Enables use of CAdES-format electronic digital signatures (ЭЦП) in Chrome/Edge/Firefox by bridging web pages to the locally installed CryptoPro native messaging host, since NPAPI/PPAPI plugin APIs are no longer supported in modern browsers

1. User installs the extension along with the CryptoPro native messaging host on their OS. 2. When a web page loads the cadesplugin JS library, the content script detects it and establishes a communication channel. 3. The web page sends signing/verification requests via window.postMessage. 4. Content script relays requests to background.js, which forwards them to the native host via native messaging. 5. Results are returned back through the chain to the web page.

Target users: Russian users and organizations requiring CAdES digital signatures in the browser / Users of CryptoPro cryptographic software suite / Government and enterprise users working with electronic document signing

Cannot inspect the native messaging host (ru.cryptopro.nmcades) which is a separate OS-level application - CryptoPro CSP may have its own licensing
The extension itself is clearly free but the underlying CryptoPro cryptographic software suite may require paid licenses for commercial use
No privacy policy URL available to verify data handling practices

Monetization

No paid features detected

The extension contains no payment UI, no subscription logic, no license checks, no premium gating, no billing API calls. The keyword matches for 'pro' were false positives matching words like 'approved_site', 'properties', 'promise', 'propset_'. The extension is a free technical bridge for the CryptoPro CAdES plugin ecosystem.

Confidence: 95
Payment platform: --
Source: AI / High
Login required: No
Reason: The extension is a technical bridge between web pages and a locally installed CryptoPro native messaging host (ru.cryptopro.nmcades). It has no login UI, no authentication flows, no credentials handling, and no account creation. All operations happen locally via the native messaging API.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：nativeMessaging

Publisher

cadescompany

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access