Don't transmit the secret key to google

[ccoenen]

In this piece of code, you generate a URL that generates a QR-Code. The user will load this URL and is effectively transmitting their secret key to Google.

I think this is not ideal.

I believe the QR-Code should either be generated onthe ESP or the client (there are JS implementatations which could be included), but not by a third party.

[bebo-dot-dev]

You're right I agree, I'll take a look at removing this.

Personally I'll probably end up going with a JS QR code generator implementation rather than an ESP side version.

[bebo-dot-dev]

This should do it: df0434a

Less is more as they say ;)

[bebo-dot-dev]

Thanks for the peer review, it's much appreciated. Closing this one down.