Bottomline PTX eSigner

The extension appears to be from Bottomline Technologies, a legitimate financial technology company that provides payment and banking solutions. However, the extremely low user base and minimal rating data (only 2 reviews with 3.0 stars) suggest limited adoption and testing. The lack of detailed developer information and recent update history raises additional concerns about maintenance and support.

The extension's permissions are disproportionately broad for what appears to be a digital signing tool. The combination of universal host permissions (*://*/*) and content script injection across all websites is excessive for an eSigning application, which should typically only need access to specific banking or payment platforms. The native messaging permission suggests communication with local system components, which combined with broad web access creates significant attack surface. These permissions would allow the extension to monitor all browsing activity, access sensitive data on any website, and potentially exfiltrate information through native messaging channels.

Given the high-risk permissions and limited user validation, consider running this extension in a separate Chrome profile dedicated solely to Bottomline PTX activities. Only install if absolutely required for business operations and ensure it's the official version from Bottomline Technologies. Monitor the extension's behavior closely and disable it when not actively needed for eSigning tasks. Contact Bottomline support to verify the extension's legitimacy and necessity of broad permissions.