Is NTKO safe?

Question

Is NTKO safe?

Accepted Answer

NTKO is low risk. When a webpage using NTKO's document-editing features opens a connection to the NTKO desktop application, the extension automatically reads every cookie your browser holds for that page's domain and bundles them — along with the page URL and referrer — into the message it sends to the native app. No consent prompt is shown. The native app receives your session cookies, authentication tokens, and any other cookies set by the site. Because the connection can also be triggered by any web page that exploits the missing origin check (see the related postMessage claim), an attacker site could cause this cookie harvest to happen for any tab the user currently has open.

Is Ntko office document control browser plug-in. safe?

Findings