From 935d898e4e8d6d6f5ba799f6dd93c99ef942928b Mon Sep 17 00:00:00 2001 From: michaeldavie Date: Wed, 30 Dec 2020 11:08:14 -0500 Subject: [PATCH] Add Canadian Shield, amend Quad9 description --- README.md | 3 +- canadianshield-family-https.mobileconfig | 53 +++++++++++++++++++++ canadianshield-family-tls.mobileconfig | 53 +++++++++++++++++++++ canadianshield-private-https.mobileconfig | 53 +++++++++++++++++++++ canadianshield-private-tls.mobileconfig | 53 +++++++++++++++++++++ canadianshield-protected-https.mobileconfig | 53 +++++++++++++++++++++ canadianshield-protected-tls.mobileconfig | 53 +++++++++++++++++++++ 7 files changed, 320 insertions(+), 1 deletion(-) create mode 100644 canadianshield-family-https.mobileconfig create mode 100644 canadianshield-family-tls.mobileconfig create mode 100644 canadianshield-private-https.mobileconfig create mode 100644 canadianshield-private-tls.mobileconfig create mode 100644 canadianshield-protected-https.mobileconfig create mode 100644 canadianshield-protected-tls.mobileconfig diff --git a/README.md b/README.md index c50792f..9f09066 100644 --- a/README.md +++ b/README.md @@ -13,11 +13,12 @@ On iOS, after installation, go to system **Settings => General => Profile**, sel - [πŸ‡·πŸ‡Ί AdGuard](https://adguard.com/en/adguard-dns/overview.html#instruction) - [πŸ‡¨πŸ‡³ Alibaba](https://www.alidns.com/faqs/#dns-safe) +- [πŸ‡¨πŸ‡¦ Canadian Shield](https://www.cira.ca/cybersecurity-services/canadian-shield) - Operated by the Canadian Internet Registration Authority (CIRA) - [πŸ‡ΊπŸ‡Έ Cloudflare](https://developers.cloudflare.com/1.1.1.1/dns-over-https) - πŸ‡¨πŸ‡³ DNSPod - [πŸ‡ΊπŸ‡Έ Google](https://developers.google.com/speed/public-dns/docs/secure-transports) - [πŸ‡ΊπŸ‡Έ OpenDNS](https://support.opendns.com/hc/en-us/articles/360038086532) -- [πŸ‡ΊπŸ‡Έ Quad9](https://www.quad9.net/doh-quad9-dns-servers/) β€” no filtering. Operated by CleanerDNS, Inc. +- [πŸ‡ΊπŸ‡Έ Quad9](https://www.quad9.net/doh-quad9-dns-servers/) β€” Filters malicious domains. Operated by CleanerDNS, Inc. - [πŸ‡ΈπŸ‡¬πŸ‡ΊπŸ‡Έ Tiar.app](https://doh.tiar.app) β€” "Privacy-first DNS provider". Filters some domains. Server is located in SG, hosted on Digital Ocean To verify resolver IPs and hostnames, compare mobileconfig files to their documentation URLs. Internal workings of the profiles are described on [developer.apple.com](https://developer.apple.com/documentation/devicemanagement/dnssettings). diff --git a/canadianshield-family-https.mobileconfig b/canadianshield-family-https.mobileconfig new file mode 100644 index 0000000..c4660cc --- /dev/null +++ b/canadianshield-family-https.mobileconfig @@ -0,0 +1,53 @@ + + + + + PayloadContent + + + DNSSettings + + DNSProtocol + HTTPS + ServerAddresses + + 2620:10A:80BB::30 + 2620:10A:80BC::30 + 149.112.121.30 + 149.112.122.30 + + ServerURL + https://family.canadianshield.cira.ca/dns-query + + PayloadDescription + Configures device to use Canadian Shield Encrypted DNS over HTTPS + PayloadDisplayName + Canadian Shield DNS over HTTPS + PayloadIdentifier + com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4 + PayloadType + com.apple.dnsSettings.managed + PayloadUUID + 35d5c8a0-afa6-4b36-a9fe-099a997b44ad + PayloadVersion + 1 + ProhibitDisablement + + + + PayloadDescription + Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems + PayloadDisplayName + Canadian Shield DNS over HTTPS + PayloadIdentifier + com.paulmillr.apple-dns + PayloadRemovalDisallowed + + PayloadType + Configuration + PayloadUUID + 32E01895-86AB-40AE-ACD2-4460D584EA35 + PayloadVersion + 1 + + diff --git a/canadianshield-family-tls.mobileconfig b/canadianshield-family-tls.mobileconfig new file mode 100644 index 0000000..225d4ad --- /dev/null +++ b/canadianshield-family-tls.mobileconfig @@ -0,0 +1,53 @@ + + + + + PayloadContent + + + DNSSettings + + DNSProtocol + TLS + ServerAddresses + + 2620:10A:80BB::30 + 2620:10A:80BC::30 + 149.112.121.30 + 149.112.122.30 + + ServerName + family.canadianshield.cira.ca + + PayloadDescription + Configures device to use Canadian Shield Encrypted DNS over TLS + PayloadDisplayName + Canadian Shield DNS over TLS + PayloadIdentifier + com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4 + PayloadType + com.apple.dnsSettings.managed + PayloadUUID + 35d5c8a0-afa6-4b36-a9fe-099a997b44ad + PayloadVersion + 1 + ProhibitDisablement + + + + PayloadDescription + Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems + PayloadDisplayName + Canadian Shield DNS over TLS + PayloadIdentifier + com.paulmillr.apple-dns + PayloadRemovalDisallowed + + PayloadType + Configuration + PayloadUUID + 32E01895-86AB-40AE-ACD2-4460D584EA35 + PayloadVersion + 1 + + diff --git a/canadianshield-private-https.mobileconfig b/canadianshield-private-https.mobileconfig new file mode 100644 index 0000000..1efa22c --- /dev/null +++ b/canadianshield-private-https.mobileconfig @@ -0,0 +1,53 @@ + + + + + PayloadContent + + + DNSSettings + + DNSProtocol + HTTPS + ServerAddresses + + 2620:10A:80BB::10 + 2620:10A:80BC::10 + 149.112.121.10 + 149.112.122.10 + + ServerURL + https://private.canadianshield.cira.ca/dns-query + + PayloadDescription + Configures device to use Canadian Shield Encrypted DNS over HTTPS + PayloadDisplayName + Canadian Shield DNS over HTTPS + PayloadIdentifier + com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4 + PayloadType + com.apple.dnsSettings.managed + PayloadUUID + 35d5c8a0-afa6-4b36-a9fe-099a997b44ad + PayloadVersion + 1 + ProhibitDisablement + + + + PayloadDescription + Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems + PayloadDisplayName + Canadian Shield DNS over HTTPS + PayloadIdentifier + com.paulmillr.apple-dns + PayloadRemovalDisallowed + + PayloadType + Configuration + PayloadUUID + 32E01895-86AB-40AE-ACD2-4460D584EA35 + PayloadVersion + 1 + + diff --git a/canadianshield-private-tls.mobileconfig b/canadianshield-private-tls.mobileconfig new file mode 100644 index 0000000..5824efc --- /dev/null +++ b/canadianshield-private-tls.mobileconfig @@ -0,0 +1,53 @@ + + + + + PayloadContent + + + DNSSettings + + DNSProtocol + TLS + ServerAddresses + + 2620:10A:80BB::10 + 2620:10A:80BC::10 + 149.112.121.10 + 149.112.122.10 + + ServerName + private.canadianshield.cira.ca + + PayloadDescription + Configures device to use Canadian Shield Encrypted DNS over TLS + PayloadDisplayName + Canadian Shield DNS over TLS + PayloadIdentifier + com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4 + PayloadType + com.apple.dnsSettings.managed + PayloadUUID + 35d5c8a0-afa6-4b36-a9fe-099a997b44ad + PayloadVersion + 1 + ProhibitDisablement + + + + PayloadDescription + Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems + PayloadDisplayName + Canadian Shield DNS over TLS + PayloadIdentifier + com.paulmillr.apple-dns + PayloadRemovalDisallowed + + PayloadType + Configuration + PayloadUUID + 32E01895-86AB-40AE-ACD2-4460D584EA35 + PayloadVersion + 1 + + diff --git a/canadianshield-protected-https.mobileconfig b/canadianshield-protected-https.mobileconfig new file mode 100644 index 0000000..6956736 --- /dev/null +++ b/canadianshield-protected-https.mobileconfig @@ -0,0 +1,53 @@ + + + + + PayloadContent + + + DNSSettings + + DNSProtocol + HTTPS + ServerAddresses + + 2620:10A:80BB::10 + 2620:10A:80BC::10 + 149.112.121.10 + 149.112.122.10 + + ServerURL + https://protected.canadianshield.cira.ca/dns-query + + PayloadDescription + Configures device to use Canadian Shield Encrypted DNS over HTTPS + PayloadDisplayName + Canadian Shield DNS over HTTPS + PayloadIdentifier + com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4 + PayloadType + com.apple.dnsSettings.managed + PayloadUUID + 35d5c8a0-afa6-4b36-a9fe-099a997b44ad + PayloadVersion + 1 + ProhibitDisablement + + + + PayloadDescription + Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems + PayloadDisplayName + Canadian Shield DNS over HTTPS + PayloadIdentifier + com.paulmillr.apple-dns + PayloadRemovalDisallowed + + PayloadType + Configuration + PayloadUUID + 32E01895-86AB-40AE-ACD2-4460D584EA35 + PayloadVersion + 1 + + diff --git a/canadianshield-protected-tls.mobileconfig b/canadianshield-protected-tls.mobileconfig new file mode 100644 index 0000000..74ce303 --- /dev/null +++ b/canadianshield-protected-tls.mobileconfig @@ -0,0 +1,53 @@ + + + + + PayloadContent + + + DNSSettings + + DNSProtocol + TLS + ServerAddresses + + 2620:10A:80BB::20 + 2620:10A:80BC::20 + 149.112.121.20 + 149.112.122.20 + + ServerName + protected.canadianshield.cira.ca + + PayloadDescription + Configures device to use Canadian Shield Encrypted DNS over TLS + PayloadDisplayName + Canadian Shield DNS over TLS + PayloadIdentifier + com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4 + PayloadType + com.apple.dnsSettings.managed + PayloadUUID + 35d5c8a0-afa6-4b36-a9fe-099a997b44ad + PayloadVersion + 1 + ProhibitDisablement + + + + PayloadDescription + Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems + PayloadDisplayName + Canadian Shield DNS over TLS + PayloadIdentifier + com.paulmillr.apple-dns + PayloadRemovalDisallowed + + PayloadType + Configuration + PayloadUUID + 32E01895-86AB-40AE-ACD2-4460D584EA35 + PayloadVersion + 1 + +