Is Firma con token safe?
Firma con token bridges Argentine government websites to a local digital-signing token via Chrome native messaging.
The extension listens for connections from Argentine government domains (gob.ar, gov.ar, afip, GCBA, and others) and relays their messages verbatim to a local native host named 'gcbatoken'. Responses from the native host are returned to the calling page unchanged. No data is sent to external servers; all communication stays between the browser and the locally installed signing application.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.3.1. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging