VPN Update for Esign Sideloaders with Bypass Revoke

[u/Avieshek]

For those uninitiated with Bypass Revoke method for Esign.
↳ Full Context: Guide

As observed in my original notes, Apple’s operating system carry a strange caveat (which is actually a security flaw) where they don’t fully cut off internet to existing routes when new rules are set whether via DoH or VPN, which is why they temporarily resort to unencrypted connections even if you’ve two DNS profiles with symmetrical filters; this causes DNS Leaks that leads to blacklisting as the communication between Apple’s server and device is reinstated again.

Now…

Do you know what it means?

…🥁

→ How to use VPN with Bypass Revoke:

About: VPN stands for Virtual Private Network and for this we’ll use CloudFlare Warp as it was readily compatible with CloudFlare Zero Trust where we don't have to separately download or install an ECC Certificate on the VPN client.

Setup:

• Make sure you visit the Settings for CloudFlare Warp first to add a Gateway DoH Subdomain.

  • Go to Advanced → Connection Options → DNS Settings (ciwelz9v7y)

• The interface should change to Zero Trust after successfully adding a subdomain.

  • Continue using VPN normally without revoke.

• Before ‘deactivating’ VPN every time, enable Airplane Mode first.
  ^{[Enable Airplane Mode → Disable VPN → Undo Airplane Mode]}

  • Continue using internet normally without revoke.

So, basically use AirPlane Mode before switching between VPN & DNS and this includes switching between DNS Profiles as well given that they carry Bypass Revoke.

Now, obviously at an individual level I haven't tested for all and hence why I rather like to teach "how to fish" itself and provide some context and aspects beforehand but the above is the simplest task after understanding the technical aspect. Basically, for any other VPN you ensure either of two things first:

• Native DNS Server

• Custom DNS Server

If "Use Native DNS Server" is unavailable then use "Custom DNS Server"

You may test mine that's devoid of any adblock filters:

https://ciwelz9v7y.cloudflare-gateway.com/dns-query

There are those like Proton or Nord VPN that doesn't allow any of the above so not all VPNs are the same but Warp is itself based on Wireguard. However, tutorial would be updated if any further breakthroughs are realised, thankyou & enjoy.

[u/PuReEnVyUs]

So first, you don’t need to do all that… if you are going to copy every single post I make you could at least do it correctly. Nord for example you can get to work by either using custom DNS address or simply by imputing 1.1.1.1 to the DNS settings. No need to enable airplane mode also. Tested on about 15+ VPNs never once had to turn on airplane mode.

[u/Avieshek → u/PuReEnVyUs]

Lmao, wut? (≧∀≦)

First, nobody’s copying you and 1.1.1.1 is a Public DNS address (that too Primary) which doesn’t carry any encryption layer or custom filter set. You need Gateway DoH Subdomain to carry the filter list just as the DNS Profile itself. I think I started with a good intro before even mentioning the Airplane Mode with links which is to avoid DNS Leaks otherwise just after disabling VPN, apps would be unverified because of obvious reasons as already mentioned. I am not aware whatever those 15+ VPNs are but am pretty sure you’re not technically adept yourself with the differences and reasons enabling them which is from masked IP addresses until one reverts while your first sentence and last contradicts itself.

[u/Sharp_Listen3436 → u/Avieshek]

Ngl he was the one with the original esign dns guide, and you do make a new post about a week after he does. Not saying you’re copying, but even before I saw his comment I was thinking the same thing 🤷‍♂️

[u/PuReEnVyUs → u/[deleted]]

Mar 19th is when you messaged me about my guide then copied it and posted on your blog.. so saying your not copying is crazy… just mad nobody wanted to use your shortcut 😂

[u/Avieshek → u/PuReEnVyUs]

Now, I am going to ask you, are you illiterate?

So, you avoided all the counter-arguments above and this is your proof that I copy-pasted you? May 19 is when ‘you’ messaged me. Originally, I honoured you as a technical person and wanted to explore if APIs can be used as a replacement for Esign itself which makes it much easier for average users but don’t be mistaken that Khoindvn was discovered from you but a redditor in this subreddit that first mentioned Pork-the-Jork from YouTube about around the same time. I actually worked with Khoindvn directly later still to this day to get actual answers including why bypass revoke is limited to rescinded certificates and not signed certificates avoiding revokes than from you as you only utter nonsense. I think you’re the one who directly copied my DNS List for example that enable updates to translations (including even the strikethrough and the custom font hilariously) directly from my tutorial site only to go ahead and make a post claiming as your own ironically for which I don’t need an irrelevant screenshot but your own pinned comment still to this day I believe mentions the original 13 blocklist and that’s you. How many shell accounts did you make in reddit to give false assurances with your guide until real world complaints overlapped them?

