
||||
[adguard-dns-unfiltered-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-nofilter-tls.mobileconfig
|
||||
[alekberg-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alekberg-https.mobileconfig
|
||||
[aliyun-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alibaba-https.mobileconfig
|
||||
[aliyun-dns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alibaba-tls.mobileconfig
|
||||
[blahdns-cdn-filtered-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-cdn-adblock-https.mobileconfig
|
||||
[blahdns-cdn-unfiltered-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-cdn-unfiltered-https.mobileconfig
|
||||
[blahdns-germany-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-germany-https.mobileconfig
|
||||
[blahdns-singapore-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-singapore-https.mobileconfig
|
||||
[canadian-shield-private-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-private-https.mobileconfig
|
||||
[canadian-shield-private-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-private-tls.mobileconfig
|
||||
[canadian-shield-protected-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-protected-https.mobileconfig
|
||||
[canadian-shield-protected-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-protected-tls.mobileconfig
|
||||
[canadian-shield-family-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-family-https.mobileconfig
|
||||
[canadian-shield-family-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-family-tls.mobileconfig
|
||||
[dns4eu-protective-child-ads-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-https.mobileconfig
|
||||
[dns4eu-protective-child-ads-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dns4eu-protective-child-ads-tls.mobileconfig
|
||||
[dnspod-default]: https://www.dnspod.com/products/public.dns
|
||||
[dnspod-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dnspod-default-https.mobileconfig
|
||||
[dnspod-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/dnspod-default-tls.mobileconfig
|
||||
[fdn-default]: https://www.fdn.fr/actions/dns/
|
||||
[fdn-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/fdn-default-https.mobileconfig
|
||||
[fdn-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/fdn-default-tls.mobileconfig
|
||||
[ffmuc-dns-default]: https://ffmuc.net/wiki/knb:dohdot_en
|
||||
[ffmuc-dns-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmuc-dns-default-https.mobileconfig
|
||||
[ffmuc-dns-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/ffmuc-dns-default-tls.mobileconfig
|
||||
[google-default]: https://developers.google.com/speed/public-dns/docs/secure-transports
|
||||
[google-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-default-https.mobileconfig
|
||||
[google-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/google-default-tls.mobileconfig
|
||||
[keweondns-default]: https://forum.xda-developers.com/t/keweondns-info-facts-and-what-is-keweon-actually.4576651/
|
||||
[keweondns-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/keweondns-default-https.mobileconfig
|
||||
[keweondns-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/keweondns-default-tls.mobileconfig
|
||||
[mullvad-default]: https://mullvad.net/help/dns-over-https-and-dns-over-tls/
|
||||
[mullvad-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/mullvad-default-https.mobileconfig
|
||||
[mullvad-adblock]: https://mullvad.net/help/dns-over-https-and-dns-over-tls/
|
||||
[mullvad-adblock-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/mullvad-adblock-https.mobileconfig
|
||||
[opendns-default]: https://support.opendns.com/hc/articles/360038086532
|
||||
[opendns-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-default-https.mobileconfig
|
||||
[opendns-family]: https://support.opendns.com/hc/articles/360038086532
|
||||
[opendns-family-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/opendns-family-https.mobileconfig
|
||||
[quad9-default]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/
|
||||
[quad9-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-default-https.mobileconfig
|
||||
[quad9-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-default-tls.mobileconfig
|
||||
[quad9-ECS]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/
|
||||
[quad9-ECS-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-https.mobileconfig
|
||||
[quad9-ECS-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-ECS-tls.mobileconfig
|
||||
[quad9-nofilter]: https://www.quad9.net/news/blog/doh-with-quad9-dns-servers/
|
||||
[quad9-nofilter-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-https.mobileconfig
|
||||
[quad9-nofilter-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/quad9-nofilter-tls.mobileconfig
|
||||
[tiarapp-default]: https://doh.tiar.app
|
||||
[tiarapp-default-https]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-default-https.mobileconfig
|
||||
[tiarapp-default-tls]: https://github.com/paulmillr/encrypted-dns/raw/master/profiles/tiarapp-default-tls.mobileconfig
|
||||
[360-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/360-default-https.mobileconfig
|
||||
[adguard-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-https.mobileconfig
|
||||
[adguard-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-default-tls.mobileconfig
|
||||
[adguard-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-family-https.mobileconfig
|
||||
[adguard-family-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-family-tls.mobileconfig
|
||||
[adguard-nofilter-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-nofilter-https.mobileconfig
|
||||
[adguard-nofilter-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/adguard-nofilter-tls.mobileconfig
|
||||
[alekberg-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alekberg-default-https.mobileconfig
|
||||
[alibaba-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alibaba-default-https.mobileconfig
|
||||
[alibaba-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/alibaba-default-tls.mobileconfig
|
||||
[blahdns-cdn-adblock-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-cdn-adblock-https.mobileconfig
|
||||
[blahdns-cdn-unfiltered-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-cdn-unfiltered-https.mobileconfig
|
||||
[blahdns-germany-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-germany-https.mobileconfig
|
||||
[blahdns-singapore-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/blahdns-singapore-https.mobileconfig
|
||||
[canadianshield-private-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-private-https.mobileconfig
|
||||
[canadianshield-private-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-private-tls.mobileconfig
|
||||
[canadianshield-protected-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-protected-https.mobileconfig
|
||||
[canadianshield-protected-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-protected-tls.mobileconfig
|
||||
[canadianshield-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-family-https.mobileconfig
|
||||
[canadianshield-family-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/canadianshield-family-tls.mobileconfig
|
||||
[cleanbrowsing-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-family-https.mobileconfig
|
||||
[cleanbrowsing-family-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-family-tls.mobileconfig
|
||||
[cleanbrowsing-adult-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-adult-https.mobileconfig
|
||||
[cleanbrowsing-adult-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-adult-tls.mobileconfig
|
||||
[cleanbrowsing-security-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-security-https.mobileconfig
|
||||
[cleanbrowsing-security-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cleanbrowsing-security-tls.mobileconfig
|
||||
[cloudflare-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-https.mobileconfig
|
||||
[cloudflare-dns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-tls.mobileconfig
|
||||
[cloudflare-dns-security-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-malware-https.mobileconfig
|
||||
[cloudflare-dns-family-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-family-https.mobileconfig
|
||||
[dnspod-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dnspod-https.mobileconfig
|
||||
[dnspod-dns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dnspod-tls.mobileconfig
|
||||
[fdn-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/fdn-https.mobileconfig
|
||||
[fdn-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/fdn-tls.mobileconfig
|
||||
[google-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/google-https.mobileconfig
|
||||
[google-dns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/google-tls.mobileconfig
|
||||
[keweondns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/keweondns-https.mobileconfig
|
||||
[keweondns-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/keweondns-tls.mobileconfig
|
||||
[mullvad-dns-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/mullvad-https.mobileconfig
|
||||
[mullvad-dns-adblock-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/mullvad-adblock-https.mobileconfig
|
||||
[opendns-standard-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/opendns-https.mobileconfig
|
||||
[opendns-familyshield-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/opendns-family-https.mobileconfig
|
||||
[quad9-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-https.mobileconfig
|
||||
[quad9-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-tls.mobileconfig
|
||||
[quad9-ecs-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-ECS-https.mobileconfig
|
||||
[quad9-ecs-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-ECS-tls.mobileconfig
|
||||
[quad9-profile-unfiltered-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-nofilter-https.mobileconfig
|
||||
[quad9-profile-unfiltered-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-nofilter-tls.mobileconfig
|
||||
[tiarap-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/tiarapp-https.mobileconfig
|
||||
[tiarap-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/tiarapp-tls.mobileconfig
|
||||
[dns4eu-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-https.mobileconfig
|
||||
[dns4eu-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-tls.mobileconfig
|
||||
[dns4eu-profile-malware-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-malware-https.mobileconfig
|
||||
[dns4eu-profile-malware-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-malware-tls.mobileconfig
|
||||
[dns4eu-profile-protective-ads-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-ads-https.mobileconfig
|
||||
[dns4eu-profile-protective-ads-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-ads-tls.mobileconfig
|
||||
[dns4eu-profile-protective-child-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-https.mobileconfig
|
||||
[dns4eu-profile-protective-child-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-tls.mobileconfig
|
||||
[dns4eu-profile-protective-child-ads-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-ads-https.mobileconfig
|
||||
[dns4eu-profile-protective-child-ads-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-ads-tls.mobileconfig
|
||||
[ffmuc-profile-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/ffmucdns-https.mobileconfig
|
||||
[ffmuc-profile-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/ffmucdns-tls.mobileconfig
|
||||
[cloudflare-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-default-https.mobileconfig
|
||||
[cloudflare-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-default-tls.mobileconfig
|
||||
[cloudflare-malware-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-malware-https.mobileconfig
|
||||
[cloudflare-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/cloudflare-family-https.mobileconfig
|
||||
[dns4eu-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-default-https.mobileconfig
|
||||
[dns4eu-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-default-tls.mobileconfig
|
||||
[dns4eu-malware-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-malware-https.mobileconfig
|
||||
[dns4eu-malware-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-malware-tls.mobileconfig
|
||||
[dns4eu-protective-ads-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-ads-https.mobileconfig
|
||||
[dns4eu-protective-ads-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-ads-tls.mobileconfig
|
||||
[dns4eu-protective-child-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-https.mobileconfig
|
||||
[dns4eu-protective-child-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-tls.mobileconfig
|
||||
[dns4eu-protective-child-ads-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-ads-https.mobileconfig
|
||||
[dns4eu-protective-child-ads-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dns4eu-protective-child-ads-tls.mobileconfig
|
||||
[dnspod-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dnspod-default-https.mobileconfig
|
||||
[dnspod-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/dnspod-default-tls.mobileconfig
|
||||
[fdn-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/fdn-default-https.mobileconfig
|
||||
[fdn-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/fdn-default-tls.mobileconfig
|
||||
[ffmuc-dns-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/ffmuc-dns-default-https.mobileconfig
|
||||
[ffmuc-dns-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/ffmuc-dns-default-tls.mobileconfig
|
||||
[google-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/google-default-https.mobileconfig
|
||||
[google-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/google-default-tls.mobileconfig
|
||||
[keweondns-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/keweondns-default-https.mobileconfig
|
||||
[keweondns-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/keweondns-default-tls.mobileconfig
|
||||
[mullvad-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/mullvad-default-https.mobileconfig
|
||||
[mullvad-adblock-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/mullvad-adblock-https.mobileconfig
|
||||
[opendns-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/opendns-default-https.mobileconfig
|
||||
[opendns-family-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/opendns-family-https.mobileconfig
|
||||
[quad9-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-default-https.mobileconfig
|
||||
[quad9-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-default-tls.mobileconfig
|
||||
[quad9-ECS-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-ECS-https.mobileconfig
|
||||
[quad9-ECS-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-ECS-tls.mobileconfig
|
||||
[quad9-nofilter-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-nofilter-https.mobileconfig
|
||||
[quad9-nofilter-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/quad9-nofilter-tls.mobileconfig
|
||||
[tiarapp-default-https-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/tiarapp-default-https.mobileconfig
|
||||
[tiarapp-default-tls-signed]: https://github.com/paulmillr/encrypted-dns/raw/master/signed/tiarapp-default-tls.mobileconfig
|
||||
|
||||
|
||||
+6
-5
@@ -4,13 +4,14 @@
|
||||
"type": "module",
|
||||
"scripts": {
|
||||
"build:clean": "rm -f signed/*.mobileconfig profiles/*.mobileconfig README*.md",
|
||||
"build": "npm run build:clean && node scripts/build.ts",
|
||||
"sign": "node scripts/sign.ts",
|
||||
"new": "node scripts/new.ts",
|
||||
"test": "node --experimental-strip-types --test scripts/new.test.ts scripts/sign-single.test.ts",
|
||||
"format": "prettier --write \"src/*.json\" scripts/*.ts *.ts"
|
||||
"build": "npm run build:clean && node src/scripts/build.ts",
|
||||
"sign": "node src/scripts/sign.ts",
|
||||
"new": "node src/scripts/new.ts",
|
||||
"test": "node --experimental-strip-types --test src/scripts/new.test.ts src/scripts/sign-single.test.ts",
|
||||
"format": "prettier --write \"src/*.json\" src/scripts/*.ts"
|
||||
},
|
||||
"dependencies": {
|
||||
"@noble/hashes": "2.0.1",
|
||||
"micro-key-producer": "0.8.5",
|
||||
"prettier": "3.6.2"
|
||||
}
|
||||
|
||||
@@ -18,15 +18,15 @@
|
||||
<string>https://doh.360.cn/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use 360 Public Security DNS over HTTPS</string>
|
||||
<string>Configures device to use 360 Security DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>360 Public Security DNS over HTTPS</string>
|
||||
<string>360 Security DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.b399690d-2f24-5d4e-8e6b-1faedb2dcf0f</string>
|
||||
<string>com.apple.dnsSettings.managed.fb138167-92eb-53a2-949b-b4c4f7c29e65</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>B399690D-2F24-5D4E-8E6B-1FAEDB2DCF0F</string>
|
||||
<string>FB138167-92EB-53A2-949B-B4C4F7C29E65</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -34,9 +34,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the 360 Public Security DNS over HTTPS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use 360 Security DNS over HTTPS
|
||||
Operated by 360 Digital Security Group.
