Is e-signer - Assinatura Digital safe?

e-signer injects a digital signing and certificate API into local file:// pages and forwards requests to a locally installed native module.

The extension's content script runs on file:// pages and on vendor domains, registering CustomEvent listeners for signing and certificate operations. Any local HTML file a user authorizes gains access to these operations, which are relayed to the locally installed RLV native module via native messaging. Three of these operations — fingerprint list, install, and supported-list — are forwarded to the native module without verifying that the requesting page is an authorized domain.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.