Skip to content

Commit

Permalink
Merge pull request paulmillr#23 from michaeldavie/master
Browse files Browse the repository at this point in the history 
Add Canadian Shield, amend Quad9 description
  • Loading branch information
@paulmillr
paulmillr authored Dec 30, 2020
2 parents 3e61a62 + 935d898 commit f38d3db
Show file tree
Hide file tree
Showing 7 changed files with 320 additions and 1 deletion.
3 changes: 2 additions & 1 deletion README.md
View file
Original file line number Diff line number Diff line change
Expand Up @@ -13,11 +13,12 @@ On iOS, after installation, go to system **Settings => General => Profile**, sel

- [🇷🇺 AdGuard](https://adguard.com/en/adguard-dns/overview.html#instruction)
- [🇨🇳 Alibaba](https://www.alidns.com/faqs/#dns-safe)
- [🇨🇦 Canadian Shield](https://www.cira.ca/cybersecurity-services/canadian-shield) - Operated by the Canadian Internet Registration Authority (CIRA)
- [🇺🇸 Cloudflare](https://developers.cloudflare.com/1.1.1.1/dns-over-https)
- 🇨🇳 DNSPod
- [🇺🇸 Google](https://developers.google.com/speed/public-dns/docs/secure-transports)
- [🇺🇸 OpenDNS](https://support.opendns.com/hc/en-us/articles/360038086532)
- [🇺🇸 Quad9](https://www.quad9.net/doh-quad9-dns-servers/) — no filtering. Operated by CleanerDNS, Inc.
- [🇺🇸 Quad9](https://www.quad9.net/doh-quad9-dns-servers/) — Filters malicious domains. Operated by CleanerDNS, Inc.
- [🇸🇬🇺🇸 Tiar.app](https://doh.tiar.app) — "Privacy-first DNS provider". Filters some domains. Server is located in SG, hosted on Digital Ocean

To verify resolver IPs and hostnames, compare mobileconfig files to their documentation URLs. Internal workings of the profiles are described on [developer.apple.com](https://developer.apple.com/documentation/devicemanagement/dnssettings).
53 changes: 53 additions & 0 deletions canadianshield-family-https.mobileconfig
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>HTTPS</string>
<key>ServerAddresses</key>
<array>
<string>2620:10A:80BB::30</string>
<string>2620:10A:80BC::30</string>
<string>149.112.121.30</string>
<string>149.112.122.30</string>
</array>
<key>ServerURL</key>
<string>https://family.canadianshield.cira.ca/dns-query</string>
</dict>
<key>PayloadDescription</key>
<string>Configures device to use Canadian Shield Encrypted DNS over HTTPS</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over HTTPS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>35d5c8a0-afa6-4b36-a9fe-099a997b44ad</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over HTTPS</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>32E01895-86AB-40AE-ACD2-4460D584EA35</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>
53 changes: 53 additions & 0 deletions canadianshield-family-tls.mobileconfig
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>TLS</string>
<key>ServerAddresses</key>
<array>
<string>2620:10A:80BB::30</string>
<string>2620:10A:80BC::30</string>
<string>149.112.121.30</string>
<string>149.112.122.30</string>
</array>
<key>ServerName</key>
<string>family.canadianshield.cira.ca</string>
</dict>
<key>PayloadDescription</key>
<string>Configures device to use Canadian Shield Encrypted DNS over TLS</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>35d5c8a0-afa6-4b36-a9fe-099a997b44ad</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>32E01895-86AB-40AE-ACD2-4460D584EA35</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>
53 changes: 53 additions & 0 deletions canadianshield-private-https.mobileconfig
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>HTTPS</string>
<key>ServerAddresses</key>
<array>
<string>2620:10A:80BB::10</string>
<string>2620:10A:80BC::10</string>
<string>149.112.121.10</string>
<string>149.112.122.10</string>
</array>
<key>ServerURL</key>
<string>https://private.canadianshield.cira.ca/dns-query</string>
</dict>
<key>PayloadDescription</key>
<string>Configures device to use Canadian Shield Encrypted DNS over HTTPS</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over HTTPS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>35d5c8a0-afa6-4b36-a9fe-099a997b44ad</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over HTTPS</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>32E01895-86AB-40AE-ACD2-4460D584EA35</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>
53 changes: 53 additions & 0 deletions canadianshield-private-tls.mobileconfig
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>TLS</string>
<key>ServerAddresses</key>
<array>
<string>2620:10A:80BB::10</string>
<string>2620:10A:80BC::10</string>
<string>149.112.121.10</string>
<string>149.112.122.10</string>
</array>
<key>ServerName</key>
<string>private.canadianshield.cira.ca</string>
</dict>
<key>PayloadDescription</key>
<string>Configures device to use Canadian Shield Encrypted DNS over TLS</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>35d5c8a0-afa6-4b36-a9fe-099a997b44ad</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>32E01895-86AB-40AE-ACD2-4460D584EA35</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>
53 changes: 53 additions & 0 deletions canadianshield-protected-https.mobileconfig
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>HTTPS</string>
<key>ServerAddresses</key>
<array>
<string>2620:10A:80BB::10</string>
<string>2620:10A:80BC::10</string>
<string>149.112.121.10</string>
<string>149.112.122.10</string>
</array>
<key>ServerURL</key>
<string>https://protected.canadianshield.cira.ca/dns-query</string>
</dict>
<key>PayloadDescription</key>
<string>Configures device to use Canadian Shield Encrypted DNS over HTTPS</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over HTTPS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>35d5c8a0-afa6-4b36-a9fe-099a997b44ad</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over HTTPS</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>32E01895-86AB-40AE-ACD2-4460D584EA35</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>
53 changes: 53 additions & 0 deletions canadianshield-protected-tls.mobileconfig
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>DNSSettings</key>
<dict>
<key>DNSProtocol</key>
<string>TLS</string>
<key>ServerAddresses</key>
<array>
<string>2620:10A:80BB::20</string>
<string>2620:10A:80BC::20</string>
<string>149.112.121.20</string>
<string>149.112.122.20</string>
</array>
<key>ServerName</key>
<string>protected.canadianshield.cira.ca</string>
</dict>
<key>PayloadDescription</key>
<string>Configures device to use Canadian Shield Encrypted DNS over TLS</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.apple.dnsSettings.managed.9d6e5fdf-e404-4f34-ae94-27ed2f636ac4</string>
<key>PayloadType</key>
<string>com.apple.dnsSettings.managed</string>
<key>PayloadUUID</key>
<string>35d5c8a0-afa6-4b36-a9fe-099a997b44ad</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>ProhibitDisablement</key>
<false/>
</dict>
</array>
<key>PayloadDescription</key>
<string>Adds the Canadian Shield DNS to Big Sur and iOS 14 based systems</string>
<key>PayloadDisplayName</key>
<string>Canadian Shield DNS over TLS</string>
<key>PayloadIdentifier</key>
<string>com.paulmillr.apple-dns</string>
<key>PayloadRemovalDisallowed</key>
<false/>
<key>PayloadType</key>
<string>Configuration</string>
<key>PayloadUUID</key>
<string>32E01895-86AB-40AE-ACD2-4460D584EA35</string>
<key>PayloadVersion</key>
<integer>1</integer>
</dict>
</plist>

0 comments on commit f38d3db

Please sign in to comment.