xorkeesign Webmail Chrome extension security report

xorkeesign is a digital signature enabling service from Odyssey Technologies Ltd. xorkeesign runs on the versatile xorkee infrastructure that is a superset of PKI. This extension is a specialized interface to many of the popular web mail clients for authenticating the mails the users send and also to verify the authenticity of the mails received from others. The extension allows the user to bind his personal key with his mail id through xorkeesign. The extension stays dormant when the browser is used to access any site other than a supported mail interface. When the extension recognizes a supported interface it offers the user to digitally sign the mail before or when he clicks the 'Send' button. When the user chooses to sign his signatures are added as additional attachments to the mail in the standard PKI - CMS format (RFC #5652). When such a signed mail is received the extension helps the user to verify the senders' signatures. It displays the result of such verification within the mail client page itself. It offers the user the certainty that the mail is genuinely from the claimed sender. This goes a long way in preventing users from clicking unsafe links and attachments and significantly reduce the efficacy of phishing and ransomware. When a signed mail is received in a browser without this extension, the users can continue to read the mail as if it is not signed. His usual mailing experience is not impacted in any way. The extension also allows the recipient of a email to archive the mail body or one or more of the attachments as data attached signatures in CMS format. This will help in creating permanent authenticated business communication records. The known supported mail clients are: 1. Microsoft 365 Outlook (outlook.live.com, outlook.office.com, outlook.office365.com) 2. Gmail (also supports Google Workspace) 3. Any mail service that uses the RoundCube code base 4. GoDaddy Webmail (email.godaddy.com) 5. Zoho Mail (also supports Zoho Workplace) 6. Zimbra modern web client The extension may work on other mail clients if they follow the page formats of these clients. Odyssey Technologies, the publisher of this extension also publish extensions for native mail clients like Mozilla Thunderbird, Gmail, Microsoft 365 and the mail authentication and verification works seamlessly across all these mail clients including this. The extension does not collect or store any other data than described above.