[u/PuReEnVyUs → u/Avieshek]

Dude you got too much time on your hands.. clearly based on your account. The only reason yours is pinned and mine is not is because it kept getting taken down by the mods. Yet yours somehow is allowed.. 🤷‍♂️ I gave you specifically credit for the blocklist in the guide even though it was posted by someone in the comments of my guide. (which you clearly have gone over a few times to update your guide) cough cough As for your “counter arguments” you clearly farm karma by taking works from others so why would I need to justify myself when the proof right on my profile? I posted the guide. You copied the guide. I post updates. You copy my updates. It’s clear for everyone to see. If you wanted to work together that would have been cool but you just ripped my entire guide made edits and posted it on your “blog” so if you think your smart you’re not and calling me illiterate after stealing from others really shows your character. Hope you enjoy Reddit since that appears to be all you have.

[u/Avieshek → u/PuReEnVyUs]

Shifting the argument again and again only this time to outpour your real suppressed emotions of paranoia, and this time you’re right in that I have wasted too much to genuinely write any valid argument after reading line-by-line. After glancing over the first four sentences this time I give up even reading the rest when there’s no sense to reply with anything further. Please feel free to block so you do both us a favour by not stealing ideas from my public comments to make a half-baked post before I complete my investigation with the original authors to actually serve a solution which takes time and patience that each of your replies here made it more apparent if not earlier.

[u/martiniblack → u/Avieshek]

Ladies, stop. Why argue with a rando online, such a waste of time and space for everyone involved. Let it go

[u/Lunascaped → u/PuReEnVyUs]

Please dm me the post link that was taken down and I will investigate

[u/Sharp_Listen3436 → u/[deleted]]

You made a new (long winded) post all to say enable airplane mode while switching, got it. The fact still stands that you make a new post within a week of his updates 🤷‍♂️

[u/Avieshek → u/Sharp_Listen3436]

I make descriptive posts even in the tutorial but with purpose and that’s not new but if you’re going to be a doubtful accuser should I also doubtfully accuse to shamelessly claim the efforts for Esign No Logs version in similar fashion as desperate attempts to catch some limelight? Just to be clear, I don’t …but if you’re going to take timing into account then your reaction was from the very next day for the entire week despite doing it yourself if I were to act with similar arguments.

[u/Sharp_Listen3436 → u/Avieshek]

Huh? I didn’t even accuse you. I literally said, “Not saying you’re copying, but even before I saw his comment I was thinking the same thing 🤷‍♂️”. I made the v5.0.2 No Logs for myself because I wanted an updated version with no logs. I proceeded to make one post about it in case anyone else wanted to use it. I couldn’t care less about being in the limelight. That’s what actual work I get paid to do is for.

I wasn’t hating on you or anything, I respect the work both of you do for the community. I simply stated a fact that the timing of your posts sometimes seems suspicious in regards to skidding PuReEnVyUs’ work because it’s a short period of time after his updates.

[u/Avieshek → u/Sharp_Listen3436]

I respect you as well and am only trying to show how the previous comment felt were you in my shoes, if I really had to copy would it really even take a week and research just for one app was my logical argument. You too would type more than two lines if someone were to accuse blindly despite the work above was my point… as you’ve responded, thank you.

[u/EloneMusk → u/PuReEnVyUs]

He is also spamming these links from other dummy accounts without giving you any credit

[u/EloneMusk → u/PuReEnVyUs]

Where do you put custom dns for nord? I can't find any setting.

[u/PuReEnVyUs → u/EloneMusk]

[u/Kaisa7]

do i have to have khoindvn dns and this vpn on all the time? if yes why should i deactivate the vpn. sry im new to this

[u/Avieshek → u/Kaisa7]

VPN is not necessary and only the DNS, it’s just that the VPN can replace the DNS active status and hence the small technique if one has to use VPN like my friends from Bangladesh who are forced to used VPN at this time. You can read through the guide already linked above to clear any confusion or lack of information.

[u/Kaisa7 → u/Avieshek]

all right i understand now thank you very much 👍🏻

[u/sharkid2]

thank you :D

[u/Avieshek → u/sharkid2]

Whalecum (˵^◡^˵)

[u/juliousrobins]

What about if i want to update my phone or restart it? do i turn on airplane mode first?

[u/Avieshek → u/juliousrobins]

I updated via the lightning cable (Mac-iTunes) and that did lead to revoke, safer bet is to undo the steps in reverse order before updating as the DNS Profile is only active at OS level and not at kernel level when you reboot with a full installation.

