Is CFCA CertEnrollment.changecloud Extension safe?

CFCA CertEnrollment relays native-messaging commands from CFCA's own changecloud domains with no further validation.

This extension acts as a bridge between CFCA's certificate-enrollment web pages and a native application installed on the computer, using Chrome's native messaging API. Only pages on changecloud.com.cn or changecloud.cn can trigger it, but once a page reaches it, the extension forwards whatever host name and command it is given straight to the native app and returns its raw reply, without checking the command's contents.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.