Web browsers cannot directly access locally installed digital certificates and signing hardware. This extension solves the gap by bridging Prodemge web applications with a native desktop application (signa.extension) that can access installed certificates and perform digital signatures.

1. User installs the native desktop app (signa.extension) on their computer. 2. User installs this Chrome extension. 3. When a Prodemge web application needs a digital signature or certificate listing, it posts an INICIAR_SIGNA message. 4. content.js intercepts the message and forwards it to main.js. 5. main.js connects to the native app via chrome.runtime.connectNative('signa.extension') and relays the request. 6. The native app accesses local certificates, performs signing, and returns results back through the chain.

Target users: Brazilian government employees and officials using Prodemge systems in Minas Gerais / Users who need to digitally sign documents in Prodemge web applications / Users who have digital certificates (ICP-Brasil) installed on their computers

Extension is very small (5 files, ~6KB) with minimal code — straightforward bridge pattern
Cannot verify the native desktop application (signa.extension) as it is not included in the package
Cannot verify whether Prodemge destination services require their own authentication

Monetization

No paid features detected

No payment logic, no premium tiers, no billing/subscription APIs, no upgrade prompts found anywhere in the source. All 'pro' keyword matches are from 'processOperation', 'Prodemge' (company name), and verified_contents metadata — none indicate paid/professional tier features. The extension is a simple native messaging bridge with no feature gating.

Confidence: 95
Payment platform: --
Source: AI / High
Login required: No
Reason: The extension is a passive communication bridge between Prodemge web applications and a native desktop app (signa.extension). It contains no login UI, no authentication logic, and no credential storage. The 'session' keyword hits (content.js:15, main.js:10) are sessionId values used purely for message routing between content script and background worker, not authentication sessions. The extension facilitates certificate-based authentication into destination Prodemge services but does not itself require login.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：nativeMessaging

Publisher

Prodemge

Companhia de Tecnologia da Informação do Estado de Minas Gerais - Prodemge

Email: [email protected]
Phone: --
Address: Rua da Bahia, 2.277 Belo Horizonte, MG 30160-019 BR

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access