|
||||
Server location: 🇨🇳.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>360 Public Security DNS over HTTPS</string>
|
||||
<string>360 Security DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -46,7 +49,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>32955666-3542-5C76-B7E4-B8924A9D7572</string>
|
||||
<string>8B0370F5-EAC9-5A92-B6DF-A0D3B9023F12</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>https://dns.adguard.com/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Adguard Default Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use AdGuard DNS Default Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Adguard Default DNS over HTTPS</string>
|
||||
<string>AdGuard DNS Default Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.e0484b82-bd95-5055-bce6-22ddb955f954</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Adguard Default DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use AdGuard DNS Default over HTTPS
|
||||
Operated by AdGuard Software Ltd. Blocks ads, tracking & phishing.
|
||||
Server location: 🇷🇺.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Adguard Default DNS over HTTPS</string>
|
||||
<string>AdGuard DNS Default Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>dns.adguard.com</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Adguard Default Encrypted DNS over TLS</string>
|
||||
<string>Configures device to use AdGuard DNS Default Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Adguard Default DNS over TLS</string>
|
||||
<string>AdGuard DNS Default Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.d1c9922c-d540-5ffe-a181-9c3538691553</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Adguard Default DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use AdGuard DNS Default over TLS
|
||||
Operated by AdGuard Software Ltd. Blocks ads, tracking & phishing.
|
||||
Server location: 🇷🇺.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Adguard Default DNS over TLS</string>
|
||||
<string>AdGuard DNS Default Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>https://dns-family.adguard.com/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use AdGuard Family Protection Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use AdGuard DNS Family Protection Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>AdGuard Family Protection DNS over HTTPS</string>
|
||||
<string>AdGuard DNS Family Protection Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.0efea210-5662-5682-a598-eb1533476312</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the AdGuard Family Protection DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use AdGuard DNS Family Protection over HTTPS
|
||||
Operated by AdGuard Software Ltd. Blocks `Default` + malware & adult content.
|
||||
Server location: 🇷🇺.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>AdGuard Family Protection DNS over HTTPS</string>
|
||||
<string>AdGuard DNS Family Protection Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>dns-family.adguard.com</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use AdGuard Family Protection Encrypted DNS over TLS</string>
|
||||
<string>Configures device to use AdGuard DNS Family Protection Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>AdGuard Family Protection DNS over TLS</string>
|
||||
<string>AdGuard DNS Family Protection Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.613ad78c-05ce-5f51-b416-a6be4d086adb</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the AdGuard Family Protection DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use AdGuard DNS Family Protection over TLS
|
||||
Operated by AdGuard Software Ltd. Blocks `Default` + malware & adult content.
|
||||
Server location: 🇷🇺.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>AdGuard Family Protection DNS over TLS</string>
|
||||
<string>AdGuard DNS Family Protection Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>https://dns-unfiltered.adguard.com/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Adguard No Filter Encrypted DNS over TLS</string>
|
||||
<string>Configures device to use AdGuard DNS Non-filtering Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Adguard No Filter over HTTPS</string>
|
||||
<string>AdGuard DNS Non-filtering Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.b32f80e6-b0d2-52b0-9b6b-8daa173ed9ce</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Adguard No Filter to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use AdGuard DNS Non-filtering over HTTPS
|
||||
Operated by AdGuard Software Ltd. Non-filtering.
|
||||
Server location: 🇷🇺.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Adguard No Filter over HTTPS</string>
|
||||
<string>AdGuard DNS Non-filtering Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>dns-unfiltered.adguard.com</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Adguard No Filter Encrypted DNS over TLS</string>
|
||||
<string>Configures device to use AdGuard DNS Non-filtering Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Adguard No Filter over TLS</string>
|
||||
<string>AdGuard DNS Non-filtering Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.967d8837-2749-5739-bd43-3ebe75d1ccc7</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Adguard No Filter to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use AdGuard DNS Non-filtering over TLS
|
||||
Operated by AdGuard Software Ltd. Non-filtering.
|
||||
Server location: 🇷🇺.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Adguard No Filter over TLS</string>
|
||||
<string>AdGuard DNS Non-filtering Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
+10
-7
@@ -18,15 +18,15 @@
|
||||
<string>https://dnsnl.alekberg.net/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Alekberg DNS over HTTPS (nl)</string>
|
||||
<string>Configures device to use Alekberg Encrypted DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Alekberg DNS over HTTPS (nl)</string>
|
||||
<string>Alekberg Encrypted DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.081fa724-7333-5733-a4ed-194e3e9f1ad5</string>
|
||||
<string>com.apple.dnsSettings.managed.d27008e4-ecaa-5171-adcf-70bdc8c2351c</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>081FA724-7333-5733-A4ED-194E3E9F1AD5</string>
|
||||
<string>D27008E4-ECAA-5171-ADCF-70BDC8C2351C</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -34,14 +34,17 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>This profile enables Alekberg DNS over HTTPS located in Amsterdam (DNSSEC enabled) on all networks using the iOS 14 / macOS Big Sur Encrypted DNS feature.</string>
|
||||
<string>Configures device to use Alekberg Encrypted DNS over HTTPS
|
||||
Independent.
|
||||
Server location: 🇳🇱.
|
||||
Filtering: no</string>
|
||||
<key>ConsentText</key>
|
||||
<dict>
|
||||
<key>default</key>
|
||||
<string>Privacy policy: https://alekberg.net/privacy</string>
|
||||
</dict>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Alekberg DNS over HTTPS (nl)</string>
|
||||
<string>Alekberg Encrypted DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -51,7 +54,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>3BCA6F1A-25FD-59B9-8997-386560ED54A6</string>
|
||||
<string>EB4D5EF9-B4B4-56A6-9C3A-43EFD5A3C532</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -20,15 +20,15 @@
|
||||
<string>https://dns.alidns.com/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use AliDNS Encrypted DNS over TLS</string>
|
||||
<string>Configures device to use Aliyun Public DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>AliDNS DNS over HTTPS</string>
|
||||
<string>Aliyun Public DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.628022a4-60d9-57d7-8fd2-5feb4de86bf2</string>
|
||||
<string>com.apple.dnsSettings.managed.5311493a-61cc-56dd-bf44-6702dcfb3964</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>628022A4-60D9-57D7-8FD2-5FEB4DE86BF2</string>
|
||||
<string>5311493A-61CC-56DD-BF44-6702DCFB3964</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the AliDNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Aliyun Public DNS over HTTPS
|
||||
Operated by Alibaba Cloud Ltd.
|
||||
Server location: 🇨🇳.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>AliDNS over HTTPS</string>
|
||||
<string>Aliyun Public DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>E826D360-4317-56A8-BDBF-BBF52811B4CA</string>
|
||||
<string>3730DCE6-C68A-5D19-9D70-D7727B9318AB</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -20,15 +20,15 @@
|
||||
<string>dns.alidns.com</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use AliDNS Encrypted DNS over TLS</string>
|
||||
<string>Configures device to use Aliyun Public DNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>AliDNS DNS over TLS</string>
|
||||
<string>Aliyun Public DNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.2f3e8ca8-7351-5a2e-b6b6-2293632709ea</string>
|
||||
<string>com.apple.dnsSettings.managed.2950c71c-1478-5c77-b58b-e3be44f2f4cc</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>2F3E8CA8-7351-5A2E-B6B6-2293632709EA</string>
|
||||
<string>2950C71C-1478-5C77-B58B-E3BE44F2F4CC</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the AliDNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Aliyun Public DNS over TLS
|
||||
Operated by Alibaba Cloud Ltd.
|
||||
Server location: 🇨🇳.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>AliDNS over TLS</string>
|
||||
<string>Aliyun Public DNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>623E4324-F2F1-5B6C-8BE1-5042663750FE</string>
|
||||
<string>B3571C63-5980-585A-B65C-51CC145498CE</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -13,9 +13,9 @@
|
||||
<string>https://doh1.blahdns.com/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use BlahDNS (CDN / Adblock / Primary) DNS over HTTPS</string>
|
||||
<string>Configures device to use BlahDNS CDN Filtered Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>BlahDNS (CDN / Adblock / Primary) DNS over HTTPS</string>
|
||||
<string>BlahDNS CDN Filtered Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.81f9f40a-545c-5c09-bc7a-55957bda3333</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -29,7 +29,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>This profile enables BlahDNS (CDN / Adblock / Primary) DNS over HTTPS on all networks using the iOS 14 / iPadOS 14 / tvOS 14 / macOS Big Sur Encrypted DNS feature.</string>
|
||||
<string>Configures device to use BlahDNS CDN Filtered over HTTPS
|
||||
Independent. Blocks ads, tracking & malware.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: yes</string>
|
||||
<key>ConsentText</key>
|
||||
<dict>
|
||||
<key>default</key>
|
||||
@@ -37,7 +40,7 @@
|
||||
https://blahdns.com</string>
|
||||
</dict>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>BlahDNS (CDN / Adblock / Primary) DNS over HTTPS</string>
|
||||
<string>BlahDNS CDN Filtered Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -13,9 +13,9 @@
|
||||
<string>https://doh1.blahdns.com/uncensor</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use BlahDNS (CDN / Unfiltered / Primary) DNS over HTTPS</string>
|
||||
<string>Configures device to use BlahDNS CDN Unfiltered Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>BlahDNS (CDN / Unfiltered / Primary) DNS over HTTPS</string>
|
||||
<string>BlahDNS CDN Unfiltered Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.68a187fb-09ed-583d-90e8-86768d65ec77</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -29,7 +29,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>This profile enables BlahDNS (CDN / Unfiltered / Primary) DNS over HTTPS on all networks using the iOS 14 / iPadOS 14 / tvOS 14 / macOS Big Sur Encrypted DNS feature.</string>
|
||||
<string>Configures device to use BlahDNS CDN Unfiltered over HTTPS
|
||||
Independent. Non-filtering.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: no</string>
|
||||
<key>ConsentText</key>
|
||||
<dict>
|
||||
<key>default</key>
|
||||
@@ -37,7 +40,7 @@
|
||||
https://blahdns.com</string>
|
||||
</dict>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>BlahDNS (CDN / Unfiltered / Primary) DNS over HTTPS</string>
|
||||
<string>BlahDNS CDN Unfiltered Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -18,9 +18,9 @@
|
||||
<string>https://doh-de.blahdns.com/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use BlahDNS (Germany) DNS over HTTPS</string>
|
||||
<string>Configures device to use BlahDNS Germany Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>BlahDNS (Germany) DNS over HTTPS</string>
|
||||
<string>BlahDNS Germany Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.f6244097-4c9c-5f50-9957-173c9262c5ac</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -34,7 +34,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>This profile enables BlahDNS (Germany) DNS over HTTPS on all networks using the iOS 14 / iPadOS 14 / tvOS 14 / macOS Big Sur Encrypted DNS feature.</string>
|
||||
<string>Configures device to use BlahDNS Germany over HTTPS
|
||||
Independent. Blocks ads, tracking & malware.
|
||||
Server location: 🇩🇪.
|
||||
Filtering: yes</string>
|
||||
<key>ConsentText</key>
|
||||
<dict>
|
||||
<key>default</key>
|
||||
@@ -42,7 +45,7 @@
|
||||
https://blahdns.com</string>
|
||||
</dict>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>BlahDNS (Germany) DNS over HTTPS</string>
|
||||
<string>BlahDNS Germany Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -18,9 +18,9 @@
|
||||
<string>https://doh-sg.blahdns.com/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use BlahDNS (Singapore) DNS over HTTPS</string>
|
||||
<string>Configures device to use BlahDNS Singapore Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>BlahDNS (Singapore) DNS over HTTPS</string>
|
||||
<string>BlahDNS Singapore Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.d1976481-acaa-5aa7-bd8f-2a8de37caab9</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -34,7 +34,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>This profile enables BlahDNS (Singapore) DNS over HTTPS on all networks using the iOS 14 / iPadOS 14 / tvOS 14 / macOS Big Sur Encrypted DNS feature.</string>
|
||||
<string>Configures device to use BlahDNS Singapore over HTTPS
|
||||
Independent. Blocks ads, tracking & malware.
|
||||
Server location: 🇸🇬.
|
||||
Filtering: yes</string>
|
||||
<key>ConsentText</key>
|
||||
<dict>
|
||||
<key>default</key>
|
||||
@@ -42,7 +45,7 @@
|
||||
https://blahdns.com</string>
|
||||
</dict>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>BlahDNS (Singapore) DNS over HTTPS</string>
|
||||
<string>BlahDNS Singapore Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>https://family.canadianshield.cira.ca/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Canadian Shield Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use Canadian Shield Family Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Canadian Shield DNS over HTTPS</string>
|
||||
<string>Canadian Shield Family Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.66866361-cb2d-5332-988f-b83b18a3e4b6</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Canadian Shield Family over HTTPS
|
||||
Operated by the Canadian Internet Registration Authority (CIRA). Blocks malware, phishing & adult content.
|
||||
Server location: 🇨🇦.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Canadian Shield DNS over HTTPS</string>
|
||||
<string>Canadian Shield Family Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>family.canadianshield.cira.ca</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Canadian Shield Encrypted DNS over TLS</string>
|
||||
<string>Configures device to use Canadian Shield Family Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Canadian Shield DNS over TLS</string>
|
||||
<string>Canadian Shield Family Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.f39a4c45-f272-5414-bcbb-04a393575ee1</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Canadian Shield Family over TLS
|
||||
Operated by the Canadian Internet Registration Authority (CIRA). Blocks malware, phishing & adult content.
|
||||
Server location: 🇨🇦.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Canadian Shield DNS over TLS</string>
|
||||
<string>Canadian Shield Family Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>https://private.canadianshield.cira.ca/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Canadian Shield Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use Canadian Shield Private Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Canadian Shield DNS over HTTPS</string>
|
||||
<string>Canadian Shield Private Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.df3591d5-693b-57b6-9c73-0f7eb396a96b</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Canadian Shield Private over HTTPS
|
||||
Operated by the Canadian Internet Registration Authority (CIRA).
