There would be no out-of-band connections. The extension uses Diffie Hellman or something to swap keys with your friends over Facebook (or maybe through a server run by the extension provider.)