CalvinBackup/encrypted-dns
1
0
Fork 0
mirror of https://github.com/paulmillr/encrypted-dns.git synced 2026-02-12 17:22:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #23 from michaeldavie/master

Browse Source 
Add Canadian Shield, amend Quad9 description
This commit is contained in:
Paul Miller
2020-12-31 01:58:11 +02:00
committed by GitHub
parent 3e61a62cbf 935d898e4e
commit f38d3db03b
7 changed files with 320 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
README.md
View File

@@ -13,11 +13,12 @@ On iOS, after installation, go to system **Settings => General => Profile**, sel
- [🇷🇺 AdGuard](https://adguard.com/en/adguard-dns/overview.html#instruction)
- [🇨🇳 Alibaba](https://www.alidns.com/faqs/#dns-safe)
- [🇨🇦 Canadian Shield](https://www.cira.ca/cybersecurity-services/canadian-shield) - Operated by the Canadian Internet Registration Authority (CIRA)
- [🇺🇸 Cloudflare](https://developers.cloudflare.com/1.1.1.1/dns-over-https)
- 🇨🇳 DNSPod
- [🇺🇸 Google](https://developers.google.com/speed/public-dns/docs/secure-transports)
- [🇺🇸 OpenDNS](https://support.opendns.com/hc/en-us/articles/360038086532)
- [🇺🇸 Quad9](https://www.quad9.net/doh-quad9-dns-servers/) — no filtering. Operated by CleanerDNS, Inc.
- [🇺🇸 Quad9](https://www.quad9.net/doh-quad9-dns-servers/) — Filters malicious domains. Operated by CleanerDNS, Inc.
- [🇸🇬🇺🇸 Tiar.app](https://doh.tiar.app) — "Privacy-first DNS provider". Filters some domains. Server is located in SG, hosted on Digital Ocean
To verify resolver IPs and hostnames, compare mobileconfig files to their documentation URLs. Internal workings of the profiles are described on [developer.apple.com](https://developer.apple.com/documentation/devicemanagement/dnssettings).

53
canadianshield-family-https.mobileconfig Normal file
View File

@@ -0,0 +1,53 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>HTTPS</string>
<key>ServerAddresses</key>
<array>
<string>2620:10A:80BB::30</string>
<string>2620:10A:80BC::30</string>
<string>149.112.121.30</string>
<string>149.112.122.30</string>
</array>
<key>ServerURL</key>
<string>https://family.canadianshield.cira.ca/dns-query</string>
</dict>
<key>PayloadDescription</key>
<string>Configures device to use Canadian Shield Encrypted DNS over HTTPS</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over HTTPS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>35d5c8a0-afa6-4b36-a9fe-099a997b44ad</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over HTTPS</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>32E01895-86AB-40AE-ACD2-4460D584EA35</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>

53
canadianshield-family-tls.mobileconfig Normal file
View File

@@ -0,0 +1,53 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>TLS</string>
<key>ServerAddresses</key>
<array>
<string>2620:10A:80BB::30</string>
<string>2620:10A:80BC::30</string>
<string>149.112.121.30</string>
<string>149.112.122.30</string>
</array>
<key>ServerName</key>
<string>family.canadianshield.cira.ca</string>
</dict>
<key>PayloadDescription</key>
<string>Configures device to use Canadian Shield Encrypted DNS over TLS</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>35d5c8a0-afa6-4b36-a9fe-099a997b44ad</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>32E01895-86AB-40AE-ACD2-4460D584EA35</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>

53
canadianshield-private-https.mobileconfig Normal file
View File

@@ -0,0 +1,53 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>HTTPS</string>
<key>ServerAddresses</key>
<array>
<string>2620:10A:80BB::10</string>
<string>2620:10A:80BC::10</string>
<string>149.112.121.10</string>
<string>149.112.122.10</string>
</array>
<key>ServerURL</key>
<string>https://private.canadianshield.cira.ca/dns-query</string>
</dict>
<key>PayloadDescription</key>
<string>Configures device to use Canadian Shield Encrypted DNS over HTTPS</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over HTTPS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>35d5c8a0-afa6-4b36-a9fe-099a997b44ad</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over HTTPS</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>32E01895-86AB-40AE-ACD2-4460D584EA35</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>

53
canadianshield-private-tls.mobileconfig Normal file
View File

@@ -0,0 +1,53 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>TLS</string>
<key>ServerAddresses</key>
<array>
<string>2620:10A:80BB::10</string>
<string>2620:10A:80BC::10</string>
<string>149.112.121.10</string>
<string>149.112.122.10</string>
</array>
<key>ServerName</key>
<string>private.canadianshield.cira.ca</string>
</dict>
<key>PayloadDescription</key>
<string>Configures device to use Canadian Shield Encrypted DNS over TLS</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>35d5c8a0-afa6-4b36-a9fe-099a997b44ad</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>32E01895-86AB-40AE-ACD2-4460D584EA35</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>

53
canadianshield-protected-https.mobileconfig Normal file
View File

@@ -0,0 +1,53 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>HTTPS</string>
<key>ServerAddresses</key>
<array>
<string>2620:10A:80BB::10</string>
<string>2620:10A:80BC::10</string>
<string>149.112.121.10</string>
<string>149.112.122.10</string>
</array>
<key>ServerURL</key>
<string>https://protected.canadianshield.cira.ca/dns-query</string>
</dict>
<key>PayloadDescription</key>
<string>Configures device to use Canadian Shield Encrypted DNS over HTTPS</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over HTTPS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>35d5c8a0-afa6-4b36-a9fe-099a997b44ad</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over HTTPS</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>32E01895-86AB-40AE-ACD2-4460D584EA35</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>

53
canadianshield-protected-tls.mobileconfig Normal file
View File

@@ -0,0 +1,53 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>TLS</string>
<key>ServerAddresses</key>
<array>
<string>2620:10A:80BB::20</string>
<string>2620:10A:80BC::20</string>
<string>149.112.121.20</string>
<string>149.112.122.20</string>
</array>
<key>ServerName</key>
<string>protected.canadianshield.cira.ca</string>
</dict>
<key>PayloadDescription</key>
<string>Configures device to use Canadian Shield Encrypted DNS over TLS</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>35d5c8a0-afa6-4b36-a9fe-099a997b44ad</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>32E01895-86AB-40AE-ACD2-4460D584EA35</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>