Message Secure Send
Version 0.23 View in Chrome Web Store
Last scanned: 5 months ago
| force re-scan
Extension Details
Size:
87.51KiB
Last Updated:
September 22, 2022
Users:
257
Context-Aware Verdict
This section provides a Claude-based AI analysis that applies additional context to the risk. Results are not guaranteed to be accurate.
LOW
Risk Level
Trust Factors:
- The extension has a relatively small user base (257 users), which could indicate that it is not widely trusted or popular.
- The lack of developer information and reviews makes it difficult to assess the reputation and trustworthiness of the extension.
Concerns:
- The extension requests the "https://mail.google.com/" permission, which allows it to access and potentially modify data on the Gmail website. This permission seems unnecessary for an extension named "Message Secure Send" and raises concerns about potential privacy violations or data misuse.
- The extension uses the older Manifest Version 2, which has fewer security restrictions than the newer Manifest Version 3.
Recommendations:
- Exercise caution when using this extension, as the requested permissions seem excessive for its stated purpose, and there is limited information available about the developer or the extension's reputation.
- Consider using alternative extensions from reputable developers that have a larger user base and better reviews, especially for sensitive tasks like sending secure messages.
- If you decide to use this extension, it is recommended to run it in a separate Chrome profile or a sandboxed environment to minimize potential risks to your main browsing environment.
- Keep an eye out for any suspicious behavior or unauthorized data access by the extension, and promptly remove it if any concerns arise.
Security Analysis
This section provides a detailed analysis of the extension's security posture, without broader context. Assumes worst-case impact.
LOW
Overall Risk
Based on 1 total findings, ranked without considering overall context, including 0 high-risk and 1 medium-risk findings.
MEDIUM
Older Manifest Version
This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.
Security Analysis Details
Required Permissions:
- https://mail.google.com/
Embedded URLs (6 total):
| https://chrome.google.com/webstore/detail/secure-mail-for-gmail-by/jngdnjdobadbdemillgljnnbpomnfokn/reviews?hl=en&gl=US | https://chrome.google.com/webstore/detail/message-secure-send/ilgobmalecajfdmdbeonojopeglcfgpg | |
| http://developer.chrome.com/extensions/contentSecurityPolicy.html | https://clients2.google.com/service/update2/crx | |
| https://mail.google.com/ | http://crypto-js.googlecode.com/svn/tags/3.1.2/build/rollups/aes.js |
Raw Manifest
{ "name": "Message Secure Send", "icons": { "16": "icon_unread_16.png", "48": "icon_unread_48.png", "128": "icon_unread_128.png" }, "version": "0.23", "short_name": "Message Secure", "update_url": "https://clients2.google.com/service/update2/crx", "description": "This extension securely encrypts/decrypts Gmail™", "permissions": [ "https://mail.google.com/" ], "browser_action": { "default_icon": "icon_unread_16.png", "default_popup": "popup.html" }, "manifest_version": 2 }
Secure Annex (beta)
Coming soon...