QR Code as a Secure Pairing Mechanism: One-Time Token and TOFU

How TermOnMac uses a single-use QR pairing token plus a rotated room secret and TOFU identity key — so even a photographed QR code becomes useless after the legitimate pair completes.