When you download/use of scarlet/DNS dns will block blacklist. Allowing the user to download apps/.ipa with a revoked certificate.