|
||||
Server location: 🇨🇦.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Canadian Shield DNS over HTTPS</string>
|
||||
<string>Canadian Shield Private Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>private.canadianshield.cira.ca</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Canadian Shield Encrypted DNS over TLS</string>
|
||||
<string>Configures device to use Canadian Shield Private Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Canadian Shield DNS over TLS</string>
|
||||
<string>Canadian Shield Private Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.0af0ebba-7a17-52f0-bc99-915fad31fee6</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Canadian Shield Private over TLS
|
||||
Operated by the Canadian Internet Registration Authority (CIRA).
|
||||
Server location: 🇨🇦.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Canadian Shield DNS over TLS</string>
|
||||
<string>Canadian Shield Private Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>https://protected.canadianshield.cira.ca/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Canadian Shield Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use Canadian Shield Protected Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Canadian Shield DNS over HTTPS</string>
|
||||
<string>Canadian Shield Protected Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.66f3663e-cbbe-53af-ae6f-78bde855ad79</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Canadian Shield Protected over HTTPS
|
||||
Operated by the Canadian Internet Registration Authority (CIRA). Blocks malware & phishing.
|
||||
Server location: 🇨🇦.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Canadian Shield DNS over HTTPS</string>
|
||||
<string>Canadian Shield Protected Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>protected.canadianshield.cira.ca</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Canadian Shield Encrypted DNS over TLS</string>
|
||||
<string>Configures device to use Canadian Shield Protected Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Canadian Shield DNS over TLS</string>
|
||||
<string>Canadian Shield Protected Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.3b381320-92e4-5db9-b632-7b5f6f52582b</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Canadian Shield Protected over TLS
|
||||
Operated by the Canadian Internet Registration Authority (CIRA). Blocks malware & phishing.
|
||||
Server location: 🇨🇦.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Canadian Shield DNS over TLS</string>
|
||||
<string>Canadian Shield Protected Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -22,7 +22,7 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Cleanbrowsing Adult Filter Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cleanbrowsing Adult Filter DNS over HTTPS</string>
|
||||
<string>Cleanbrowsing Adult Filter Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.11607628-2525-55f8-8f2c-c1d7b68b3ff9</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Cleanbrowsing Adult Filter DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Cleanbrowsing Adult Filter over HTTPS
|
||||
Filters malware & adult content.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cleanbrowsing Adult DNS over HTTPS</string>
|
||||
<string>Cleanbrowsing Adult Filter Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -22,7 +22,7 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Cleanbrowsing Adult Filter Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cleanbrowsing Adult Filter DNS over TLS</string>
|
||||
<string>Cleanbrowsing Adult Filter Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.121e1333-1810-5b62-aae2-06711e8582a8</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Cleanbrowsing Adult Filter DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Cleanbrowsing Adult Filter over TLS
|
||||
Filters malware & adult content.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cleanbrowsing Adult DNS over TLS</string>
|
||||
<string>Cleanbrowsing Adult Filter Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -22,7 +22,7 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Cleanbrowsing Family Filter Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cleanbrowsing Family Filter DNS over HTTPS</string>
|
||||
<string>Cleanbrowsing Family Filter Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.412fd71d-9aea-513e-a745-17475f60376b</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Cleanbrowsing Family Filter DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Cleanbrowsing Family Filter over HTTPS
|
||||
Filters malware & adult, mixed content.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cleanbrowsing Family DNS over HTTPS</string>
|
||||
<string>Cleanbrowsing Family Filter Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -22,7 +22,7 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Cleanbrowsing Family Filter Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cleanbrowsing Family Filter DNS over TLS</string>
|
||||
<string>Cleanbrowsing Family Filter Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.ae17eab7-deb2-547f-b6a9-03b71df2ea45</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Cleanbrowsing Family Filter DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Cleanbrowsing Family Filter over TLS
|
||||
Filters malware & adult, mixed content.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cleanbrowsing Family DNS over TLS</string>
|
||||
<string>Cleanbrowsing Family Filter Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -22,7 +22,7 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Cleanbrowsing Security Filter Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cleanbrowsing Security Filter DNS over HTTPS</string>
|
||||
<string>Cleanbrowsing Security Filter Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.de112623-e567-556a-a5ef-d89ca497ec27</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Cleanbrowsing Security Filter DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Cleanbrowsing Security Filter over HTTPS
|
||||
Filters malware.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cleanbrowsing Security DNS over HTTPS</string>
|
||||
<string>Cleanbrowsing Security Filter Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -22,7 +22,7 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Cleanbrowsing Security Filter Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cleanbrowsing Security Filter DNS over TLS</string>
|
||||
<string>Cleanbrowsing Security Filter Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.a35a5934-ac4d-576a-9abc-d457e4bb083f</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Cleanbrowsing Security Filter DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Cleanbrowsing Security Filter over TLS
|
||||
Filters malware.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cleanbrowsing Security DNS over TLS</string>
|
||||
<string>Cleanbrowsing Security Filter Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
+10
-7
@@ -20,15 +20,15 @@
|
||||
<string>https://cloudflare-dns.com/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Cloudflare Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use Cloudflare 1.1.1.1 Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cloudflare DNS over HTTPS</string>
|
||||
<string>Cloudflare 1.1.1.1 Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.a622f1ba-d83a-5bf5-94cc-d1efb194c1ad</string>
|
||||
<string>com.apple.dnsSettings.managed.095ae5f2-a34c-5a91-9661-f102d0bf6f22</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>A622F1BA-D83A-5BF5-94CC-D1EFB194C1AD</string>
|
||||
<string>095AE5F2-A34C-5A91-9661-F102D0BF6F22</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Cloudflare DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Cloudflare 1.1.1.1 over HTTPS
|
||||
Operated by Cloudflare Inc.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cloudflare DNS over HTTPS</string>
|
||||
<string>Cloudflare 1.1.1.1 Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>4C580C46-17EE-5AD4-9F74-E4456C60B5F3</string>
|
||||
<string>2035BD92-4191-539D-B6B9-28112A9E44DB</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
+10
-7
@@ -20,15 +20,15 @@
|
||||
<string>one.one.one.one</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Cloudflare Encrypted DNS over TLS</string>
|
||||
<string>Configures device to use Cloudflare 1.1.1.1 Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cloudflare DNS over TLS</string>
|
||||
<string>Cloudflare 1.1.1.1 Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.c175937c-0992-5986-9710-d62101aa14e2</string>
|
||||
<string>com.apple.dnsSettings.managed.a5c1862e-358b-5ca9-948e-9e99a53551c4</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>C175937C-0992-5986-9710-D62101AA14E2</string>
|
||||
<string>A5C1862E-358B-5CA9-948E-9E99A53551C4</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Cloudflare DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Cloudflare 1.1.1.1 over TLS
|
||||
Operated by Cloudflare Inc.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cloudflare DNS over TLS</string>
|
||||
<string>Cloudflare 1.1.1.1 Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>39F27C9C-76F9-58A4-BF49-7E74B397C3AD</string>
|
||||
<string>00EE7325-8FA5-570B-82B5-3D98A33306F7</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>https://family.cloudflare-dns.com/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Cloudflare Family Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use Cloudflare 1.1.1.1 Family Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cloudflare Family DNS over HTTPS</string>
|
||||
<string>Cloudflare 1.1.1.1 Family Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.a0655c38-5f1b-5fff-81f5-a8db009bd2b6</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Cloudflare DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Cloudflare 1.1.1.1 Family over HTTPS
|
||||
Operated by Cloudflare Inc. Blocks malware, phishing & adult content.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cloudflare Family DNS over HTTPS</string>
|
||||
<string>Cloudflare 1.1.1.1 Family Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>https://security.cloudflare-dns.com/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Cloudflare no Malware Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use Cloudflare 1.1.1.1 Security Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cloudflare no Malware DNS over HTTPS</string>
|
||||
<string>Cloudflare 1.1.1.1 Security Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.e82f3188-9d25-5418-b532-005fc733395d</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Cloudflare no Malware DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Cloudflare 1.1.1.1 Security over HTTPS
|
||||
Operated by Cloudflare Inc. Blocks malware & phishing.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Cloudflare no Malware DNS over HTTPS</string>
|
||||
<string>Cloudflare 1.1.1.1 Security Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -22,13 +22,13 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use DNS4EU Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU DNS over HTTPS</string>
|
||||
<string>DNS4EU Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.396fd0be-2549-58f2-9d0f-985a83d45a6d</string>
|
||||
<string>com.apple.dnsSettings.managed.8f35bc77-18dd-5233-a8ee-fbc3fd0b76e0</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>396FD0BE-2549-58F2-9D0F-985A83D45A6D</string>
|
||||
<string>8F35BC77-18DD-5233-A8EE-FBC3FD0B76E0</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the DNS4EU DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use DNS4EU over HTTPS
|
||||
Operated by a consortium lead by Whalebone.
|
||||
Server location: 🇨🇿.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>95A242BB-7152-5CDD-8A90-B74649CDF200</string>
|
||||
<string>5A30346F-9BFF-55B3-93E8-7623B9089F52</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -20,15 +20,15 @@
|
||||
<string>unfiltered.joindns4.eu</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use DNS4EU Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use DNS4EU Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU DNS over TLS</string>
|
||||
<string>DNS4EU Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.c95cadb2-d735-5267-a164-0e091c0ea6a8</string>
|
||||
<string>com.apple.dnsSettings.managed.1b655f2b-5fd9-5c82-92eb-defef98cbd17</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>C95CADB2-D735-5267-A164-0E091C0EA6A8</string>
|
||||
<string>1B655F2B-5FD9-5C82-92EB-DEFEF98CBD17</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the DNS4EU DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use DNS4EU over TLS
|
||||
Operated by a consortium lead by Whalebone.
|
||||
Server location: 🇨🇿.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>8F3A0C0C-69E0-5023-BF3C-A59666D19730</string>
|
||||
<string>49FE26A9-C6EE-51AB-9380-C98AECD3FE27</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -22,7 +22,7 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use DNS4EU Protective Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective DNS over HTTPS</string>
|
||||
<string>DNS4EU Protective Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.2baa4a86-3f38-5158-abca-f153366d84e4</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the DNS4EU Protective DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use DNS4EU Protective over HTTPS
|
||||
Operated by a consortium lead by Whalebone. Blocks Malware.
|
||||
Server location: 🇨🇿.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>protective.joindns4.eu</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use DNS4EU Protective Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use DNS4EU Protective Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective DNS over TLS</string>
|
||||
<string>DNS4EU Protective Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.2337132d-17ea-5aa9-8322-5fe5c305d930</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the DNS4EU Protective DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use DNS4EU Protective over TLS
|
||||
Operated by a consortium lead by Whalebone. Blocks Malware.
|
||||
Server location: 🇨🇿.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
|
||||
@@ -22,7 +22,7 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use DNS4EU Protective ad-blocking Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective ad-blocking DNS over HTTPS</string>
|
||||
<string>DNS4EU Protective ad-blocking Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.468a13d5-803a-56dd-acf2-293ed817ef9a</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the DNS4EU Protective ad-blocking DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use DNS4EU Protective ad-blocking over HTTPS
|
||||
Operated by a consortium lead by Whalebone. Blocks Malware and Ads.
|
||||
Server location: 🇨🇿.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective ad-blocking Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>noads.joindns4.eu</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use DNS4EU Protective ad-blocking Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use DNS4EU Protective ad-blocking Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective ad-blocking DNS over TLS</string>
|
||||
<string>DNS4EU Protective ad-blocking Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.bef794eb-fb3f-5f69-8727-926f4ed9c07a</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the DNS4EU Protective ad-blocking DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use DNS4EU Protective ad-blocking over TLS
|
||||
Operated by a consortium lead by Whalebone. Blocks Malware and Ads.
|
||||
Server location: 🇨🇿.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective ad-blocking Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>https://child-noads.joindns4.eu/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use DNS4EU Protective with child protection & ad-blocking DNS over HTTPS</string>
|
||||
<string>Configures device to use DNS4EU Protective with child protection & ad-blocking Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective with child protection & ad-blocking DNS over HTTPS</string>
|
||||
<string>DNS4EU Protective with child protection & ad-blocking Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.f4a5e1c6-d82e-5000-a7bb-678a20116896</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the DNS4EU Protective with child protection & ad-blocking DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use DNS4EU Protective with child protection & ad-blocking over HTTPS
|
||||
Operated by a consortium lead by Whalebone. Blocks Malware, Ads and explicit content.
|
||||
Server location: 🇨🇿.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective with child protection & ad-blocking Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>child-noads.joindns4.eu</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use DNS4EU Protective with child protection & ad-blocking DNS over TLS</string>
|
||||
<string>Configures device to use DNS4EU Protective with child protection & ad-blocking Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective with child protection & ad-blocking DNS over TLS</string>
|
||||
<string>DNS4EU Protective with child protection & ad-blocking Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.8455f0bd-16e3-5d43-9a57-8e83e22499c1</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the DNS4EU Protective with child protection & ad-blocking DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use DNS4EU Protective with child protection & ad-blocking over TLS
|
||||
Operated by a consortium lead by Whalebone. Blocks Malware, Ads and explicit content.
|
||||
Server location: 🇨🇿.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective with child protection & ad-blocking Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
|
||||
@@ -22,7 +22,7 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use DNS4EU Protective with child protection Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective with child protection DNS over HTTPS</string>
|
||||
<string>DNS4EU Protective with child protection Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.a4b449c5-9ca9-58d0-b156-1cb329b9180e</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the DNS4EU Protective with child protection DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use DNS4EU Protective with child protection over HTTPS
|
||||
Operated by a consortium lead by Whalebone. Blocks malware and explicit content.
