Developer(s) Comodo Group Operating system | Development status Active Engine Blink | |
Stable release 52.15.25.664 (October 5, 2016; 4 months ago (2016-10-05)) [±] | ||
Comodo Dragon is a freeware web browser. It is based on Chromium and is produced by Comodo Group. Sporting a similar interface to Google Chrome, Dragon does not implement Chrome's user tracking and some other potentially privacy-compromising features, and provides additional security measures, such as indicating the authenticity and relative strength of a website's SSL certificate.
Contents
Security issues
A Google engineer publicly disclosed a serious security vulnerability in Comodo Dragon after Comodo failed to respond to the issue within the 90 days Google provides software vendors. The advisory warns users who install Comodo Dragon that Dragon replaces their default browser, hijacks DNS settings, and disables the same origin policy, which exposes users by allowing malicious websites to access private data.
Comodo's first attempt to patch the issue was unsuccessful.
The same origin policy protects users by ensuring scripts are limited to accessing resources from the same website, which prevents malicious websites from accessing private data on another webpage.
Features
Upon installation, Comodo Dragon offers the opportunity to configure either the Comodo Dragon or the user's entire computer to use Comodo's own DNS servers instead of the user's Internet service provider. Comodo Dragon performs additional checks on the SSL digital certificates of secure websites, and informs users if a site's certificate may be of insufficient strength. It includes an on-demand site inspector designed to determine if a site hosts malicious code.
Instead of Google Updater, Comodo Dragon features its own built-in updater. If Dragon is uninstalled, users are given the option of keeping Dragon's cache and cookie files or deleting them.
In addition, the following Google Chrome features are removed or disabled in Dragon:
Comodo tracking
Comodo tracks each user's time spent using the browser, its operating system, and browser inquiries about certificate revocation, which reveal the sites visited. Users can opt whether they also track activity and use in more detail than that. Comodo and its partners use cookies and Google Analytics. "Comodo may disclose data to its affiliates and business partners who have established similar privacy standards."
Their privacy statement says that only in California is the IP address considered personal information. Comodo creates log files which track users, identifiable by cookie or browser features (and IP address outside California): "Comodo uses log files comprising of non-personally identifiable information to ... track movements throughout the site ... and gather broad demographic information for aggregate use."
The browser is supported by ads which "relate to the content of information as part of the Product or queries made through the Product." They include many other software products, each with its own license.
The license has common terms about complying with subpoenas and interception orders, against reverse engineering, copying and sub-licensing, and disclaiming warranties and liability.
The license also requires disputes to be settled by arbitration in New Jersey. Users must give accurate registration information, and pay Comodo's costs " that, directly or indirectly, are based on your breach of this agreement, information provided by you, or your infringement on the rights of a third party."
