From 6e71f43bb165e3c3b58cd36530c8c8e88744e0ca Mon Sep 17 00:00:00 2001
From: RMEngels <r.m.engels@scienta.nl>
Date: Mon, 24 Apr 2023 15:32:40 +0200
Subject: [PATCH] Add warning of default QR Code provider to README.md

---
 README.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/README.md b/README.md
index 8e9fbd0..96f566d 100644
--- a/README.md
+++ b/README.md
@@ -8,6 +8,13 @@ PHP library for [two-factor (or multi-factor) authentication](http://en.wikipedi
 <img src="https://raw.githubusercontent.com/RobThree/TwoFactorAuth/master/multifactorauthforeveryone.png">
 </p>
 
+## Warning:
+
+By default, this package uses the `lib/Providers/QRServerProvider.php` as QR code generator. This provider is __not__ suggested for applications where absolute security is needed, because it uses an external service for the QR code generation.
+
+
+You can make use of the included [Endroid](https://robthree.github.io/TwoFactorAuth/qr-codes/endroid.html) or [Bacon](https://robthree.github.io/TwoFactorAuth/qr-codes/bacon.html) providers which generate locally.
+
 ## Requirements
 
 * Requires PHP version >=8.1