Verifies PGP signed pages for extra security against malicious or breached servers.

Latest Version

Version
0.5.0
Update
November 30, 2020
Size
773KiB
Developer
Category
Users
73
Rating
5 ★
Manifest Version
2
Web Store Status
Languages Support
English
See more
Permissions
Storage
WebNavigation
WebRequest
WebRequestBlocking

See more

Signed Pages Extension

Signed Pages is a browser extension to verify the authenticity (PGP signature) of web pages.

# Why?

This extension was originally created to improve the security of the EteSync web app (https://www.etesync.com). One of the biggest issues with securing web applications is the fact that the app (JavaScript) is delivered to you every time you open the page. This means that a malicious (or compromised) web server could change the code to steal your supposedly client-side-only and secure data.

This extension solves this by verifying the code really came from the developer. While this doesn't protect you from a malicious developer, it at least brings the security of the web app to a similar level to that of native apps.

# Usage

All you need to do is install the extension, and from its settings page, add patterns to match pages you'd like to verify, and their corresponding publisher's public key. The developers of those websites must have their pages signed for this extension to work.

# Example pages

You can try the following example pages to see how the extension behaves:

Install the extension and add the pattern and pubkey shown in the page from the extension's settings.

* A page with a good signature: https://stosb.com/~tom/signed-pages/good.html
* A page with a bad signature: https://stosb.com/~tom/signed-pages/bad.html
* A page with a missing (but expected) signature: https://stosb.com/~tom/signed-pages/missing.html

# More info and source code:

https://github.com/tasn/webext-signed-pages

# Attribution

Icons are based on the folowing icons:

* Shield made by [Smashicons](https://www.flaticon.com/authors/smashicons) and licensed as [CC 3.0 BY](http://creativecommons.org/licenses/by/3.0/)
* Checked made by [Eleonor Wang](https://www.flaticon.com/authors/eleonor-wang) and licensed as [CC 3.0 BY](http://creativecommons.org/licenses/by/3.0/)
* Fingerprint made by [Google](https://www.flaticon.com/authors/google) and licensed as [CC 3.0 BY](http://creativecommons.org/licenses/by/3.0/)
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 2, "name": "Signed Pages", "description": "Verifies PGP signed pages for extra security against malicious or breached servers.", "version": "0.5.0", "homepage_url": "https://github.com/tasn/webext-signed-pages", "icons": { "48": "images/icon.png", "96": "images/icon-96.png", "128": "images/icon-128.png" }, "page_action": { "browser_style": true, "default_icon": { "48": "images/icon.png" } }, "background": { "scripts": ["dist/background.js"] }, "options_ui": { "page": "options.html" }, "content_scripts": [ { "matches": [""], "js": ["dist/content.js"], "run_at": "document_start" } ], "permissions": [ "storage", "webNavigation", "webRequest", "webRequestBlocking", "" ], "applications": { "gecko": { "strict_min_version": "57.0a1" } }}
Read more

How to download and manually install Signed Pages extension for Chrome

Looking for a way to install Signed Pages extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install Signed Pages extensions manually, this article outlines two simple methods to effortlessly install Signed Pages extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download Signed Pages extension and manually install through Drag &Drop

If you ever need to manually install a Signed Pages extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the Signed Pages Extension by clicking the "Download CRX" button on the website.

Look for the Signed Pages extension you wish to install. Go to the website and download the Signed Pages extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for Signed Pages extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the Signed Pages extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download Signed Pages extension for Chrome and install in Developer Mode

This is another method to install Signed Pages extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the Signed Pages extension file

Select and download the Signed Pages extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the Signed Pages extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your Signed Pages extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the Signed Pages extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install Signed Pages extension in 2 ways. We hope this guide proves helpful.

Similar Extensions