The example they give in TFA is having the user scan a QR code, presumably from a mobile device.
But that's not a specification
alt Hacker News
But that's not a specification