Is Sign JPRPS safe?
Sign JPRPS lets approved Montenegrin tax portal pages send base64 documents to the local native signing app.
When an allowed tax portal origin sends a sign request, the extension forwards the supplied base64 document plus certificate issuer and serial number to the local native host. The native app returns the signing result through the extension to the requesting page.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 1.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging
Where it sends data
Destinations our analysis observed Sign JPRPS contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- com.certapp.program
Sign JPRPS sends data to com.certapp.program. No other extension we have analysed sends data here.