Introduction

Hello, Welcome to my guide on how to sideload on Apple Devices using a method I came across a while back. This sideloading method has worked for long periods of time, without any app limits and without a PC. I eventually found some small letdowns such as the DNS at the time was made by a random Vietnamese developer with no open-source data, which naturally has some privacy concerns.

ESign has also been widely accused of stealing data. After a few months of using both services, I decided to reverse-engineer the DNS and discover how the enterprise-signed ESign was downloaded over the web with just a click. I enabled better revocation preventions, unlike others who continue using other people’s DNS without effort, often giving bad instructions.

My DNS is compatible with other services like Scarlet, Feather, and other enterprise signing apps. For more information, click here.

Welcome to my Ultimate Sideloading Guide! If you have any issues, requests, or ideas, please create an issue.

Scarlet/Feather and Other Sideloaders

My DNS is compatible with both of these services! Follow Part 1 of the guide. Parts 2 and 3 are for ESign itself.

Compatibility

This guide works for all iOS, iPadOS, and macOS devices on the latest versions. However, versions below iOS 12, iPadOS 13, and macOS 11 may not be supported.

How Does This Method Work?

• WhySooooFurious DNS Blocker: This blocks Apple from revoking your enterprise-signed apps, preventing them from being permanently revoked.
• ESign: An app manager that uses leaked enterprise business certificates to get apps running on your device.

Before We Start

Ensure you have not used services like Scarlet before, as the certificates used by me will be revoked. This method works as long as all steps are followed, and the DNS is never disabled, which is crucial.

Step 1: Installing the WhySooooFurious DNS Blocker

Note: I will eventually add visual aids in the guide itself.

1. Go to Downloads and click on the WhySooooFurious DNS Blocker. Allow the download and close the prompt.
2. Open Settings, go to General > VPN & Device Management.
3. Click on the downloaded profile and install it. You may need to input your password.
4. The DNS should now be automatically enabled. Do not change the DNS to automatic, or your apps will get revoked!
5. Go to General > About > Certificate Trust Settings.
6. Enable full trust for the NextDNS Root Certificate.

Continue to Part 2 if you want to install ESign.

Step 2: Installing ESign

Note: Visual aids will be added later.

1. Go to Downloads and click on "ESign Direct Install".
2. Click on install when the popup appears.
3. Open Settings, go to General > VPN & Device Management.
4. Select the HDFC app and click on Trust. Then click on Allow.
5. Your device may need to restart. If it restarts, swipe up and install the profile.
6. ESign should now be on your home screen, fully functional.

Step 3: Setting Up ESign

Note: Visual aids will be added later.

Q&A

Q: Won’t a VPN bypass the DNS and revoke my apps?
A: It shouldn’t, based on the settings I used. However, I don’t recommend using a VPN. If you must use one, follow this guide.

Q: Will a restart bypass the DNS and revoke my apps?
A: No, a restart won’t affect the DNS or revoke your apps.

Q: Are you tracking my furry content?
A: No, I have no need to monitor your expenditures.

Q: Can I see the NextDNS settings used?
A: Yes, send me an email request, and I’ll share a viewing invitation.