# paulmillr/encrypted-dns

DNS over HTTPS config profiles for iOS & macOS

Repository: https://github.com/paulmillr/encrypted-dns
Canonical: https://ross.abutalabs.com/products/encrypted-dns
Homepage: https://paulmillr.com/posts/encrypted-dns/
Language: JavaScript
License: Unlicense
License Family: permissive
Topics: dns, over, https, tls, cloudflare, google, quad9, opendns, rfc8484, rfc7858, encrypted-dns, configuration-profile, mobileconfig, ios, macos
Last push: 2026-07-25T16:32:47+00:00

## Health v2 (maintenance only)
Score: 75/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 94, release rhythm 35, longevity 100
- inputs: {"age_days": 2176, "days_push": 39, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 4772, forks 430 (observed 2026-08-28T04:08:59.451163+00:00)

## What it is
A collection of DNS over HTTPS (DoH) and DNS over TLS (DoT) configuration profiles (.mobileconfig) for iOS and macOS, covering providers like Cloudflare, Google, Quad9, and OpenDNS. It lets Apple device users enable encrypted DNS natively without third-party apps.

## Use cases
- encrypt dns queries on iphone or mac
- stop isp from seeing which websites i visit
- set up dns over https on ios without an app
- install a quad9 or cloudflare doh profile on macos
- bypass dns-based censorship on apple devices
- configure encrypted dns via mobileconfig profile

## When to choose
- you use iOS 14+ or macOS Big Sur+ and want native encrypted DNS
- you prefer signed, ready-made profiles over running a DNS proxy app
- you want to compare providers with notes on censorship and region

## When to avoid
- you're on Android, Windows, or Linux
- you need custom DNS routing, ad-blocking, or per-network rules
- you need encrypted SNI or full traffic privacy beyond DNS

## Facets
- artifact type: dataset
- maturity: active
- function: security, privacy, networking, configuration-management
- domain: privacy, security, apple-ecosystem, networking, censorship-circumvention
- platform: -
- tags: dns-over-https, dns-over-tls, mobileconfig, configuration-profiles, encrypted-dns, ios, macos, apple-ecosystem

## Member repositories
- paulmillr/encrypted-dns (main) score 75

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:08:59.451163+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-29T18:18:47.577192+00:00, confidence not recorded.
  - readme: https://github.com/paulmillr/encrypted-dns (fetched 2026-08-28T04:08:59.451163+00:00, sha 18275df90d37)
  - homepage: https://paulmillr.com/posts/encrypted-dns/ (fetched 2026-08-29T09:02:17.579644+00:00, sha cb69e513ffb1)
- Data as of 2026-08-30T08:39:29.467469+00:00.