MEGA Edge extension security report

MEGA is a secure, user-controlled end-to-end encrypted cloud storage and communications service which provides generous free storage space. Unlike other cloud storage providers, your data is encrypted and decrypted by your client devices only and never by us. This extension allows you to install MEGA into your browser to reduce loading times, improve download performance and strengthen security. Any MEGA URL will be captured by this extension and stay local (no JavaScript will be loaded from our servers). MEGA’s source code files (HTML, CSS and JavaScript) are loaded from the extension itself and do not require additional integrity verification. This saves time by not downloading these files from MEGA’s servers and verifying them each time you visit the MEGA website. The executable client code runs directly on users’ local machines, rather than being loaded from MEGA over TLS/SSL. Browser extension updates are cryptographically protected. For more information see section 2.2 of our whitepaper https://mega.io/SecurityWhitepaper.pdf. Security reviewers can find our source code at https://mega.io/sourcecode.