Comodo Dragon 19.2

[JoWa]

Comodo Dragon 17.0 is now available for download from the following link:
http://download.comodo.com/dragon/DragonSetup.exe

IMPROVED:
- Chromium core 17.0.963.38.

FEATURES:
- Silent update.

KNOWS ISSUES:
- There is no way to switch between multiple user profiles.
- "Comodo Dragon is unresponsive" message when launching a second instance of Dragon after install.
- "Start browser in incognito mode" setting is hidden.

https://forums.comodo.com/CD-t80879.0.html

[JoWa]

Comodo Dragon 17.1 is now available for download from the following link:
http://download.comodo.com/dragon/DragonSetup.exe

FIXED:
- "Start browser in incognito mode" setting was hidden.

CHANGED:
- Removed beta channel. All users that were using Dragon beta will automatically update to the latest stable.

https://forums.comodo.com/dragon-t80920.0.html

[JoWa]

Dragon beta is back.

Comodo Dragon Beta 17.2 is now available for beta testing and should not be used on production systems.
The beta can be downloaded from the following link:

http://download.Comodo.com/dragon/beta/DragonSetup.exe

IMPROVED:
- Chromium core 17.0.963.46.

CHANGES:
- CertSentry preview.
- Import is available in Portable version.

FIXED:
- "Comodo Dragon is unresponsive" message when launching a second instance of Dragon after install.
- Update was not downloaded when current tab had a low-validation SSL certificate warning loaded.

https://forums.comodo.com/dragon-t81741.0.html

[JoWa]

The new feature CertSentry:

Last year's high-profile attacks (apparently by state-level adversaries) on several commercial CAs made our industry painfully aware that certificate revocation checking, as currently implemented, is ineffective. We should expect further attacks and we need to raise our game to defend against them. According to PKI theory, revoking a mis-issued certificate should be enough to protect users, but in reality this isn't currently the case. Most browsers "soft-fail" online CRL/OCSP checks, which means that an attacker can thoroughly defeat the protocols.

As you might expect, Comodo have been advocating that the browsers should begin to "hard-fail" revocation checks ASAP! But the browsers continue to resist such suggestions. They argue that online revocation checks can be slow and they fail too often, due to a varieties of reasons, not all of which are within the control of the CAs.

Rather disturbingly, Google have just gone one step further in the wrong direction (in our opinion): They have just announced their intention to make Chrome stop performing online revocation checks altogether. They want to replace realtime online checks with a proprietary mechanism that uses Chrome's automatic update system to push partial lists of revoked certificates to each Chrome user. This would mean that 100% of Chrome users will have no protection against a (probably vast) number of revoked certificates!

We remain unconvinced that online checks are, or necessarily need to be, as bad as the browsers frequently claim. In our opinion, what we need now are cold, hard statistics that reveal just how slow online checks are and just how often they fail.

Enter CertSentry.

We have grand plans for CertSentry (much more than tackling the problems with traditional revocation checking), but the main function of version 1 will be to gather extensive statistics on the health of the current revocation checking infrastructure. We are confident that these statistics will prove invaluable to our efforts to "fix" revocation checking!

Our plan is to roll out CertSentry first to all Dragon users and then to all CIS users. But right now, we need your help to beta-test it by installing Dragon Beta version 17.2.0.

Once installed, CertSentry is invoked whenever you run any application that uses the standard Microsoft CryptoAPI functions to perform revocation checks. Such applications include Dragon, Chrome (for now, at least!), Internet Explorer, Outlook, etc.

This CertSentry beta also has experimental support (disabled by default...for now) for "hard-failing" online revocation checks. If you would like to switch this feature on, simply add one of the following values to your Windows registry:
To enable "hard-fail" only for certificates issued by Comodo's CA system:
HKEY_LOCAL_MACHINE/SOFTWARE/COMODO/CertSentry/COMODOFailureMode (value "2")
To enable "hard-fail" for all certificates from all CAs:
HKEY_LOCAL_MACHINE/SOFTWARE/COMODO/CertSentry/DefaultFailureMode (value "2")

Feedback greatly desired. We believe the code is stable, but please let us know of any repeatable host application crashes that don't occur with CertSentry not installed. Also, if you try out "hard-fail", let us know how you fare.

https://forums.comodo.com/CertSentry-t81747.0.html

[JoWa]

Comodo Dragon 17.3 is now available for download from the following link:
http://download.comodo.com/dragon/DragonSetup.exe

IMPROVED:
- Chromium core 17.0.963.46.

FIXED:
- Flash Player plugin crashes, causing Comodo Dragon to crash.
- Fixed compatibity with some extensions (Stealthy, SingleFile) that sometimes caused Dragon to crash.
- "Comodo Dragon is unresponsive" message when launching a second instance of Dragon after install.
- Update was not downloaded when current tab had a low-validation SSL certificate warning loaded.

CHANGED:
- Import is now available during installation of Portable version.

https://forums.comodo.com/CD-t82005.0.html

[McLovin]

I've been trailing this and so fat its been a great browser.

[JoWa]

Comodo Dragon 17.4 is now available for download from the following link:
http://download.comodo.com/dragon/DragonSetup.exe


IMPROVED:
- Chromium core 17.0.963.56.

FIXED:
- Crash during importing data from Chrome.

https://forums.comodo.com/CD-t82293.0.html

[JoWa]

Comodo Dragon 17.5 is now available for download from the following link:
http://download.comodo.com/dragon/DragonSetup.exe

CHANGES:
- Chromium core 17.0.963.79.
- Multiple profiles support.
- It is now possible to access local web resources with "Enable malware domain filtering" option enabled (doesn't work on Windows XP yet).

https://forums.comodo.com/-t82847.0.html

[JoWa]

Comodo Dragon 18.0 is now available for download from the following link:
http://download.comodo.com/dragon/DragonSetup.exe

CHANGES:
- Chromium core 18.0.1024.140.
- Ability to download and install Flash Player during installation of Dragon.
- Includes CertSentry.

FIXED:
- Installer was unpacked twice during initialization.

https://forums.comodo.com/-t83291.0.html

[JoWa]

Comodo Dragon 18.1 is now available for download from the following link:
http://download.comodo.com/dragon/DragonSetup.exe

CHANGED:
- Chromium core 18.0.1025.152.
- Right-click menu to hide Site Inspector button added.
- Right-click menu to hide "Share page" button added.

FIXED:
- Fixed detection in installer if Flash Player is already installed.
- Installation didn't work correctly if Dragon was launched during silent automatic update.
- Extension balloon was displayed outside of the Comodo Dragon window.

https://forums.comodo.com/-t83670.0.html