Is CFCA CryptoKit.Paperless.tycw Extension safe?
CFCA CryptoKit.Paperless.tycw Extension relays messages between CFCA/Genertec banking pages and a local smart-card signing application.
Pages on gt.cn, gtfc.com.cn, and genertec.com.cn domains can ask the extension to open a connection to a native smart-card app installed on the computer and pass data back and forth with it, so the page can request a digital signature for a transaction. The extension forwards whatever host name and message the page sends straight to that native app without checking the content itself; the native app's own installer decides which extension IDs it will talk to.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 3.4.0.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Read and change your data on gt.cn
http://*.gt.cn/* and 1 more
Read and change your data on gtfc.com.cn
http://*.gtfc.com.cn/* and 1 more
Read and change your data on genertec.com.cn
http://*.genertec.com.cn/* and 1 more
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging