v2.6.0

• Use Argon2id and HKDF to:
  • Avoid sending plaintext room names to the server
  • Derive a room secret from the plaintext room name that authenticates ECDH key exchange for group messages
• Add a strength meter to inform users how resistant their room name is to brute-force/dictionary attacks
• Add a button to generate random, pronounceable room names
• Various login page and help text tweaks

v2.5.9

• Add support for onion service (http://doggyhegixd2dvx5bqkxlyqf2pjpu5y72nwiokkn7oegdjpva5ypvyqd.onion/)
• Fix "nickname in use" error checking for new ejabberd version
• Update Chrome extension manifest to V3
• Improve reconnect handling
• Replace help text with more useful information
• Update libraries

Cryptodog 2.5.8

• Stability and security improvements (catch exceptions during multiparty/OTR message handling)
• SMP verification is now opt-in on a per-buddy basis, with intent to deprecate and remove in 2.6.0
• Anti-spam bugfixes
• UI bugfixes
• Buddy colors now pre-selected to be aesthetically pleasing

Cryptodog 2.5.7

• Handle XMPP pings to eliminate "phantom" users (prior versions will no longer work correctly with the Cryptodog server)

Cryptodog 2.5.6

• "Missing recipients" warnings are no longer shown for binary messages
• Security: Fix denial-of-service issue caused by reading null multiparty objects (reported by @superp00t)
• Security: Show warning icon for buddies with leading/trailing whitespace

Cryptodog 2.5.5

• Update a few libraries
• Feature: Experimental support for saving encryption keys locally (thanks to @superp00t)
• Security: Fix a denial-of-service issue caused by receiving messages that are invalid UTF-8 (thanks to @superp00t for discovery and @pavona for reporting)

Cryptodog 2.5.4

• Fix issue where embedded images would open multiple tabs

Cryptodog 2.5.3

• Fix issue where Firefox ESR was unable to load worker script due to CSP violation

Cryptodog 2.5.2

• Feature: Convert image data: URLs to links for viewing in a new tab (credit: @superp00t)
• Security: Automatically ignore likely spammers (with conservative threshold)
• Security: Add option (buddy whitelist) to automatically ignore all newcomers to a room
• Security: Prevent sending/receiving excessively large messages (fixes #46)
• Security: Harden Content Security Policy just a bit

Cryptodog 2.5.1

• Major bug fix: #45
• Minor bug fix: Stopped double-escaping room and nickname entered by user