Install Warning - Enhanced Safe Browsing

[Dan Wolchonok]

Hi Everybody,

When Enhanced Safe Browsing is enabled in Chrome and someone tries to install my extension (ID iheecpmppehgghpjbhdpgjdllemcmdnk - CWS link) they are getting this warning: "This extension is not trusted by Enhanced Safe Browsing".

This appears to be due to a setting in Chrome. It's located at chrome://settings/security

When I change it from Enhanced -> Standard, I don't get a warning at install time.

This started happening recently, and I'm not sure why. My best guess is that something has changed in our listing and Chrome is rolling out a more strict security setting. We haven't received any warnings, bad reviews, etc, and the extension has been in the store for almost a full year now. The one thing that has changed is that we started using a group publisher over the summer.

Our item no longer has an established publisher badge, even though it appeared in the past. I"m not sure why it has disappeared, my only guess is the group publisher change. We went through the steps to verify that our extension is associated with a web site in google webmaster tools, and our domain shows up when we're publishing new versions. Here's a screenshot from the developer dashboard showing the URLs where I'm an owner:

I'm kind of stumped about why this is happening, and I'm wondering if anyone else has gone through something similar or has suggestions on how to resolve this. It's a big problem for extensions that sell to businesses as the warning is pretty scary - I don't judge our users for being scared off by the warning.

It seems like this has come up before, but I didn't see anything from anyone about any resolution: https://groups.google.com/a/chromium.org/g/chromium-extensions/c/3g8tu00by2g/m/sPWp8uL9AwAJ

Thanks for any tips, tricks, or connections that might be able to help us resolve this.

Dan

[Oliver Dunk]

Hi Dan,

Apologies for the late response. We don't go into detail about the established publisher badge / install warnings, but there are a number of factors that go into that and it is then automatically granted to items.

Taking a look, it does seem like it was no longer on your item for a period last year, but it is now back.

The warning is intended to promote caution, not prevent a user from installing your extension, but I appreciate how it can be concerning for anyone who sees it unexpectedly. Hopefully you're in a better position now.

Let me know if you have any more questions.

Oliver Dunk | DevRel, Chrome Extensions | https://developer.chrome.com/ | London, GB

--
You received this message because you are subscribed to the Google Groups "Chromium Extensions" group.
To unsubscribe from this group and stop receiving emails from it, send an email to chromium-extens...@chromium.org.
To view this discussion visit https://groups.google.com/a/chromium.org/d/msgid/chromium-extensions/d3aa9168-8e35-452b-a2e7-a82a22895dbfn%40chromium.org.

[Dan Wolchonok]

Thanks for the reply, Oliver.

To close the loop for anyone who finds this thread in the future:

• I sent tons of messages to the chrome web store support team. After almost two weeks of back and forth, I was able to show that our URL was already verified via screenshots in the chrome web store developer dashboard and webmaster tools.
• After I showed them that, they "confirmed" it was verified. I am not sure if that changed anything.
• I applied for a featured badge.
• Four hours after my submission, I noticed the verified badge showing up on our profile again.

--

Dan Wolchonok

Reforge