Is Signer.Digital Digital Signature, PKI safe?

Low risk

Signer.Digital Digital Signature, PKI lets any webpage send PKI action requests to its native host.

Its content script runs on every web page and accepts same-window postMessage objects that only need src: "user_page.js". Those messages are forwarded unchanged through the background script to the Signer.Digital native host, which exposes certificate selection, signing, decryption, smart-card, and certificate import actions.

Part of this rating comes from analysis signals we haven't published as detailed findings yet.

Chartered Information Systems Pvt. Ltd.v5.0.2Firefox Add-ons
17Risk
Who publishes it

Chartered Information Systems Pvt. Ltd. - no other listings under this identity, 3 shared hostnames

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Chartered Information Systems Pvt. Ltd.

Shared hosts - 3 hostnames

Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.

downloads.signer.digital
Also called by 3 other listings, including Signer.Digital
signer.digital
Also called by 3 other listings, including Signer.Digital
web.signer.digital
Also called by 3 other listings, including Signer.Digital

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

What it can do

Permissions this extension asks for, as declared in version 5.0.2. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Talk to a program installed on your computer, outside the browser's sandbox

    nativeMessaging

Where it sends data

Destinations our analysis observed Signer.Digital Digital Signature, PKI contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • sd_firefox_extension native host

    Signer.Digital Digital Signature, PKI sends data to sd_firefox_extension native host. Named as a recipient in this extension's own analysis.

Updated 2 November 2026amo-2659200