稳定信号未识别到付费功能高风险权限组合

Certisign WebSigner

Extensão WebSigner Certisign

用户数1M当前公开安装规模

评分2.2商店平均评分

评论数158公开评论体量

Manifest 版本V3插件平台版本

7日增长0近 7 天净增用户

7日增长率0%相对周增长速度

视觉预览

Certisign WebSigner 媒体预览

1 项素材

趋势

用户增长趋势

按已采集快照查看用户数变化。

用户增长趋势

评分趋势

近 7 日评分趋势

展示最近 7 日窗口内已采集的评分快照，辅助判断近期评分是否稳定。

7 日评分变化

起始值

2.24

日/周/月增长表现

同口径展示 1 天、7 天、30 天的绝对增长与增长率。

1日增长暂无数据

----

7日增长持平

00%

30日增长暂无数据

----

技术摘要

版本、语言与抓取信息

查看发布时间、版本、支持语言、最近更新和抓取时间。

版本2.17.2

ManifestV3

大小424KiB

语言数3English / español / italiano

发布时间--

插件简介

查看插件说明、主要功能和适用场景。

This extension is used to sign documents digitally inside the Certisign platform (www.portaldeassinaturas.com.br). You will need to have a digital certificate in order to sign your documents, if you do not have one, please visit our website www.certisign.com.br and check which certificate fit your needs better.

评价

同类与相关插件

查看 Chrome 商店详情页中的相关产品。

CertiPlugin Chrome

工作流程与规划 / Workflow & Planning

Extensão utilizada para manipular certificados digitais. Esta extensão é utilizada somente nas aplicações da Certisign.

Assinador Digital Qcertifica

工具 / Tools

Extensão para assinatura digital de documentos

Web Signer

工作流程与规划 / Workflow & Planning

免费增值置信度 64

Extensão para assinatura digital no browser

Assinatura Digital no Navegador

开发者工具 / Developer Tools

Esta extensão é projetada para ser utilizada em conjunto com outras soluções e não funciona de forma isolada para a assinatura.

Assinatura Digital - ASSINE PELA INTERNET

工作流程与规划 / Workflow & Planning

Realize Assinaturas Digitais no navegador.

Web PKI

工作流程与规划 / Workflow & Planning

免费增值置信度 64

Extension to use digital certificates within webpages

AI 产品解读

Browser bridge extension enabling digital document signing via native cryptographic operations for the Certisign platform

Enables digital signatures in web browsers without deprecated Java applets by bridging web applications to native cryptographic APIs and hardware security devices (smartcards, tokens)

User installs extension + native messaging host (br.com.certisign.websigner). On the Certisign platform or any integrated web app, the web page sends signing requests via custom DOM events. The content script bridges these to the extension's service worker, which communicates with the native host to access local certificate stores and perform cryptographic operations (signing, certificate reading). Results are returned to the web page.

目标用户: Brazilian users and organizations using Certisign digital certificates / Users of portaldeassinaturas.com.br document signing platform / Users with hardware cryptographic tokens (SafeNet, smartcards)

No login/payment flows found in extension source, but the destination service (portaldeassinaturas.com.br) behavior was not directly auditable
The main.js file is a large bundled Angular app (~970KB) and was only partially examined via keyword search
The 'license' concept could be confusing — it refers to a developer SDK license (B2B) rather than an end-user subscription, which required careful source analysis to distinguish

付费分析

未识别到付费功能

The extension itself is free to install and use with no in-extension payment gates, upgrade prompts, or subscription flows. The 'license' concept in the code (lib.d.ts lines 7-9, event-page.js line 39/631-652) refers to a B2B developer-facing WebPKI SDK license key that web application developers purchase from Lacuna Software to integrate the signing API into their websites — not a user-facing subscription. The 'subscribe' keyword in main.js is Angular RxJS observable.subscribe() (programming pattern). The 'pro' matches are from words like 'problema', 'produced', 'provide' in Portuguese/Spanish locale strings. Digital certificates from Certisign are an external product sold separately, not a feature of the extension.

置信度: 80
支付平台: --
来源: AI / 高
需要登录: 否
登录理由: The extension itself does not implement any login UI, authentication flow, or user account system. It is a passive bridge/SDK that responds to requests from web pages. The content script listens for custom DOM events from web pages and forwards them to the native messaging host. No login-related code (auth endpoints, credential storage, OAuth flows) exists in the extension source. The destination service (portaldeassinaturas.com.br) may require account access, but the extension itself gates no functionality behind login.

权限风险

高风险权限组合

根据声明权限和站点访问权限，评估插件的访问范围与潜在敏感度。

敏感权限：nativeMessaging
扩展能力较强：storage、downloads、tabs

发布者

Certisign

Certisign Certificadora Digital

邮箱: [email protected]
电话: --
地址: R. Bela Cintra, 904 São Paulo, SP 01415-002 BR

上面的公开联系方式保持可见；开发者组合页对付费账号开放。

查看开发者组合页

权限

站点访问

Certisign WebSigner

Certisign WebSigner 媒体预览

用户增长趋势

用户增长趋势

近 7 日评分趋势

7 日评分变化

日/周/月增长表现

版本、语言与抓取信息

插件简介

最新评论快照

同类与相关插件

CertiPlugin Chrome

Assinador Digital Qcertifica

Web Signer

Assinatura Digital no Navegador

Assinatura Digital - ASSINE PELA INTERNET

Web PKI