Is Connecteur de sécurité banque à distance safe?

Connecteur de sécurité banque à distance bridges BPCE-group banking pages to a local certificate-signing application via native messaging.

The extension listens for messages from a set of BPCE-group bank domains and forwards signing requests to the native host fr.turbosa.itce.host installed on the user's computer. The native host performs RSA-based certificate operations and returns a signed XML response, which the extension verifies against a hardcoded public key before relaying the result back to the banking page. No user data is sent to remote servers; all communication stays between the browser and the local signing application.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.