Détail des informations stockées dans le QR Code du pass vaccinal européen

#!/usr/bin/env python3
import sys
import zlib
import pprint
# Modules tiers (Pillow, Pyzbar, base45, cbor2)
import PIL.Image
import pyzbar.pyzbar
import base45
import cbor2

img = PIL.Image.open("qrcode.png")
data = pyzbar.pyzbar.decode(img)
cert = data[0].data.decode()
b45data = cert.replace("HC1:", "")
zlibdata = base45.b45decode(b45data)
cbordata = zlib.decompress(zlibdata)
decoded = cbor2.loads(cbordata)
print("Header\n----------------");
pprint.pprint(cbor2.loads(decoded.value[0]))
print("\nPayload\n----------------");
pprint.pprint(cbor2.loads(decoded.value[2]))
print("\nSignature ?\n----------------");
print(decoded.value[3])

• HTTP/2
• TLS 1.3
• DOH: DNS over HTTP
• QUIC: a candidate replacement for the TCP protocol

  since Google has already deployed QUIC in the Chrome browser and on its sites, it already accounts for more than 7% of Internet traffic.

Also mention this creepy & fascinating attack : http://codebutler.com/firesheep

Instant messaging with many features: voice and/or video calls, screen sharing, file sharing, group chat
Encrypted, open-source
"Tox has no central servers that can be raided, shut down, or forced to turn over data — the network is made up of its users"

Another interesting simple solution, using JS atob base64 decryption function: https://stackoverflow.com/a/41408157/636849