|
||||
Server location: 🇨🇿.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective with child protection Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>child.joindns4.eu</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use DNS4EU Protective with child protection Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use DNS4EU Protective with child protection Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective with child protection DNS over TLS</string>
|
||||
<string>DNS4EU Protective with child protection Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.27f84837-064b-5f9d-abd5-10b69f7c63d5</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the DNS4EU Protective with child protection DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use DNS4EU Protective with child protection over TLS
|
||||
Operated by a consortium lead by Whalebone. Blocks malware and explicit content.
|
||||
Server location: 🇨🇿.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNS4EU Protective with child protection Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
|
||||
@@ -18,15 +18,15 @@
|
||||
<string>https://doh.pub/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use DNSPod Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use DNSPod Public DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNSPod over HTTPS</string>
|
||||
<string>DNSPod Public DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.4a92b66e-27f0-52cc-97fe-7f275afb211e</string>
|
||||
<string>com.apple.dnsSettings.managed.1d985f7e-00d8-5690-a941-dc8b11b70ffe</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>4A92B66E-27F0-52CC-97FE-7F275AFB211E</string>
|
||||
<string>1D985F7E-00D8-5690-A941-DC8B11B70FFE</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -34,9 +34,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the DNSPod to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use DNSPod Public DNS over HTTPS
|
||||
Operated by DNSPod Inc., a Tencent Cloud Company.
|
||||
Server location: 🇨🇳.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNSPod over HTTPS</string>
|
||||
<string>DNSPod Public DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -46,7 +49,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>20FA0DC1-8E44-56BA-8973-7433CDF62E7F</string>
|
||||
<string>41267ACC-F253-579C-8F01-9B93DACBCA25</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -18,15 +18,15 @@
|
||||
<string>dot.pub</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use DNSPod Encrypted DNS over TLS</string>
|
||||
<string>Configures device to use DNSPod Public DNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNSPod over TLS</string>
|
||||
<string>DNSPod Public DNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.9ed9e9c2-8d89-5392-88ed-f87b311b8fe6</string>
|
||||
<string>com.apple.dnsSettings.managed.64ecbaaa-b2da-542e-8d8b-9f2cbd1037ed</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>9ED9E9C2-8D89-5392-88ED-F87B311B8FE6</string>
|
||||
<string>64ECBAAA-B2DA-542E-8D8B-9F2CBD1037ED</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -34,9 +34,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the DNSPod to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use DNSPod Public DNS over TLS
|
||||
Operated by DNSPod Inc., a Tencent Cloud Company.
|
||||
Server location: 🇨🇳.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>DNSPod over TLS</string>
|
||||
<string>DNSPod Public DNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -46,7 +49,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>511E6BB6-E99D-5045-A281-E8390F9C188C</string>
|
||||
<string>430A7431-572F-5FA3-B347-FE77E300234D</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -20,15 +20,15 @@
|
||||
<string>https://ns0.fdn.fr/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Google Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use FDN Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>FDN DNS over HTTPS</string>
|
||||
<string>FDN Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.53520e35-5994-52bb-aa82-bde0a6061ec9</string>
|
||||
<string>com.apple.dnsSettings.managed.c56afe2b-9a39-5a08-968f-c6c5e3c9c1c1</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>53520E35-5994-52BB-AA82-BDE0A6061EC9</string>
|
||||
<string>C56AFE2B-9A39-5A08-968F-C6C5E3C9C1C1</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the FDN DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use FDN over HTTPS
|
||||
Operated by French Data Network.
|
||||
Server location: 🇫🇷.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>FDN Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>426D33EA-3B8B-5E59-AB91-56CF5EC6AFCC</string>
|
||||
<string>C87A5BE8-354A-557F-9C9D-2871E280F815</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -22,13 +22,13 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use FDN Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>FDN DNS over TLS</string>
|
||||
<string>FDN Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.2e1f5a96-94ab-5c5b-a178-59cba96e7e73</string>
|
||||
<string>com.apple.dnsSettings.managed.c974694b-5b7f-5e35-b092-f237c2856ded</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>2E1F5A96-94AB-5C5B-A178-59CBA96E7E73</string>
|
||||
<string>C974694B-5B7F-5E35-B092-F237C2856DED</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the FDN DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use FDN over TLS
|
||||
Operated by French Data Network.
|
||||
Server location: 🇫🇷.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>FDN Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>2F91C89C-F9B4-5C96-9380-2FB9454444AA</string>
|
||||
<string>EB3A703B-71BE-5734-A9B0-1405042917C8</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
+9
-6
@@ -22,13 +22,13 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use FFMUC-DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>FFMUC DNS over HTTPS</string>
|
||||
<string>FFMUC-DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.dc5e0bbf-e009-5221-8a2e-7249e53ade1f</string>
|
||||
<string>com.apple.dnsSettings.managed.2297046a-c2cc-5c3e-ab2d-08cfe5880f70</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>DC5E0BBF-E009-5221-8A2E-7249E53ADE1F</string>
|
||||
<string>2297046A-C2CC-5C3E-AB2D-08CFE5880F70</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the FFMUC DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use FFMUC-DNS over HTTPS
|
||||
FFMUC free DNS servers provided by Freifunk München.
|
||||
Server location: 🇩🇪.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>FFMUC Encrypted DNS over HTTPS</string>
|
||||
<string>FFMUC-DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>0072E80B-F435-534F-B6FA-7C7C9423B9FB</string>
|
||||
<string>791C654F-0336-563C-BE97-3E54C004FA8B</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -22,13 +22,13 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use FFMUC-DNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>FFMUC DNS over TLS</string>
|
||||
<string>FFMUC-DNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.01675f29-6ce8-5f58-8c4b-fbdda91c8652</string>
|
||||
<string>com.apple.dnsSettings.managed.40b7c673-8dbb-50f8-8fe5-c9b06762e0c9</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>01675F29-6CE8-5F58-8C4B-FBDDA91C8652</string>
|
||||
<string>40B7C673-8DBB-50F8-8FE5-C9B06762E0C9</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the FFMUC DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use FFMUC-DNS over TLS
|
||||
FFMUC free DNS servers provided by Freifunk München.
|
||||
Server location: 🇩🇪.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>FFMUC Encrypted DNS over TLS</string>
|
||||
<string>FFMUC-DNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>4AB17AF6-FF17-58EF-B57F-1AED92A8E26A</string>
|
||||
<string>8C251397-46B4-5F6E-ACB7-532C953B8993</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -20,15 +20,15 @@
|
||||
<string>https://dns.google/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Google Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use Google Public DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Google DNS over HTTPS</string>
|
||||
<string>Google Public DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.317a5cde-06e0-52b8-b0d9-de462fa44247</string>
|
||||
<string>com.apple.dnsSettings.managed.156aa2ac-211a-5c74-be98-9a6d91a4744b</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>317A5CDE-06E0-52B8-B0D9-DE462FA44247</string>
|
||||
<string>156AA2AC-211A-5C74-BE98-9A6D91A4744B</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Google DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Google Public DNS over HTTPS
|
||||
Operated by Google LLC.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Google Encrypted DNS over HTTPS</string>
|
||||
<string>Google Public DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>D3AE1D44-EB42-5B10-B721-15D6A0354A9A</string>
|
||||
<string>79FF6A43-D453-5B8A-B0CB-F9475AC50A56</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -20,15 +20,15 @@
|
||||
<string>dns.google</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Google Encrypted DNS over TLS</string>
|
||||
<string>Configures device to use Google Public DNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Google DNS over TLS</string>
|
||||
<string>Google Public DNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.43e491d5-b019-5356-bc82-e8b2e1c89871</string>
|
||||
<string>com.apple.dnsSettings.managed.d984244b-7644-5b5e-b254-af8e59f6c09c</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>43E491D5-B019-5356-BC82-E8B2E1C89871</string>
|
||||
<string>D984244B-7644-5B5E-B254-AF8E59F6C09C</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Google DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Google Public DNS over TLS
|
||||
Operated by Google LLC.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Google Encrypted DNS over TLS</string>
|
||||
<string>Google Public DNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>958F3451-3B7E-5D58-8ECA-6CD67C493117</string>
|
||||
<string>022447CE-3B19-59A8-B11E-D4DEFB9DFBC1</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
+10
-7
@@ -13,15 +13,15 @@
|
||||
<string>https://dns.keweon.center/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use keweonDNS physical DNS Server to encrypt DNS over HTTPS</string>
|
||||
<string>Configures device to use keweonDNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>keweonDNS (DoH)</string>
|
||||
<string>keweonDNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.d9980b2f-f260-5bda-b033-800567c1476a</string>
|
||||
<string>com.apple.dnsSettings.managed.23b46469-4d5e-547d-9847-89e17050d05d</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>D9980B2F-F260-5BDA-B033-800567C1476A</string>
|
||||
<string>23B46469-4D5E-547D-9847-89E17050D05D</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -29,9 +29,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds keweonDNS encrypted DNS configurations to Apple based systems</string>
|
||||
<string>Configures device to use keweonDNS over HTTPS
|
||||
Operated by Aviontex. Blocks ads & tracking.
|
||||
Server location: 🇩🇪.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>keweonDNS (DoH)</string>
|
||||
<string>keweonDNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -41,7 +44,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>19232C4C-ABA0-5B57-AC25-8C2494698028</string>
|
||||
<string>8851DBB0-04A8-5551-A542-3B9D3D809895</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -13,15 +13,15 @@
|
||||
<string>dns.keweon.center</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use keweonDNS physical DNS Server to encrypt DNS over TLS</string>
|
||||
<string>Configures device to use keweonDNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>keweonDNS (DoT)</string>
|
||||
<string>keweonDNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.e3e6d9a3-8f9f-5bae-b22c-4288be42e6b1</string>
|
||||
<string>com.apple.dnsSettings.managed.751ad467-aa85-53df-b68d-5dc1f8c7624a</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>E3E6D9A3-8F9F-5BAE-B22C-4288BE42E6B1</string>
|
||||
<string>751AD467-AA85-53DF-B68D-5DC1F8C7624A</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -29,9 +29,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds keweonDNS encrypted DNS configurations to Apple based systems</string>
|
||||
<string>Configures device to use keweonDNS over TLS
|
||||
Operated by Aviontex. Blocks ads & tracking.
|
||||
Server location: 🇩🇪.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>keweonDNS (DoT)</string>
|
||||
<string>keweonDNS Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -41,7 +44,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>B6B082E8-E78E-5F49-8AFB-390B51717105</string>
|
||||
<string>054FC0B7-2EBC-5369-AB12-DEBF5D29F9FD</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -18,9 +18,9 @@
|
||||
<string>https://adblock.doh.mullvad.net/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Mullvad DNS over HTTPS</string>
|
||||
<string>Configures device to use Mullvad DNS Adblock Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Mullvad DNS over HTTPS</string>
|
||||
<string>Mullvad DNS Adblock Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.aa51aa88-e16a-50c0-9b0b-4a5c1f4af720</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -34,9 +34,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Mullvad DNS with ad blocking to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Mullvad DNS Adblock over HTTPS
|
||||
Operated by Mullvad VPN AB. Blocks ads & tracking.
|
||||
Server location: 🇸🇪.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Mullvad DNS over HTTPS</string>
|
||||
<string>Mullvad DNS Adblock Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -18,15 +18,15 @@
|
||||
<string>https://doh.mullvad.net/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Mullvad DNS over HTTPS</string>
|
||||
<string>Configures device to use Mullvad DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Mullvad DNS over HTTPS</string>
|
||||
<string>Mullvad DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.5e97cf64-16b7-58ac-8a9f-e70b7b1ed1d4</string>
|
||||
<string>com.apple.dnsSettings.managed.5392613a-ac78-594d-a43b-d396f54f59fd</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>5E97CF64-16B7-58AC-8A9F-E70B7B1ED1D4</string>
|
||||
<string>5392613A-AC78-594D-A43B-D396F54F59FD</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -34,9 +34,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Mullvad DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Mullvad DNS over HTTPS
|
||||
Operated by Mullvad VPN AB.
|
||||
Server location: 🇸🇪.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Mullvad DNS over HTTPS</string>
|
||||
<string>Mullvad DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -46,7 +49,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>4F6048D0-45F2-55B2-AF08-D09094960B41</string>
|
||||
<string>9EE643A7-BCF2-50B2-A03E-7437589CB25E</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -13,15 +13,15 @@
|
||||
<string>https://doh.opendns.com/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use OpenDNS Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use OpenDNS Standard Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>OpenDNS DNS over HTTPS Standard</string>
|
||||
<string>OpenDNS Standard Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.45ba4fc6-566b-5e50-b483-46b97b96597a</string>
|
||||
<string>com.apple.dnsSettings.managed.a3d586de-f243-5813-8f3e-fafa8e48b05d</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>45BA4FC6-566B-5E50-B483-46B97B96597A</string>
|
||||
<string>A3D586DE-F243-5813-8F3E-FAFA8E48B05D</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -29,9 +29,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the OpenDNS Encrypted DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use OpenDNS Standard over HTTPS
|
||||
Operated by Cisco OpenDNS LLC.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>OpenDNS Encrypted DNS</string>
|
||||
<string>OpenDNS Standard Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -41,7 +44,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>38CDCB26-893D-50A7-8E36-EE7E02CC0682</string>
|
||||
<string>E939E0A6-C1E4-5734-912C-5A213C1C5A78</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -13,9 +13,9 @@
|
||||
<string>https://doh.familyshield.opendns.com/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use OpenDNS Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use OpenDNS FamilyShield Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>OpenDNS DNS over HTTPS Standard</string>
|
||||
<string>OpenDNS FamilyShield Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.1a8cc509-020c-5f6a-830d-7a85f82d66e5</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -29,9 +29,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the OpenDNS Encrypted DNS Family Shield to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use OpenDNS FamilyShield over HTTPS
|
||||
Operated by Cisco OpenDNS LLC. Blocks malware & adult content.
