First of all it takes a shitton of steps to scan a QR code if you don't have WeChat. On a default Android device you have to click 7 or 8 times to get into the QR scanner thingy inside Google Lens. I carry a 2nd phone with WeChat and I can scan things in 0 seconds flat, but most people don't have it around here in the US.
And then many restaurants' QR menus just redirect you to their website with a terrible experience, and sometimes no pictures.
And then it's annoying as hell to try to read a phone screen in daylight outdoors.
If you can print a QR menu just print the damn menu also. Put the QR code on the menu cover for people who really want that.
These days I often just ask wait staff what they have because I don't want to look at my phone.
Horrible experience.
It should just open the web page with zero taps if I point at a QR code in ANY camera mode, even portrait or panorama or movie or whatever the last mode I was on. I shouldn't have to tell it "I'm going to scan a QR code", it should always be looking for one, because it's computationally very, very cheap.
> On a default Android device you have to click 7 or 8 times to get into the QR scanner thingy inside Google Lens.
Perhaps, on stock Android with no manufacturer special apps. But the Samsung, Google, and LG Camera apps, at least, have “point at a QR code and the camera reads it”, so it takes as many clicks as opening the Camera app.
https://i.imgur.com/kjFEwiR.jpg
Then again, starting about 5 weeks ago it also stopped responding to "OK Google" and 3 weeks ago it stopped announcing turn-by-turn directions during GPS navigation so I guess this is the state of tech in 2021 :-/
(Definitely don't want an Apple device though, massive privacy issue for me to use a closed source kernel and that I can't easily introspect and MITM SSL requests on to see what data is being sent about me, I do like Android for the fact that I can more or less much hook into any part of the OS and execute custom code to monitor what the hell apps are doing behind the curtain, and even give them fake-but-realistic sensor data to even further protect my privacy.)
You can (a) decompile the app, mod it, recompile it, sign it, and then execute it (b) modify the OS to not care about app signatures (c) bypass it with Xposed hooks, ... lots of ways.
I like qr codes anyway: I don't like dead tree printing or touching stuff that is not mine but had a million hands on it (I had that before covid).
“yeah I'll get right on that”
That aside, what's the point? There's no practical threat model where https makes what you're doing more secure. If you have neither a domain name that can use a real TLS cert nor your own CA added to the mobile device, it would be trivial for someone to MITM you. Just configure your Fedora dashboard to use http if you don't care about security
So, double press power button, long tap QR code, and click link to visit site.
You can always take the time to ask for a menu and I’m sure someone will bring you one, but it’s my opinion that you’re making too big of a deal out of something that’s such a small part of the dining experience.