Interesting idea. However I do like the approach bankid did using qrcode [1] this does not however match a domain but matches a particular vendor that shows up

Interesting idea. However I do like the approach bankid did using qrcode [1] this does not however match a domain but matches a particular vendor that shows up after you've scanned it and asked to enter your security code. This way you can always verify the vendor is actually the website you are trying to log into. [1] https://www.bankid.com/en/utvecklare/guider/teknisk-integrationsguide/qrkoder https://www.bankid.com/en/utvecklare/guider/teknisk-integrat...