BdE eSignature Web Extension

The extension appears to be associated with Banco de España (BdE), Spain's central bank, based on the name and content script targeting bde.es domains. However, several trust indicators are missing or concerning: no user count data, no ratings or reviews, missing author information, and no developer details provided. The lack of transparency around the developer identity is particularly notable for a financial institution's extension.

The primary concern is the nativeMessaging permission, which allows the extension to communicate with native applications installed on the user's computer. While this may be necessary for digital signature functionality, it creates a potential security bridge between the browser and the local system. The extension's scope is appropriately limited to BdE domains through content scripts, which is positive for containment.

The absence of user adoption metrics and reviews makes it difficult to assess real-world usage and reliability. For a banking-related extension, this lack of community validation is concerning.

Verify the extension's authenticity directly with Banco de España before installation. Consider running this extension in a separate Chrome profile dedicated to banking activities to isolate any potential risks. Only install if you specifically need to use BdE's digital signature services. Monitor the extension's behavior and remove it immediately after completing necessary banking tasks if you're uncomfortable with the native messaging capability.