Raveowem DNS

This is a personally managed, user-removable DNS profile. It configures system-wide DNS-over-HTTPS at https://dns.raveowem.xyz/dns-query. It is not an MDM or device-management enrollment profile.

On iOS 26+, iPadOS 26+, and macOS 26+, AllowFailover permits fallback only when this DoH resolver is genuinely unreachable. Apple falls back to the device’s normal network DNS; this is not a selectable Cloudflare fallback. 1.1.1.1 is intentionally not in ServerAddresses, which contains only this encrypted resolver’s IPv4 address.

Download signed profile

The profile is CMS-signed with a dedicated Raveowem DNS signing certificate; it does not use the server TLS key. SHA-256 certificate fingerprint: 8D:0B:72:0D:37:13:DF:BF:0B:5B:76:99:94:B4:F1:7D:1B:AC:E1:C0:58:89:C6:1C:A3:D2:13:37:A7:B0:90:95.

The signing certificate is self-signed. Apple may label the profile as not verified; compare the displayed fingerprint before installation. This does not change the HTTPS certificate used by the DNS service.

Profile contents

These are the exact XML contents embedded in the signed profile. Review them before installing:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
  <key>PayloadContent</key>
  <array>
    <dict>
      <key>DNSSettings</key>
      <dict>
                <key>AllowFailover</key>
        <true/>
        <key>DNSProtocol</key>
        <string>HTTPS</string>
        <key>ServerAddresses</key>
        <array><string>169.58.55.117</string></array>
        <key>ServerURL</key>
        <string>https://dns.raveowem.xyz/dns-query</string>
      </dict>
      <key>PayloadDisplayName</key>
      <string>Raveowem DNS over HTTPS</string>
      <key>PayloadIdentifier</key>
      <string>xyz.raveowem.dns.doh</string>
      <key>PayloadType</key>
      <string>com.apple.dnsSettings.managed</string>
      <key>PayloadUUID</key>
      <string>8b1a0a01-3b24-4766-97db-493051e9d330</string>
      <key>PayloadVersion</key>
      <integer>1</integer>
    </dict>
  </array>
  <key>PayloadDescription</key>
  <string>System-wide DNS-over-HTTPS for dns.raveowem.xyz. This profile is user-removable.</string>
  <key>PayloadDisplayName</key>
  <string>Raveowem DNS</string>
  <key>PayloadIdentifier</key>
  <string>xyz.raveowem.dns</string>
  <key>PayloadOrganization</key>
  <string>Raveowem DNS</string>
  <key>PayloadRemovalDisallowed</key>
  <false/>
  <key>PayloadScope</key>
  <string>System</string>
  <key>PayloadType</key>
  <string>Configuration</string>
  <key>PayloadUUID</key>
  <string>45b1e705-b91d-409e-952d-8926f4013e6f</string>
  <key>PayloadVersion</key>
  <integer>1</integer>
</dict>
</plist>

Install on iPhone or iPad

Open this page in Safari and choose Download signed profile.
Open Settings and select Profile Downloaded; if it is not shown, go to General → VPN & Device Management.
Select Raveowem DNS, review the contents above, then select Install.

Remove: Settings → General → VPN & Device Management → Raveowem DNS → Remove Profile.

Install on macOS 11 or later

Download the profile and open it from Downloads.
Open System Settings → General → Device Management (or System Preferences → Profiles on older macOS 11/12).
Select Raveowem DNS, review it, then select Install.

Remove: System Settings → General → Device Management → Raveowem DNS → Remove, or System Preferences → Profiles → Raveowem DNS → Remove.