Chexxo

Browser extension that allows users to see the certificate quality of websites.

What is Chexxo?

Chexxo is a browser extension that analyzes and displays the quality of websites' certificates. It differentiates between three quality classes and blocks low-quality certificates. Privacy is maintained through limited server logging.

Download

Extension stats

By: chexxo

View on Chrome Web Store

Users: N/A

Version: v1.0.0 [Mario - SuperStar] (Last updated: 2021-05-19)

Creation date: 2020-12-13

Risk impact: Moderate risk impact

Risk likelihood: Moderate risk likelihood

Manifest version: 2

Permissions:

storage
webNavigation
<all_urls>

Size: 2.72M

Email: ch*****@ins.hsr.ch

URLs: Privacy policy

Ranking

# 183462 ▼ 1213

Other rankings

#6357 in Developer Tools ▼ 150 #275 in server keyword 51 ▼ 3

Other platforms

Not available on Firefox

Chexxo (vv1.0.0 [Mario - SuperStar])

0.00

(0) 36

Want to check extension ranking and stats more quickly for other Chrome extensions? Install Chrome-Stats extension to view Chrome-Stats data as you browse the Chrome Web Store.

Extension summary

Analyze keywords

Chexxo analyses the certificates of the websites you visit and displays the certificate's quality as well as the certificate details. Chexxo differentiates between the three quality classes defined by the CA/Browser Forum which are "domain validated", "organization validated" and "extended validated". If the quality of a websites certificate degrades Chexxo will block the domain and show a warning. This behaviour may be deactivated in the extension settings.

Since Chromium based browsers do not provide an option to read the certificate from the webRequest-API, a server component is needed in order for Chexxo to function properly. Therefore, we have written a simple server which provides the extension with the certificate for the requested webpage. You may host this server yourself, see https://github.com/Chexxo/Server for more information.

Privacy: The server only gets the URL of the webpage which should be checked. The server logs only contain the URL, a UUID and the error if one occurred. The UUID is newly generated for every occurring error and cannot be traced back to a user unless you provide us with your local log for debugging purposes. This does not happen automatically therefore by default we cannot associate a URL with a user.