Configuration profiles for DNS over HTTPS and DNS over TLS.
Check out the article for more info: paulmillr.com/posts/encrypted-dns/
To make settings work across all apps in iOS 14 & MacOS Big Sur, you’ll need to install configuration profile. This profile would tell operating system to use DOH / DOT. Note: it’s not enough to simply set server IPs in System Preferences — you need to install a profile.
On iOS, after installation, go to system Settings => General => Profile, select downloaded profile and click “Install” button.
- 🇷🇺 AdGuard
- 🇳🇱 Alekberg
- 🇨🇳 Alibaba
- 🇨🇦 Canadian Shield - Operated by the Canadian Internet Registration Authority (CIRA)
- 🇺🇸 Cloudflare
- 🇨🇳 DNSPod
- 🇺🇸 OpenDNS
- 🇺🇸 Quad9 — Filters malicious domains. Operated by CleanerDNS, Inc.
- 🇸🇬🇺🇸 Tiar.app — "Privacy-first DNS provider". Filters some domains. Server is located in SG, hosted on Digital Ocean
To verify resolver IPs and hostnames, compare mobileconfig files to their documentation URLs. Internal workings of the profiles are described on developer.apple.com.