|
||||
Server location: 🇺🇸.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>OpenDNS Encrypted DNS Family Shield</string>
|
||||
<string>OpenDNS FamilyShield Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>https://dns11.quad9.net/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Quad9 Encrypted DNS over HTTPS with ECS</string>
|
||||
<string>Configures device to use Quad9 w/ ECS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Quad9 DNS over HTTPS with ECS</string>
|
||||
<string>Quad9 w/ ECS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.be15a83d-45e7-56c2-af36-23c6c8c72198</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Quad9 with ECS DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Quad9 w/ ECS over HTTPS
|
||||
Operated by Quad9 Foundation. Supports ECS. Blocks malware.
|
||||
Server location: 🇨🇭.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Quad9 with ECS Encrypted DNS over HTTPS</string>
|
||||
<string>Quad9 w/ ECS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>dns11.quad9.net</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Quad9 with ECS Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use Quad9 w/ ECS Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Quad9 DNS over TLS with ECS</string>
|
||||
<string>Quad9 w/ ECS Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.97a5f054-ede5-5ed7-aa4b-d71c34d3d690</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Quad9 with ECS DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Quad9 w/ ECS over TLS
|
||||
Operated by Quad9 Foundation. Supports ECS. Blocks malware.
|
||||
Server location: 🇨🇭.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Quad9 with ECS Encrypted DNS over TLS</string>
|
||||
<string>Quad9 w/ ECS Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -22,13 +22,13 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Quad9 Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Quad9 DNS over HTTPS</string>
|
||||
<string>Quad9 Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.f8a674b2-5c62-5f7e-aa75-56af6005d526</string>
|
||||
<string>com.apple.dnsSettings.managed.44379267-355e-54e5-acc1-cbebdf529036</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>F8A674B2-5C62-5F7E-AA75-56AF6005D526</string>
|
||||
<string>44379267-355E-54E5-ACC1-CBEBDF529036</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Quad9 DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Quad9 over HTTPS
|
||||
Operated by Quad9 Foundation. Blocks malware.
|
||||
Server location: 🇨🇭.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Quad9 Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>C26A7C0E-10F6-542D-AB88-2D3B6FC27C1C</string>
|
||||
<string>8FE3092A-B80F-5352-A2A8-0CA9EC8A7E46</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -20,15 +20,15 @@
|
||||
<string>dns.quad9.net</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Quad9 Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use Quad9 Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Quad9 DNS over TLS</string>
|
||||
<string>Quad9 Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.d542f87a-d392-5401-867c-f25f81311318</string>
|
||||
<string>com.apple.dnsSettings.managed.2ec591fd-e155-5119-a2d7-036cde99d0a3</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>D542F87A-D392-5401-867C-F25F81311318</string>
|
||||
<string>2EC591FD-E155-5119-A2D7-036CDE99D0A3</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -36,7 +36,10 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Quad9 DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Quad9 over TLS
|
||||
Operated by Quad9 Foundation. Blocks malware.
|
||||
Server location: 🇨🇭.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Quad9 Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
@@ -48,7 +51,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>6D3671D0-DDDE-52A7-B1DE-5818251E5766</string>
|
||||
<string>AD038BB9-1330-527A-82BF-0F9F7FD709C5</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>https://dns10.quad9.net/dns-query</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Quad9 No Filter Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use Quad9 Unfiltered Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Quad9 No Filter DNS over HTTPS</string>
|
||||
<string>Quad9 Unfiltered Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.4764962f-5e78-514d-ad2c-dc8acd3b27f3</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Quad9 No Filter DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Quad9 Unfiltered over HTTPS
|
||||
Operated by Quad9 Foundation.
|
||||
Server location: 🇨🇭.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Quad9 No Filter Encrypted DNS over HTTPS</string>
|
||||
<string>Quad9 Unfiltered Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
@@ -20,9 +20,9 @@
|
||||
<string>dns10.quad9.net</string>
|
||||
</dict>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Quad9 No Filter Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use Quad9 Unfiltered Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Quad9 No Filter DNS over TLS</string>
|
||||
<string>Quad9 Unfiltered Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.90067817-36d5-5412-96fc-3c3294eb0fec</string>
|
||||
<key>PayloadType</key>
|
||||
@@ -36,9 +36,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Quad9 No Filter DNS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Quad9 Unfiltered over TLS
|
||||
Operated by Quad9 Foundation.
|
||||
Server location: 🇨🇭.
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Quad9 No Filter Encrypted DNS over TLS</string>
|
||||
<string>Quad9 Unfiltered Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
|
||||
+10
-7
@@ -37,15 +37,15 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Example Encrypted DNS over HTTPS</string>
|
||||
<string>Configures device to use Example Encrypted DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Example DNS over HTTPS</string>
|
||||
<string>Example Encrypted DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.abc0db58-da07-5566-a55b-587df1382d4a</string>
|
||||
<string>com.apple.dnsSettings.managed.45134783-5122-5abb-96ed-f5bf88841542</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>ABC0DB58-DA07-5566-A55B-587DF1382D4A</string>
|
||||
<string>45134783-5122-5ABB-96ED-F5BF88841542</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -53,9 +53,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Example Encrypted DNS over HTTPS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Example Encrypted DNS over HTTPS
|
||||
Adds the Example Encrypted DNS over HTTPS to Big Sur and iOS 14 based systems.
|
||||
Server location: .
|
||||
Filtering: no</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Example Encrypted DNS over HTTPS</string>
|
||||
<string>Example Encrypted DNS Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -65,7 +68,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>9E0173E4-7947-5174-A857-D97C90189345</string>
|
||||
<string>094F8FB6-20D9-51D6-8F5D-6E3F32192E24</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -15,13 +15,13 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Tiarap Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Tiarap DNS over HTTPS</string>
|
||||
<string>Tiarap Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.b8bfdb6a-295d-5b21-b057-eb3c8b0a786e</string>
|
||||
<string>com.apple.dnsSettings.managed.fde2d338-fe25-546b-ab48-645b7b675e6b</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>B8BFDB6A-295D-5B21-B057-EB3C8B0A786E</string>
|
||||
<string>FDE2D338-FE25-546B-AB48-645B7B675E6B</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -29,9 +29,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Tiarap DNS over HTTPS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Tiarap over HTTPS
|
||||
Operated by Tiarap Inc. Blocks ads, tracking, phising & malware.
|
||||
Server location: 🇸🇬 🇺🇸.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Tiarap DNS over HTTPS</string>
|
||||
<string>Tiarap Encrypted DNS over HTTPS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -41,7 +44,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>5D9FBC79-C3B0-5A98-A17D-8EC8A05C0F22</string>
|
||||
<string>39D05040-6A6B-53A3-A94A-CBACA457F960</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -15,13 +15,13 @@
|
||||
<key>PayloadDescription</key>
|
||||
<string>Configures device to use Tiarap Encrypted DNS over TLS</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Tiarap DNS over TLS</string>
|
||||
<string>Tiarap Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.apple.dnsSettings.managed.1e58dec4-c1a9-50ac-81cb-cc9c261f9041</string>
|
||||
<string>com.apple.dnsSettings.managed.d7772cd8-45af-5f49-8563-5d6c20df3f65</string>
|
||||
<key>PayloadType</key>
|
||||
<string>com.apple.dnsSettings.managed</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>1E58DEC4-C1A9-50AC-81CB-CC9C261F9041</string>
|
||||
<string>D7772CD8-45AF-5F49-8563-5D6C20DF3F65</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
<key>ProhibitDisablement</key>
|
||||
@@ -29,9 +29,12 @@
|
||||
</dict>
|
||||
</array>
|
||||
<key>PayloadDescription</key>
|
||||
<string>Adds the Tiarap DNS over TLS to Big Sur and iOS 14 based systems</string>
|
||||
<string>Configures device to use Tiarap over TLS
|
||||
Operated by Tiarap Inc. Blocks ads, tracking, phising & malware.
|
||||
Server location: 🇸🇬 🇺🇸.
|
||||
Filtering: yes</string>
|
||||
<key>PayloadDisplayName</key>
|
||||
<string>Tiarap DNS over TLS</string>
|
||||
<string>Tiarap Encrypted DNS over TLS</string>
|
||||
<key>PayloadIdentifier</key>
|
||||
<string>com.paulmillr.apple-dns</string>
|
||||
<key>PayloadRemovalDisallowed</key>
|
||||
@@ -41,7 +44,7 @@
|
||||
<key>PayloadType</key>
|
||||
<string>Configuration</string>
|
||||
<key>PayloadUUID</key>
|
||||
<string>BB91492E-F74F-5707-8B99-EA8E92DE96B6</string>
|
||||
<string>B9C51928-5B68-5B30-9CEC-B3A30FBBABB1</string>
|
||||
<key>PayloadVersion</key>
|
||||
<integer>1</integer>
|
||||
</dict>
|
||||
@@ -1,771 +0,0 @@
|
||||
#!/usr/bin/env node
|
||||
import { CMS } from 'micro-key-producer/x509.js';
|
||||
import { createHash } from 'node:crypto';
|
||||
import fs from 'node:fs';
|
||||
import net from 'node:net';
|
||||
import path from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
|
||||
type LangData = {
|
||||
code: string;
|
||||
name: string;
|
||||
table_columns: {
|
||||
name: string;
|
||||
region: string;
|
||||
censorship: string;
|
||||
notes: string;
|
||||
install_signed: string;
|
||||
install_unsigned: string;
|
||||
};
|
||||
yes: string;
|
||||
no: string;
|
||||
};
|
||||
|
||||
type Lang = {
|
||||
code: string;
|
||||
name: string;
|
||||
mdFile: string;
|
||||
jsonFile: string;
|
||||
data: LangData;
|
||||
};
|
||||
|
||||
type RuleParam = { DomainAction: string; Domains: string[] };
|
||||
type Rule = {
|
||||
Action: string;
|
||||
InterfaceTypeMatch?: string;
|
||||
SSIDMatch?: string[];
|
||||
ActionParameters?: RuleParam[];
|
||||
};
|
||||
type DnsCfg = {
|
||||
protocol: string;
|
||||
server: string;
|
||||
addresses: string[];
|
||||
};
|
||||
type DnsInput = {
|
||||
protocol: string;
|
||||
server: string;
|
||||
addresses: string[];
|
||||
};
|
||||
type DnsValidateOpts = { requireTlsAddresses?: boolean };
|
||||
|
||||
type PayloadCfg = {
|
||||
description?: string;
|
||||
displayName: string;
|
||||
identifier: string;
|
||||
uuid: string;
|
||||
type?: string;
|
||||
version?: number;
|
||||
organization?: string;
|
||||
prohibitDisablement?: boolean;
|
||||
};
|
||||
|
||||
type TopCfg = {
|
||||
description: string;
|
||||
displayName: string;
|
||||
identifier: string;
|
||||
removalDisallowed?: boolean;
|
||||
scope?: string;
|
||||
type?: string;
|
||||
uuid: string;
|
||||
version?: number;
|
||||
organization?: string;
|
||||
consentTextDefault?: string;
|
||||
};
|
||||
|
||||
type CertCfg = {
|
||||
fileName: string;
|
||||
data: string;
|
||||
displayName: string;
|
||||
identifier: string;
|
||||
uuid: string;
|
||||
type?: string;
|
||||
version?: number;
|
||||
};
|
||||
|
||||
export type ProfileCfg = {
|
||||
// Controls plist string escaping; kept for compatibility with old provider entries.
|
||||
escapeXML?: boolean;
|
||||
// Naming inputs used to derive PayloadDisplayName / top display fields when explicit fields are absent.
|
||||
name?: string;
|
||||
fullName?: string;
|
||||
// Explicit top payload display name fallback when top.displayName is not set.
|
||||
topName?: string;
|
||||
// DNS endpoint (DoH URL or DoT hostname) and optional resolver IP hints for Apple DNSSettings payload.
|
||||
ServerURLOrName?: string;
|
||||
ServerAddresses?: string[];
|
||||
// Inner payload fields (com.apple.dnsSettings.managed) shown in UI and used for stable ids.
|
||||
PayloadDisplayName?: string;
|
||||
PayloadDescription?: string;
|
||||
PayloadIdentifier?: string;
|
||||
PayloadUUID?: string;
|
||||
PayloadType?: string;
|
||||
PayloadVersion?: number;
|
||||
// Apple DNS payload flag: true prevents user from toggling DNS settings off in UI.
|
||||
ProhibitDisablement?: boolean;
|
||||
// Optional Apple consent text block; used by some providers for privacy-policy notice.
|
||||
ConsentTextDefault?: string;
|
||||
// Structured variants used by CLI/tests; normalize() supports both structured and flat forms.
|
||||
dns?: DnsCfg;
|
||||
payload?: PayloadCfg;
|
||||
// Structured top-level configuration payload; if absent, built from defaults + topName.
|
||||
top?: TopCfg;
|
||||
// Optional on-demand match rules (template use-case).
|
||||
onDemandRules?: Rule[];
|
||||
// Optional additional certificate payloads embedded into profile.
|
||||
certificates?: CertCfg[];
|
||||
// Compact detached signature (hex). Generator rebuilds attached CMS signed/*.mobileconfig from this.
|
||||
signature?: string;
|
||||
};
|
||||
|
||||
type Provider = {
|
||||
// Provider metadata for README table + generated links.
