You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
*Initial content and code specification still being drafted.*
4
+
*Initial content and [code specification](https://github.com/QTRCode/qtr-code-specification) still being drafted.*
5
5
6
6
## Overview
7
7
Quick Trusted Response (QTR) codes aim to enhance the security and trustworthiness of QR codes by introducing a standardised verification mechanism. By leveraging existing technologies like BIMI (Brand Indicators for Message Identification) and public key cryptography, QTR codes provide a method for users and applications to verify the authenticity of QR code content before any action is taken.
- Mitigate QR Code Phishing Attacks: QTR codes help prevent malicious redirection and data theft by verifying the source and integrity of the QR code content.
11
13
- Enhance User Trust: By displaying verified brand logos and validation statuses, users can confidently interact with QR codes.
12
14
- Backward Compatibility: QTR codes are designed to be compatible with existing QR code readers, ensuring a seamless transition.
13
15
14
16
## Key Features
15
17
- Signature Verification: Uses cryptographic signatures appended as query parameters to verify content authenticity.
16
-
- Public Key Retrieval: Supports fetching public keys via DNS records or well-known endpoints.
18
+
- Public Key Retrieval: Supports fetching public keys via DNS records, well-known endpoints or HTTP response headers.
17
19
- BIMI Integration: Incorporates BIMI records to display verified brand logos.
18
20
- Offline Validation: Supports caching of BIMI records and public keys for offline verification.
0 commit comments