ConsentText default Block OCSP (dev. certs) PayloadContent DNSSettings DNSProtocol TLS ServerAddresses 127.0.0.1 ServerName localhost SupplementalMatchDomains iadc.qwape.com iadsdk.apple.com idiagnostics.apple.com iphonediags.apple.com iphonesubmissions.apple.com metrics.apple.com metrics.icloud.com ocsp.apple.com ocsp.int-x3.letsencrypt.org ocsp2.apple.com ocsp2.g.aaplimg.com ocsp2-lb.apple.com.akadns.net ocsp-a.g.aaplimg.com ocsp-lb.apple.com.akadns.net ocsp-us-lb.apple.com.akadns.net radarsubmissions.apple.com securemetrics.apple.com swcdn.apple.com swcdnlocator.apple.com swdownload.apple.com swquery.apple.com swscan.apple.com world-gen.g.aaplimg.com xp.apple.com PayloadDisplayName Block OCSP (dev. certs) PayloadIdentifier com.apple.dnsSettings.managed.396ca827-93a8-4f30-866d-12debc011939 PayloadType com.apple.dnsSettings.managed PayloadUUID 396ca827-93a8-4f30-866d-12debc011939 PayloadVersion 1 PayloadDescription This profile uses IP 127.0.0.1 (localhost) as a DNS over TLS (DoT) server to block: - apple's developers certificates validation (OCSP) - some extra apple's servers Blocked hosts: - ocsp.apple.com - ocsp.int-x3.letsencrypt.org - ocsp2.apple.com - ocsp2.g.aaplimg.com - ocsp2-lb.apple.com.akadns.net - ocsp-a.g.aaplimg.com - ocsp-lb.apple.com.akadns.net - ocsp-us-lb.apple.com.akadns.net - iadc.qwape.com - iadsdk.apple.com - idiagnostics.apple.com - iphonediags.apple.com - iphonesubmissions.apple.com - metrics.apple.com - metrics.icloud.com - radarsubmissions.apple.com - securemetrics.apple.com - swcdn.apple.com - swcdnlocator.apple.com - swdownload.apple.com - swquery.apple.com - swscan.apple.com - world-gen.g.aaplimg.com - xp.apple.com PayloadDisplayName Block OCSP (dev. certs) PayloadIdentifier 24497ba6-c1bf-46e4-a689-312384c14a90 PayloadOrganization dev1lb0rn PayloadScope System PayloadType Configuration PayloadUUID 9E178575-1415-4460-B76B-7FCB8F8A5296 PayloadVersion 1 TargetDeviceType 0