|
||||
id: string;
|
||||
profile: string;
|
||||
// Optional naming defaults consumed by providerFile()/normalize().
|
||||
name?: string;
|
||||
fullName?: string;
|
||||
ServerAddresses?: string[];
|
||||
// Optional output filename override (template provider).
|
||||
file?: string;
|
||||
// Hidden providers are excluded from README provider table.
|
||||
hidden?: boolean;
|
||||
website?: string;
|
||||
region?: string | string[];
|
||||
censorship?: boolean;
|
||||
// Localized labels and notes used in README rendering.
|
||||
names: Record<string, string>;
|
||||
notes: Record<string, string>;
|
||||
// Per-protocol profile definitions.
|
||||
https?: ProfileCfg;
|
||||
tls?: ProfileCfg;
|
||||
formats?: {
|
||||
unsigned: { https: boolean; tls: boolean };
|
||||
signed: { https: boolean; tls: boolean };
|
||||
};
|
||||
sourceFile?: string;
|
||||
};
|
||||
type ProviderFileInfo = Pick<Provider, 'file' | 'name' | 'id'>;
|
||||
|
||||
const __filename = fileURLToPath(import.meta.url);
|
||||
const __dirname = path.dirname(__filename);
|
||||
// Moved under scripts/: resolve repo-root data paths explicitly.
|
||||
const ROOT_DIR = path.join(__dirname, '..');
|
||||
const CERTS_DIR = path.join(ROOT_DIR, 'certs');
|
||||
const CERT_PEM_FILE = path.join(CERTS_DIR, 'cert.pem');
|
||||
const CHAIN_PEM_FILE = path.join(CERTS_DIR, 'chain.pem');
|
||||
// Shared CMS algorithm parameters for repo signing/building.
|
||||
// We intentionally omit signingTime and S/MIME capabilities for stable, minimal signed attributes.
|
||||
export const SIGN_OPTS = { extraEntropy: false } as const; // Deterministic signatures
|
||||
const LANGUAGES_DIR = path.join(ROOT_DIR, 'src-languages');
|
||||
const PROVIDERS_PATH = path.join(ROOT_DIR, 'src');
|
||||
const DEFAULT_LANG = 'en';
|
||||
const OUTPUT_DIR = ROOT_DIR;
|
||||
const REPO_RAW = 'https://github.com/paulmillr/encrypted-dns/raw/master';
|
||||
const outPath = (p: string) => path.join(ROOT_DIR, p);
|
||||
|
||||
const REGIONS: Record<string, string> = {
|
||||
US: '🇺🇸',
|
||||
CN: '🇨🇳',
|
||||
RU: '🇷🇺',
|
||||
NL: '🇳🇱',
|
||||
DE: '🇩🇪',
|
||||
SG: '🇸🇬',
|
||||
CA: '🇨🇦',
|
||||
FR: '🇫🇷',
|
||||
CH: '🇨🇭',
|
||||
SE: '🇸🇪',
|
||||
CZ: '🇨🇿',
|
||||
};
|
||||
|
||||
const escapeXMLText = (s: string) =>
|
||||
s
|
||||
.replaceAll('&', '&')
|
||||
.replaceAll('<', '<')
|
||||
.replaceAll('>', '>')
|
||||
.replaceAll('"', '"')
|
||||
.replaceAll("'", ''');
|
||||
export const validId = (s: string) => /^[A-Za-z0-9.-]+$/.test(s);
|
||||
export const validHost = (s: string) =>
|
||||
/^(?=.{1,253}$)(?!-)(?:[A-Za-z0-9-]{1,63}\.)*[A-Za-z0-9-]{1,63}$/.test(s) && !s.includes('..');
|
||||
export const splitCsv = (s: string) =>
|
||||
s
|
||||
.split(',')
|
||||
.map((x) => x.trim())
|
||||
.filter(Boolean);
|
||||
const bad = (where: string, msg: string): never => {
|
||||
throw new Error(`${where}: ${msg}`);
|
||||
};
|
||||
const validateDnsInputFor = (
|
||||
x: DnsInput,
|
||||
where: string,
|
||||
protocol: 'https' | 'tls',
|
||||
opts: DnsValidateOpts = {}
|
||||
) => {
|
||||
const requireTlsAddresses =
|
||||
opts.requireTlsAddresses !== undefined ? opts.requireTlsAddresses : true;
|
||||
if (!x.server.trim()) bad(where, 'server is required');
|
||||
if (protocol === 'https') {
|
||||
let url: URL;
|
||||
try {
|
||||
url = new URL(x.server);
|
||||
} catch {
|
||||
bad(where, `https server must be a valid URL, got: ${x.server}`);
|
||||
}
|
||||
if (url.protocol !== 'https:')
|
||||
bad(where, `https server URL must use https://, got: ${x.server}`);
|
||||
} else if (!validHost(x.server)) bad(where, `tls server must be a hostname, got: ${x.server}`);
|
||||
for (const ip of x.addresses) if (!net.isIP(ip)) bad(where, `invalid IP address: ${ip}`);
|
||||
if (requireTlsAddresses && protocol === 'tls' && x.addresses.length === 0)
|
||||
bad(where, 'tls requires at least one IP in --addresses');
|
||||
};
|
||||
export const validateDnsInput = (x: DnsInput, where: string, opts: DnsValidateOpts = {}) => {
|
||||
const protocol = x.protocol.toLowerCase();
|
||||
if (protocol !== 'https' && protocol !== 'tls')
|
||||
bad(where, `protocol: expected https|tls, got ${x.protocol}`);
|
||||
validateDnsInputFor(x, where, protocol, opts);
|
||||
};
|
||||
export const validateProfileInput = (
|
||||
x: ProfileCfg,
|
||||
where: string,
|
||||
expectedProtocol?: 'https' | 'tls'
|
||||
) => {
|
||||
const dns = x.dns || {
|
||||
protocol: expectedProtocol || '',
|
||||
server: x.ServerURLOrName || '',
|
||||
addresses: x.ServerAddresses || [],
|
||||
};
|
||||
if (expectedProtocol)
|
||||
validateDnsInputFor(dns, where, expectedProtocol, { requireTlsAddresses: false });
|
||||
else validateDnsInput(dns, where);
|
||||
const payloadId = x.payload?.identifier || x.PayloadIdentifier;
|
||||
const topId = x.top?.identifier;
|
||||
const scope = x.top?.scope;
|
||||
if (payloadId && !validId(payloadId))
|
||||
bad(where, `payload identifier must match [A-Za-z0-9.-], got: ${payloadId}`);
|
||||
if (topId && !validId(topId))
|
||||
bad(where, `top payload identifier must match [A-Za-z0-9.-], got: ${topId}`);
|
||||
if (scope && scope !== 'System' && scope !== 'User')
|
||||
bad(where, `scope: expected System|User, got ${scope}`);
|
||||
};
|
||||
|
||||
const certData = (src: string) =>
|
||||
src
|
||||
.replace(/-----BEGIN CERTIFICATE-----/g, '')
|
||||
.replace(/-----END CERTIFICATE-----/g, '')
|
||||
.replace(/\s/g, '');
|
||||
const UUID_DNS_NS = new Uint8Array([
|
||||
0x6b, 0xa7, 0xb8, 0x10, 0x9d, 0xad, 0x11, 0xd1, 0x80, 0xb4, 0x00, 0xc0, 0x4f, 0xd4, 0x30, 0xc8,
|
||||
]);
|
||||
const hex = (b: Uint8Array) => Buffer.from(b).toString('hex');
|
||||
const uuidFormat = (b: Uint8Array, upper: boolean) => {
|
||||
const s = hex(b);
|
||||
const out = `${s.slice(0, 8)}-${s.slice(8, 12)}-${s.slice(12, 16)}-${s.slice(16, 20)}-${s.slice(20, 32)}`;
|
||||
return upper ? out.toUpperCase() : out.toLowerCase();
|
||||
};
|
||||
const uuidV5 = (seed: string, upper: boolean) => {
|
||||
const msg = Buffer.from(seed, 'utf8');
|
||||
const h = createHash('sha1').update(Buffer.from(UUID_DNS_NS)).update(msg).digest();
|
||||
const out = new Uint8Array(h.subarray(0, 16));
|
||||
out[6] = (out[6] & 0x0f) | 0x50;
|
||||
out[8] = (out[8] & 0x3f) | 0x80;
|
||||
return uuidFormat(out, upper);
|
||||
};
|
||||
export const deterministicUuid = (
|
||||
rootIdentifier: string,
|
||||
tag: 'root' | 'payload',
|
||||
rel: string,
|
||||
i?: number
|
||||
) => {
|
||||
if (tag === 'root') return uuidV5(`${rootIdentifier}::root::${rel}`, true);
|
||||
return uuidV5(`${rootIdentifier}::payload::${i || 0}::${rel}`, true);
|
||||
};
|
||||
const deterministicPayloadIdentifier = (rootIdentifier: string, rel: string, i = 0) =>
|
||||
`com.apple.dnsSettings.managed.${uuidV5(`${rootIdentifier}::payload::${i}::${rel}`, false)}`;
|
||||
|
||||
export const providerFile = (p: ProviderFileInfo, https: boolean, signed?: boolean) => {
|
||||
if (p.file) return `${signed ? 'signed' : 'profiles'}/${p.file}`;
|
||||
const postfix = (_pr: ProviderFileInfo, isHttps: boolean) => (isHttps ? 'https' : 'tls');
|
||||
const name = p.name || p.id;
|
||||
return `${signed ? 'signed' : 'profiles'}/${name}-${postfix(p, https)}.mobileconfig`;
|
||||
};
|
||||
|
||||
const languages: Lang[] = fs
|
||||
.readdirSync(LANGUAGES_DIR)
|
||||
.filter((f: string) => f.endsWith('.json'))
|
||||
.sort()
|
||||
.map((f: string) => {
|
||||
const p = path.join(LANGUAGES_DIR, f);
|
||||
const data = JSON.parse(fs.readFileSync(p, 'utf8')) as LangData;
|
||||
return {
|
||||
code: data.code,
|
||||
name: data.name,
|
||||
mdFile: p.replace('.json', '.md'),
|
||||
jsonFile: p,
|
||||
data,
|
||||
};
|
||||
});
|
||||
|
||||
const providers: Provider[] = fs
|
||||
.readdirSync(PROVIDERS_PATH)
|
||||
.sort()
|
||||
.map((name: string) => {
|
||||
const sourceFile = path.join(PROVIDERS_PATH, name);
|
||||
const p = JSON.parse(fs.readFileSync(sourceFile, 'utf8')) as Provider;
|
||||
const unsigned = { https: !!p.https, tls: !!p.tls };
|
||||
const signed = {
|
||||
https: !!p.https?.signature || fs.existsSync(outPath(providerFile(p, true, true))),
|
||||
tls: !!p.tls?.signature || fs.existsSync(outPath(providerFile(p, false, true))),
|
||||
};
|
||||
return { ...p, sourceFile, formats: { unsigned, signed } };
|
||||
});
|
||||
|
||||
const generateSigned = () => {
|
||||
for (const p of providers) {
|
||||
if (!p.formats) continue;
|
||||
p.formats.signed.https = fs.existsSync(outPath(providerFile(p, true, true)));
|
||||
p.formats.signed.tls = fs.existsSync(outPath(providerFile(p, false, true)));
|
||||
}
|
||||
};
|
||||
|
||||
const FULLWIDTH_PATTERN =
|
||||
/[\u1100-\u115F\u2329\u232A\u2E80-\u303E\u3040-\uA4CF\uAC00-\uD7A3\uF900-\uFAFF\uFE10-\uFE19\uFE30-\uFE6F\uFF00-\uFF60\uFFE0-\uFFE6]/u;
|
||||
const chrWidth = (str: string) => {
|
||||
let width = 0;
|
||||
for (const c of str) width += FULLWIDTH_PATTERN.test(c) || REGIONS[c] ? 2 : 1;
|
||||
return width;
|
||||
};
|
||||
const padEnd = (s: string, len: number, chr: string) =>
|
||||
`${s}${chr.repeat(Math.max(0, len - chrWidth(s)))}`;
|
||||
|
||||
const genTable = (rows: string[][]) => {
|
||||
const widths = rows[0].map(() => 0);
|
||||
for (const r of rows)
|
||||
for (let i = 0; i < r.length; i++) widths[i] = Math.max(widths[i], chrWidth(r[i]));
|
||||
let table = '';
|
||||
rows.forEach((r, i) => {
|
||||
const cells = r.map((c, j) => padEnd(c, widths[j], ' ')).join(' | ');
|
||||
table += `| ${cells} |\n`;
|
||||
if (i === 0) table += `| ${r.map((_, j) => padEnd('', widths[j], '-')).join(' | ')} |\n`;
|
||||
});
|
||||
return table;
|
||||
};
|
||||
|
||||
const TAGS: Record<string, (lang: Lang) => string> = {
|
||||
LANGUAGES: (currentLang: Lang) =>
|
||||
languages
|
||||
.map((lang) => {
|
||||
if (lang.code === currentLang.code) return lang.name;
|
||||
return `[${lang.name}](https://github.com/paulmillr/encrypted-dns/${lang.code === DEFAULT_LANG ? '' : `blob/master/README.${lang.code}.md`})`;
|
||||
})
|
||||
.join(' | '),
|
||||
PROVIDERS_TABLE: (currentLang: Lang) => {
|
||||
const rows: string[][] = [
|
||||
[
|
||||
currentLang.data.table_columns.name,
|
||||
currentLang.data.table_columns.region,
|
||||
currentLang.data.table_columns.censorship,
|
||||
currentLang.data.table_columns.notes,
|
||||
currentLang.data.table_columns.install_signed,
|
||||
currentLang.data.table_columns.install_unsigned,
|
||||
],
|
||||
];
|
||||
const sorted = Array.from(providers)
|
||||
.filter((p) => !p.hidden)
|
||||
.sort((a, b) => a.id.localeCompare(b.id));
|
||||
for (const provider of sorted) {
|
||||