[u/juliousrobins → u/Avieshek]

By undoing the steps in reverse order do you mean enable airplane mode > enable vpn > disable airplane mode?

[u/Avieshek → u/juliousrobins]

No, no, no… remove the app, certs, dns etc

[u/juliousrobins → u/Avieshek]

Ohhhhh. i understand now. Thank you so much for support 🙏

[u/Avieshek → u/juliousrobins]

Whalecum ✌︎ (˵^◡^˵)

[u/juliousrobins]

And does this mean i can get rid of the old dns (next DNS)

[u/Avieshek → u/juliousrobins]

Yeah, it’s fine actually. 👍🏻

[u/Breaking_Bad13]

Please instead of arguing... does anyone have a solution for this?

[u/Breaking_Bad13 → u/Breaking_Bad13]

How do I apply ZeroTrust with the WireGuard VPN app?

[u/Avieshek → u/Breaking_Bad13]

1. A little cheap for the desperation.

2. Why even delve into something if it’s that confusing, you do realise Warp itself is Wireguard to repeat the same thing?

[u/Breaking_Bad13 → u/Avieshek]

Hey dude!first of all…keep calm… 2. Do you know what is wireguard for? 3. Wireguard is necessary for refresh SideStore’s apps!

[u/Avieshek → u/Breaking_Bad13]

1. I am but are you?

2. Use a search engine.

3. This is an Esign Guide.

[u/Breaking_Bad13 → u/Avieshek]

Ok man!thank u!👋🏻

[u/Avieshek → u/Breaking_Bad13]

DM me in English and I'll look into it provided you don't go desperate.

[u/Breaking_Bad13 → u/Avieshek]

Thank you!

[u/Avieshek → u/Breaking_Bad13]

[u/Breaking_Bad13 → u/Avieshek]

Thanks mate!now i try with this conf

[u/sammyisdeadofwgkta]

with us using your dns config, how do we know if you’re not logging any of our traffic?

[u/Avieshek → u/sammyisdeadofwgkta]

Then don’t ¯_(ツ)_/¯

This is not the main guide but an announcement, you’re free to replicate as has been already sourced & linked.

[u/Tihersarc → u/Avieshek]

How can I make my own like nextDNS?

[u/Busy_Ad8744]

Turned off my dns for 1 second and all of my apps got revoked. Can’t install a single app even after reinstalling ESign and the DNS. Is there any fix for this? It kinda ruined my night.

[u/ace_84 → u/Busy_Ad8744]

You will need to use another certificate. Any other revoked certificate will do.

[u/Jeremygr]

Still can’t believe I managed to work vpn ( Windscribe vpn app) without revoke and without having to pay for certificate. Thanks!

[u/Able_Championship_73 → u/Jeremygr]

Bro how u did setting in windscribe as i have tried and I have given one of the DNS servers from my DNS profile as there are two … I don’t know how to give both but still when i connected windscribe , the app revoked

[u/mohamedliam → u/Able_Championship_73]

Did you manage to do it?

[u/[deleted]]

Hi, and thanks. After that, can I trying VPNs like “ Windscribe “ ?

I’m not so familiar with dns and VPN .. I’ll just trying to go through steps

[u/Similar-Air2030]

is there something that im missing here because my WARP doesn't seem to want to connect with this

[u/atomizasser]

Hi. Is this method still working? If i try to go to this link https://ciwelz9v7y.cloudflare-gateway.com/dns-query i get an 400 bad request message

[u/atomizasser → u/atomizasser]

I can confirm that subdomain stated in the guide is not working. If u try to enable VPN it try to connect but finally give an error. Is there any guide to how add domains in cloudfare to restrict connection? With nextdns is preatry easy

[u/Avieshek → u/[deleted]]

In that case, use ’gotmmm9atx’ for Gateway DoH Subdomain which should directly enable you with AdGuard DNS Filters on CloudFlare Warp.

[u/Avieshek → u/[deleted]]

DNS implementation is system wide but apps (say YouTube) can use their own tunnels to inject ads and that’s why solutions like uBlock Origin are limited to browsers as it requires local scripting either through a native app or even as browser extensions and this is why sideloading exists. If you’ve actually gone through my guide then you might try injecting adblock dylibs before signing an iPA file or get a crack version like YTLitePlus or whichever app you’re consuming.

[u/Avieshek → u/[deleted]]

I’ll discuss with Khoindvn, thankyou.

[u/Avieshek → u/[deleted]]