Enables electronic document signing (PAdES/XAdES/PKCS7) directly from the FAST parapheur web platform by bridging the browser-based document workflow with a local native signing application that has access to the user's signing certificates

User opens a document on a FAST parapheur web domain → the web app dispatches a custom DOM event (e.g. FAST_signPES) → content.js intercepts the event → background.js relays the message to the native messaging host (fast.sign.web.extension) → the native app performs the cryptographic signing using local certificates → the response flows back through the native port → background.js forwards to content.js → content.js dispatches a result event back to the parapheur web page.

Target users: Enterprise users of the FAST/Docaposte parapheur electronic document signing platform / French government and corporate employees using eIDAS-compliant electronic signatures

Cannot confirm whether the native host application (fast.sign.web.extension) has its own paid/licensing model
The exact authentication mechanism on the destination parapheur domains is not visible from the extension source alone

Monetization

No paid features detected

The extension contains no payment logic, subscription handling, upgrade prompts, or billing APIs. It is a pure native messaging bridge between the FAST parapheur web app and a locally installed signing application. While the FAST/Docaposte enterprise service itself likely has paid business plans, the extension does not gate or sell any features.

Confidence: 90
Payment platform: --
Source: AI / High
Login required: Yes
Reason: The extension only activates on specific FAST/Docaposte parapheur domains (parapheur.dfast.fr, efast.fr, etc.), which are enterprise electronic document signing platforms requiring user authentication. The extension itself has no login UI — it acts as a native messaging bridge that only functions when the user is already authenticated on the destination FAST parapheur web application.

Permission risk

High-risk permissions

This estimate uses declared permissions and host permissions to assess access scope and sensitivity.

敏感权限：nativeMessaging
扩展能力较强：tabs

Publisher

store.cdcfast

Independent publisher

Email: [email protected]
Phone: --
Address: --

Public contact fields are shown above. Developer portfolio pages are available on paid accounts.

View developer portfolio

Permissions

Host access