const name = provider.names[currentLang.code] || provider.names[DEFAULT_LANG];
|
||||
const note = provider.notes[currentLang.code] || provider.notes[DEFAULT_LANG];
|
||||
const censorship = provider.censorship ? currentLang.data.yes : currentLang.data.no;
|
||||
const regionEmoji = (
|
||||
Array.isArray(provider.region) ? provider.region : [provider.region || '']
|
||||
)
|
||||
.map((r) => REGIONS[r] || '')
|
||||
.join(' ')
|
||||
.trim();
|
||||
const unsignedLinks: string[] = [];
|
||||
if (provider.formats?.unsigned?.https)
|
||||
unsignedLinks.push(`[HTTPS][${provider.profile}-https]`);
|
||||
if (provider.formats?.unsigned?.tls) unsignedLinks.push(`[TLS][${provider.profile}-tls]`);
|
||||
const signedLinks: string[] = [];
|
||||
if (provider.formats?.signed?.https)
|
||||
signedLinks.push(`[HTTPS][${provider.profile}-https-signed]`);
|
||||
if (provider.formats?.signed?.tls) signedLinks.push(`[TLS][${provider.profile}-tls-signed]`);
|
||||
rows.push([
|
||||
`[${name}][${provider.id}]`,
|
||||
regionEmoji,
|
||||
censorship,
|
||||
note,
|
||||
signedLinks.join(', '),
|
||||
unsignedLinks.join(', '),
|
||||
]);
|
||||
}
|
||||
return genTable(rows).trim();
|
||||
},
|
||||
PROVIDERS_LINKS: (_currentLang: Lang) => {
|
||||
let res = '';
|
||||
const addLink = (p: Provider, https: boolean, signed?: boolean) => {
|
||||
const file = providerFile(p, https, signed);
|
||||
if (!fs.existsSync(outPath(file))) throw new Error(`missing: ${file}`);
|
||||
res += `[${p.profile}-${https ? 'https' : 'tls'}${signed ? '-signed' : ''}]: ${REPO_RAW}/${file}\n`;
|
||||
};
|
||||
for (const p of providers) {
|
||||
if (p.hidden) continue;
|
||||
if (p.website) res += `[${p.id}]: ${p.website}\n`;
|
||||
if (p.formats?.unsigned?.https) addLink(p, true);
|
||||
if (p.formats?.unsigned?.tls) addLink(p, false);
|
||||
}
|
||||
for (const p of providers) {
|
||||
if (p.hidden) continue;
|
||||
if (p.formats?.signed?.https) addLink(p, true, true);
|
||||
if (p.formats?.signed?.tls) addLink(p, false, true);
|
||||
}
|
||||
return res;
|
||||
},
|
||||
};
|
||||
|
||||
const processTemplate = (templateContent: string, lang: Lang) => {
|
||||
let content = templateContent;
|
||||
for (const [tag, handler] of Object.entries(TAGS)) {
|
||||
const tagPattern = new RegExp(`<%${tag}%>`, 'g');
|
||||
if (content.match(tagPattern)) content = content.replace(tagPattern, handler(lang));
|
||||
}
|
||||
return content;
|
||||
};
|
||||
|
||||
const generateReadmes = () => {
|
||||
for (const lang of languages) {
|
||||
if (!fs.existsSync(lang.mdFile)) throw new Error(`Template file not found: ${lang.mdFile}`);
|
||||
const tpl = fs.readFileSync(lang.mdFile, 'utf8');
|
||||
const processed = processTemplate(tpl, lang);
|
||||
const out = lang.code === DEFAULT_LANG ? 'README.md' : `README.${lang.code}.md`;
|
||||
fs.writeFileSync(path.join(OUTPUT_DIR, out), processed, 'utf8');
|
||||
console.log(`Generated ${out}`);
|
||||
}
|
||||
};
|
||||
|
||||
type NormalizeOpts = {
|
||||
expectedProtocol?: 'https' | 'tls';
|
||||
serverAddresses?: string[];
|
||||
fullName?: string;
|
||||
};
|
||||
const normalize = (
|
||||
x: ProfileCfg,
|
||||
rel: string,
|
||||
opts: NormalizeOpts = {}
|
||||
): Required<Pick<ProfileCfg, 'dns' | 'payload' | 'top' | 'onDemandRules' | 'certificates'>> & {
|
||||
escapeXML: boolean;
|
||||
signature?: string;
|
||||
} => {
|
||||
const escapeXML = x.escapeXML !== undefined ? x.escapeXML : true;
|
||||
const protocolDefault = opts.expectedProtocol ? opts.expectedProtocol.toUpperCase() : '';
|
||||
const rootIdentifier = x.top?.identifier || 'com.paulmillr.apple-dns';
|
||||
const defaultPayloadDesc = (name: string) => `Configures device to use ${name}`;
|
||||
const defaultTopDesc = (name: string) => `Adds the ${name} to Big Sur and iOS 14 based systems`;
|
||||
const proto = (x.dns?.protocol || protocolDefault).toUpperCase();
|
||||
const fullNameRaw = x.fullName || opts.fullName || '';
|
||||
const fullNameWithProto = (() => {
|
||||
if (!fullNameRaw) return '';
|
||||
if (/ over (HTTPS|TLS)$/.test(fullNameRaw)) return fullNameRaw;
|
||||
if (proto === 'HTTPS' || proto === 'TLS') return `${fullNameRaw} over ${proto}`;
|
||||
return fullNameRaw;
|
||||
})();
|
||||
const baseName = x.PayloadDisplayName || fullNameWithProto || x.name || '';
|
||||
const topName = x.top?.displayName || x.topName || baseName;
|
||||
const fullName = fullNameRaw || topName || baseName;
|
||||
// Mixed-shape input (e.g. CLI `new.ts`) may provide only `dns` and flat payload/top fields.
|
||||
// Only treat as fully-structured mode when all three nested blocks are present.
|
||||
if (x.payload && x.top && x.dns) {
|
||||
const dns = x.dns || {
|
||||
protocol: protocolDefault,
|
||||
server: x.ServerURLOrName || '',
|
||||
addresses: x.ServerAddresses !== undefined ? x.ServerAddresses : opts.serverAddresses || [],
|
||||
};
|
||||
return {
|
||||
dns,
|
||||
payload: x.payload!,
|
||||
top: x.top!,
|
||||
onDemandRules: x.onDemandRules || [],
|
||||
certificates: x.certificates || [],
|
||||
escapeXML,
|
||||
signature: x.signature,
|
||||
};
|
||||
}
|
||||
return {
|
||||
dns: x.dns || {
|
||||
protocol: protocolDefault,
|
||||
server: x.ServerURLOrName || '',
|
||||
addresses: x.ServerAddresses !== undefined ? x.ServerAddresses : opts.serverAddresses || [],
|
||||
},
|
||||
payload: {
|
||||
description: x.PayloadDescription || defaultPayloadDesc(x.name || baseName),
|
||||
displayName: baseName,
|
||||
identifier: x.PayloadIdentifier || deterministicPayloadIdentifier(rootIdentifier, rel, 0),
|
||||
uuid: x.PayloadUUID || deterministicUuid(rootIdentifier, 'payload', rel, 0),
|
||||
type: x.PayloadType || 'com.apple.dnsSettings.managed',
|
||||
version: x.PayloadVersion || 1,
|
||||
organization: undefined,
|
||||
prohibitDisablement: x.ProhibitDisablement !== undefined ? x.ProhibitDisablement : false,
|
||||
},
|
||||
top: {
|
||||
description: x.top?.description || defaultTopDesc(fullName),
|
||||
displayName: x.top?.displayName || topName,
|
||||
identifier: rootIdentifier,
|
||||
removalDisallowed: x.top?.removalDisallowed !== undefined ? x.top.removalDisallowed : false,
|
||||
scope: x.top?.scope || 'System',
|
||||
type: x.top?.type || 'Configuration',
|
||||
uuid: x.top?.uuid || deterministicUuid(rootIdentifier, 'root', rel),
|
||||
version: x.top?.version || 1,
|
||||
organization: x.top?.organization,
|
||||
consentTextDefault: x.top?.consentTextDefault || x.ConsentTextDefault,
|
||||
},
|
||||
onDemandRules: x.onDemandRules || [],
|
||||
certificates: x.certificates || [],
|
||||
escapeXML,
|
||||
signature: x.signature,
|
||||
};
|
||||
};
|
||||
|
||||
type PlistData = { TAG: 'data'; data: string };
|
||||
type PlistNode =
|
||||
| string
|
||||
| number
|
||||
| boolean
|
||||
| PlistData
|
||||
| PlistNode[]
|
||||
| Record<string, PlistNode | undefined>;
|
||||
const plistData = (x: string): PlistData => ({ TAG: 'data', data: x });
|
||||
const isPlistData = (x: PlistNode): x is PlistData =>
|
||||
typeof x === 'object' && !Array.isArray(x) && (x as PlistData).TAG === 'data';
|
||||
const plistNode = (x: PlistNode, level: number, esc: (s: string) => string): string => {
|
||||
const pad = ' '.repeat(level);
|
||||
if (typeof x === 'string') return `${pad}<string>${esc(x)}</string>\n`;
|
||||
if (typeof x === 'number') return `${pad}<integer>${x}</integer>\n`;
|
||||
if (typeof x === 'boolean') return `${pad}<${x ? 'true' : 'false'}/>\n`;
|
||||
if (Array.isArray(x)) {
|
||||
let out = `${pad}<array>\n`;
|
||||
for (const i of x) out += plistNode(i, level + 1, esc);
|
||||
return `${out}${pad}</array>\n`;
|
||||
}
|
||||
if (isPlistData(x)) return `${pad}<data>${x.data}</data>\n`;
|
||||
let out = `${pad}<dict>\n`;
|
||||
for (const [k, v] of Object.entries(x)) {
|
||||
if (v === undefined) continue;
|
||||
out += `${pad} <key>${k}</key>\n`;
|
||||
out += plistNode(v, level + 1, esc);
|
||||
}
|
||||
return `${out}${pad}</dict>\n`;
|
||||
};
|
||||
const plistDoc = (root: PlistNode, rootLevel: number, esc: (s: string) => string) =>
|
||||
`<?xml version="1.0" encoding="UTF-8"?>
|
||||
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
|
||||
<plist version="1.0">
|
||||
${plistNode(root, rootLevel, esc)}</plist>
|
||||
`;
|
||||
const dnsNode = (d: DnsCfg): Record<string, PlistNode> => ({
|
||||
DNSProtocol: d.protocol,
|
||||
...(d.addresses.length ? { ServerAddresses: d.addresses } : {}),
|
||||
[d.server.startsWith('https://') ? 'ServerURL' : 'ServerName']: d.server,
|
||||
});
|
||||
const rulesNode = (rules: Rule[]): PlistNode[] =>
|
||||
rules.map((r) => ({
|
||||
Action: r.Action,
|
||||
...(r.InterfaceTypeMatch ? { InterfaceTypeMatch: r.InterfaceTypeMatch } : {}),
|
||||
...(r.SSIDMatch && r.SSIDMatch.length ? { SSIDMatch: r.SSIDMatch } : {}),
|
||||
...(r.ActionParameters && r.ActionParameters.length
|
||||
? {
|
||||
ActionParameters: r.ActionParameters.map((p) => ({
|
||||
DomainAction: p.DomainAction,
|
||||
Domains: p.Domains,
|
||||
})),
|
||||
}
|
||||
: {}),
|
||||
}));
|
||||
const certNodes = (certs: CertCfg[]): PlistNode[] =>
|
||||
certs.map((c) => ({
|
||||
PayloadCertificateFileName: c.fileName,
|
||||
PayloadContent: plistData(certData(c.data)),
|
||||
PayloadDisplayName: c.displayName,
|
||||
PayloadIdentifier: c.identifier,
|
||||
PayloadType: c.type || 'com.apple.security.pem',
|
||||
PayloadUUID: c.uuid,
|
||||
PayloadVersion: c.version || 1,
|
||||
}));
|
||||
const renderProfile = (cfg: ReturnType<typeof normalize>) => {
|
||||
const p = cfg.payload;
|
||||
const t = cfg.top;
|
||||
const esc = cfg.escapeXML ? escapeXMLText : (s: string) => s;
|
||||
const entry = (k: string, v: PlistNode | undefined): [string, PlistNode] | undefined =>
|
||||
v === undefined ? undefined : [k, v];
|
||||
const obj = (xs: Array<[string, PlistNode] | undefined>): Record<string, PlistNode> =>
|
||||
Object.fromEntries(xs.filter(Boolean) as [string, PlistNode][]);
|
||||
const payload = obj([
|
||||
['DNSSettings', dnsNode(cfg.dns)],
|
||||
entry('OnDemandRules', cfg.onDemandRules.length ? rulesNode(cfg.onDemandRules) : undefined),
|
||||
['PayloadDescription', p.description || ''],
|
||||
['PayloadDisplayName', p.displayName],
|
||||
entry('PayloadOrganization', p.organization),
|
||||
['PayloadIdentifier', p.identifier],
|
||||
['PayloadType', p.type || 'com.apple.dnsSettings.managed'],
|
||||
['PayloadUUID', p.uuid],
|
||||
['PayloadVersion', p.version || 1],
|
||||
entry('ProhibitDisablement', p.prohibitDisablement),
|
||||
]);
|
||||
const payloadContent: PlistNode = [payload, ...certNodes(cfg.certificates)];
|
||||
const root = obj([
|
||||
