Quad9 signed Apple profile is no longer verified

[jordbm]

Affected page

https://www.privacyguides.org/en/dns/#recommended-providers

Description

Quad9’s signed iOS/iPadOS profile is no longer verified. The signer of the profile matches what is displayed by Quad9 here.

I am unsure if this warrants a correction to the recommended DNS section, as the profile still functions as expected - however, it may no longer be considered a signed Apple profile.

Sources

https://quad9.net/news/blog/ios-mobile-provisioning-profiles/

Before submitting

• I am reporting something that is verifiably incorrect, not a suggestion or opinion.
• I agree to the Community Code of Conduct.

[jordbm]

I found this Reddit thread posted by Quad9.

In short - this is an issue on Apple’s end. Their new intermediate certificate is missing on some devices, causing the profile to show as unverified.

To make the profile show as verified:

1. Download the new Apple intermediate certificate https://www.apple.com/certificateauthority/AppleWWDRCAG3.cer
2. Go to Settings and approve the certificate
3. Remove and re-add the Quad9 profile

I am unsure if this fully resolves the issue, as the profile remains unverified without installing the certificate. It may be necessary to mention this in the DNS section.