Consider making the QR code format an URL that some QR code scanners might directly open in Thunderbird

[VladLucaci]

Checklist

• [X] I have used the search function to see if someone else has already submitted the same bug report.
• [X] I will describe the problem with as much detail as possible.

App version

8.0b2

Where did you get the app from?

Google Play

Android version

14

Device model

Galaxy Tab a9+

Steps to reproduce

1. Generate QR code in TB desktop. (make sure "include all accounts passwords" option is checked")
2. Scan the QR code with device's Camera app.
3. Open generated QR code with either K9 or Gmail app.

Expected behavior

I would expect that opening with any other applications (other than TB) should not be possible.

Actual behavior

Opening the generated QR code with either K9 or Gmail apps render the users information(passwords included) to be visible in a new mail template. This issue is related to https://github.com/thunderbird/thunderbird-android/issues/8290

Logs

https://github.com/user-attachments/assets/7975f372-a24c-49a8-9ba1-3e46c747a475

[kewisch]

The format we've chosen doesn't keep other applications from viewing them. There are sufficient warnings on desktop not to expose the QR code to others. I think what we could consider in the future is changing the QR code pattern to an URL that starts with net.thunderbird.android:// and creates a deep link to import the QR code. This will require some backwards incompatible changes and is a little more complicated, so I think we'll need to postpone this until after the release.