- Dichromate is being archived indefinitely. A more professional project may be created sometime in the distant future.
- Dichromate authored patches are free to use in other projects under the BSD 3-Clause Clear License.
- The Dichromate branding is not released under an open source license, and therefore cannot be used in other projects.
Dichromate is a privacy and security hardened Chromium fork. It is based on the now discontinued Hexavalent.
We follow the Chrome release schedule, and we try to release a newer build within 1-2 days of a stable release of Chrome.
Dichromate targets only Windows when developing patches and creating releases. It can be compiled for other platforms, but will not have all of the security features.
Click here for build instructions.
Dichromate has a number of additional security and privacy features compared to Chromium.
This is a list of some of them:
- Windows Sandbox integration
- The GPU and Renderer processes run in the Windows AppContainer
- Browser dynamic code is disabled, and is enforced by ACG
- Flag to disable V8's JIT compiler for Javascript
- Flag to disable reading from the HTML5 canvas
- HTTPS-only mode is the default
- WebRTC hardening
- Compiled with -fstack-protector-strong, -fwrapv, -ftrivial-auto-var-init=zero, and CFI
- Disabled basic Google services such as Safe Browsing, browser sign in, and crash reporting
- Partitioned Cookies enabled by default
Anyone is welcome to contribute to Dichromate, just make sure that the branding patch is always the last one in the list. This makes it easier when porting patches to a newer release.
Although our releases are usually on time, Dichromate is a hobbyist project, and we cannot guarantee that releases are timely.