You basically have a key management system running in your browser and this is called for signing stuff without you adding your nsec into websites