['PayloadContent', payloadContent],
|
||||
['PayloadDescription', t.description],
|
||||
entry('ConsentText', t.consentTextDefault ? { default: t.consentTextDefault } : undefined),
|
||||
['PayloadDisplayName', t.displayName],
|
||||
entry('PayloadOrganization', t.organization),
|
||||
['PayloadIdentifier', t.identifier],
|
||||
entry('PayloadRemovalDisallowed', t.removalDisallowed),
|
||||
entry('PayloadScope', t.scope),
|
||||
['PayloadType', t.type || 'Configuration'],
|
||||
['PayloadUUID', t.uuid],
|
||||
['PayloadVersion', t.version || 1],
|
||||
]);
|
||||
return plistDoc(root, 0, esc);
|
||||
};
|
||||
|
||||
export const generateSingle = (x: ProfileCfg) => {
|
||||
const cfg = normalize(x, '');
|
||||
return renderProfile(cfg);
|
||||
};
|
||||
export const normalizeProfile = (x: ProfileCfg, rel: string, opts: NormalizeOpts = {}) =>
|
||||
normalize(x, rel, opts);
|
||||
export const generateForRel = (x: ProfileCfg, rel: string, opts: NormalizeOpts = {}) => {
|
||||
const cfg = normalize(x, rel, opts);
|
||||
return renderProfile(cfg);
|
||||
};
|
||||
const generateSingleRel = (x: ProfileCfg, rel: string, opts: NormalizeOpts = {}) => {
|
||||
return generateForRel(x, rel, opts);
|
||||
};
|
||||
const withDefaults = (
|
||||
cfg: ProfileCfg,
|
||||
defaults: { serverAddresses?: string[]; fullName?: string } = {}
|
||||
): ProfileCfg => {
|
||||
const needAddrs = !!defaults.serverAddresses;
|
||||
const needFullName = !!defaults.fullName;
|
||||
if (!needAddrs && !needFullName) return cfg;
|
||||
let out = cfg;
|
||||
if (needFullName && out.fullName === undefined) out = { ...out, fullName: defaults.fullName };
|
||||
if (!needAddrs) return out;
|
||||
if (out.dns) {
|
||||
if (out.dns.addresses !== undefined) return out;
|
||||
return { ...out, dns: { ...out.dns, addresses: defaults.serverAddresses } };
|
||||
}
|
||||
if (out.ServerAddresses !== undefined) return out;
|
||||
return { ...out, ServerAddresses: defaults.serverAddresses };
|
||||
};
|
||||
|
||||
const toBytes = (s: string): Uint8Array => new Uint8Array(Buffer.from(s, 'utf8'));
|
||||
const fromHex = (s: string): Uint8Array => new Uint8Array(Buffer.from(s, 'hex'));
|
||||
const fromSignature = (s: string): Uint8Array => {
|
||||
const txt = s.trim();
|
||||
if (/^[0-9a-f]+$/i.test(txt) && txt.length % 2 === 0) return fromHex(txt);
|
||||
throw new Error('expected compact signature in lowercase/uppercase hex');
|
||||
};
|
||||
let signerMaterialCache: { cert: string; chain: string } | undefined;
|
||||
const signerMaterial = (): { cert: string; chain: string } => {
|
||||
if (signerMaterialCache) return signerMaterialCache;
|
||||
if (!fs.existsSync(CERT_PEM_FILE)) throw new Error(`missing signer cert: ${CERT_PEM_FILE}`);
|
||||
if (!fs.existsSync(CHAIN_PEM_FILE)) throw new Error(`missing signer chain: ${CHAIN_PEM_FILE}`);
|
||||
signerMaterialCache = {
|
||||
cert: fs.readFileSync(CERT_PEM_FILE, 'utf8'),
|
||||
chain: fs.readFileSync(CHAIN_PEM_FILE, 'utf8'),
|
||||
};
|
||||
return signerMaterialCache;
|
||||
};
|
||||
const verifyDetached = (
|
||||
p: Provider,
|
||||
protocol: 'https' | 'tls',
|
||||
parsed: ProfileCfg,
|
||||
content: Uint8Array
|
||||
) => {
|
||||
if (!parsed.signature) return;
|
||||
const compactSig = fromSignature(parsed.signature);
|
||||
const mat = signerMaterial();
|
||||
const signed = CMS.compact.build(content, compactSig, mat.cert, mat.chain, SIGN_OPTS);
|
||||
try {
|
||||
CMS.verify(signed, { allowBER: true, checkSignatures: true, time: Date.now() });
|
||||
} catch (e) {
|
||||
throw new Error(`${p.id}/${protocol}: signature verify failed (${(e as Error).message})`);
|
||||
}
|
||||
};
|
||||
const signedFromDetached = (
|
||||
p: Provider,
|
||||
protocol: 'https' | 'tls',
|
||||
isHttps: boolean,
|
||||
parsed: ProfileCfg,
|
||||
content: Uint8Array
|
||||
) => {
|
||||
if (!parsed.signature) return;
|
||||
const compactSig = fromSignature(parsed.signature);
|
||||
const mat = signerMaterial();
|
||||
const out = providerFile(p, isHttps, true);
|
||||
const full = outPath(out);
|
||||
fs.mkdirSync(path.dirname(full), { recursive: true });
|
||||
const signed = CMS.compact.build(content, compactSig, mat.cert, mat.chain, SIGN_OPTS);
|
||||
fs.writeFileSync(full, signed);
|
||||
console.log(`Generated ${out}`);
|
||||
};
|
||||
|
||||
const generateConfigs = () => {
|
||||
const generate = (
|
||||
file: string,
|
||||
parsed?: ProfileCfg,
|
||||
where?: string,
|
||||
expectedProtocol?: 'https' | 'tls',
|
||||
defaults: { serverAddresses?: string[]; fullName?: string } = {}
|
||||
): Uint8Array | undefined => {
|
||||
if (!parsed) return;
|
||||
const input = withDefaults(parsed, defaults);
|
||||
validateProfileInput(input, where || file, expectedProtocol);
|
||||
const rel = file.startsWith('profiles/') ? file.slice('profiles/'.length) : file;
|
||||
const raw = generateSingleRel(input, rel, {
|
||||
expectedProtocol,
|
||||
serverAddresses: defaults.serverAddresses,
|
||||
fullName: defaults.fullName,
|
||||
});
|
||||
const out = outPath(file);
|
||||
fs.mkdirSync(path.dirname(out), { recursive: true });
|
||||
fs.writeFileSync(out, raw);
|
||||
console.log(`Generated ${file}`);
|
||||
return toBytes(raw);
|
||||
};
|
||||
for (const p of providers) {
|
||||
if (p.formats?.unsigned?.https) {
|
||||
const content = generate(
|
||||
providerFile(p, true),
|
||||
p.https,
|
||||
`${p.sourceFile || `provider:${p.id}`}:https`,
|
||||
'https',
|
||||
{ serverAddresses: p.ServerAddresses, fullName: p.fullName }
|
||||
);
|
||||
if (content && p.https) {
|
||||
verifyDetached(p, 'https', p.https, content);
|
||||
signedFromDetached(p, 'https', true, p.https, content);
|
||||
}
|
||||
}
|
||||
if (p.formats?.unsigned?.tls) {
|
||||
const content = generate(
|
||||
providerFile(p, false),
|
||||
p.tls,
|
||||
`${p.sourceFile || `provider:${p.id}`}:tls`,
|
||||
'tls',
|
||||
{ serverAddresses: p.ServerAddresses, fullName: p.fullName }
|
||||
);
|
||||
if (content && p.tls) {
|
||||
verifyDetached(p, 'tls', p.tls, content);
|
||||
signedFromDetached(p, 'tls', false, p.tls, content);
|
||||
}
|
||||
}
|
||||
}
|
||||
};
|
||||
|
||||
const main = () => {
|
||||
generateConfigs();
|
||||
generateSigned();
|
||||
generateReadmes();
|
||||
};
|
||||
if (process.argv[1] && path.resolve(process.argv[1]) === __filename) main();
|
||||
-108
@@ -1,108 +0,0 @@
|
||||
#!/usr/bin/env node
|
||||
import { CMS } from 'micro-key-producer/x509.js';
|
||||
import fs from 'node:fs';
|
||||
import path from 'node:path';
|
||||
import { fileURLToPath } from 'node:url';
|
||||
import {
|
||||
generateForRel,
|
||||
providerFile,
|
||||
SIGN_OPTS,
|
||||
validateProfileInput,
|
||||
type ProfileCfg,
|
||||
} from './build.ts';
|
||||
|
||||
type Provider = {
|
||||
id: string;
|
||||
name?: string;
|
||||
file?: string;
|
||||
fullName?: string;
|
||||
ServerAddresses?: string[];
|
||||
https?: ProfileCfg;
|
||||
tls?: ProfileCfg;
|
||||
};
|
||||
|
||||
const __filename = fileURLToPath(import.meta.url);
|
||||
const __dirname = path.dirname(__filename);
|
||||
const ROOT = path.join(__dirname, '..');
|
||||
const PROVIDERS = path.join(ROOT, 'src');
|
||||
const CERT_PEM = path.join(ROOT, 'certs', 'cert.pem');
|
||||
const CHAIN_PEM = path.join(ROOT, 'certs', 'chain.pem');
|
||||
const PRIVKEY_PEM = path.join(ROOT, 'certs', 'privkey.pem');
|
||||
const USAGE = `node sign.ts expects following files to exist:
|
||||
|
||||
* ${path.relative(ROOT, CERT_PEM)}: pubkey certificate
|
||||
* ${path.relative(ROOT, CHAIN_PEM)}: pubkey certificate chain
|
||||
* ${path.relative(ROOT, PRIVKEY_PEM)}: PRIVATE key used to sign requests (never share this)
|
||||
`;
|
||||
|
||||
const withDefaults = (
|
||||
cfg: ProfileCfg,
|
||||
defaults: { serverAddresses?: string[]; fullName?: string } = {}
|
||||
): ProfileCfg => {
|
||||
const needAddrs = !!defaults.serverAddresses;
|
||||
const needFullName = !!defaults.fullName;
|
||||
if (!needAddrs && !needFullName) return cfg;
|
||||
let out = cfg;
|
||||
if (needFullName && out.fullName === undefined) out = { ...out, fullName: defaults.fullName };
|
||||
if (!needAddrs) return out;
|
||||
if (out.dns) {
|
||||
if (out.dns.addresses !== undefined) return out;
|
||||
return { ...out, dns: { ...out.dns, addresses: defaults.serverAddresses } };
|
||||
}
|
||||
if (out.ServerAddresses !== undefined) return out;
|
||||
return { ...out, ServerAddresses: defaults.serverAddresses };
|
||||
};
|
||||
|
||||
const main = () => {
|
||||
[PRIVKEY_PEM, CERT_PEM, CHAIN_PEM].forEach(filepath => {
|
||||
if (!fs.existsSync(filepath)) throw new Error(USAGE);
|
||||
});
|
||||
|
||||
const key = fs.readFileSync(PRIVKEY_PEM, 'utf8');
|
||||
const cert = fs.readFileSync(CERT_PEM, 'utf8');
|
||||
const chain = fs.readFileSync(CHAIN_PEM, 'utf8');
|
||||
const files = fs
|
||||
.readdirSync(PROVIDERS)
|
||||
.filter((f) => f.endsWith('.json'))
|
||||
.sort();
|
||||
const enc = new TextEncoder();
|
||||
let updated = 0;
|
||||
|
||||
for (const fileName of files) {
|
||||
const full = path.join(PROVIDERS, fileName);
|
||||
const provider = JSON.parse(fs.readFileSync(full, 'utf8')) as Provider;
|
||||
let changed = false;
|
||||
for (const protocol of ['https', 'tls'] as const) {
|
||||
const src = provider[protocol];
|
||||
if (!src) continue;
|
||||
const input = withDefaults(src, {
|
||||
serverAddresses: provider.ServerAddresses,
|
||||
fullName: provider.fullName,
|
||||
});
|
||||
validateProfileInput(input, `${fileName}:${protocol}`, protocol);
|
||||
const relPath = providerFile(provider, protocol === 'https').replace(/^profiles\//, '');
|
||||
const raw = generateForRel(input, relPath, {
|
||||
expectedProtocol: protocol,
|
||||
serverAddresses: provider.ServerAddresses,
|
||||
fullName: provider.fullName,
|
||||
});
|
||||
const content = enc.encode(raw);
|
||||
const compact = CMS.compact.sign(content, cert, key, SIGN_OPTS);
|
||||
const signed = CMS.compact.build(content, compact, cert, chain, SIGN_OPTS);
|
||||
CMS.verify(signed, { allowBER: true, checkSignatures: true, time: Date.now() });
|
||||
const sigHex = Buffer.from(compact).toString('hex');
|
||||
if (src.signature !== sigHex) {
|
||||
src.signature = sigHex;
|
||||
changed = true;
|
||||
}
|
||||
}
|
||||
if (!changed) continue;
|
||||
fs.writeFileSync(full, `${JSON.stringify(provider, undefined, 4)}\n`);
|
||||
updated++;
|
||||
console.log(`Updated ${fileName}`);
|
||||
}
|
||||
console.log(`${updated} mobileconfig files updated`);
|
||||
console.log(`signing done`);
|
||||
};
|
||||
|
||||
main();
|
||||
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user