Is TRAVIC-Sign safe?
TRAVIC-Sign runs content scripts on all URLs and allows its local native signing host to direct credentialed HTTP requests to arbitrary URLs.
TRAVIC-Sign bridges web pages to the local TRAVIC digital-signing application via native messaging (de.ppi.travic.sign). Its content scripts activate on every HTTP/S and file URL, scanning all frames for embed or object elements that match a TRAVIC MIME type. Once connected, the native host can instruct the extension to issue credentialed GET or POST requests — attaching session cookies — to any URL it specifies, and inject the response into the current page.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
Who publishes itPPI AG - no other listings under this identity
PPI AG - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
What it can do
Permissions this extension asks for, as declared in version 3.1.20.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.
Talk to a program installed on your computer, outside the browser's sandbox
nativeMessaging
Write to your clipboard
clipboardWrite
Store data in your browser
storage