Originally Posted by
oliver2002
No need to reverse engineer, IATA reso 792 specifies what belongs in the various fields of the BCBP.
I'm entirely aware - this is about the "For individual airline use" (Field 4) part of the BCBP. What is encoded in that part is not specified by IATA and AFAIK not publicly available anywhere. It starts with *306 on all *A boarding passes I've seen.
Originally Posted by
oliver2002
As the bar codes are not (yet) encrypted nor signed,
United's QR codes given as example in the PDF do in fact contain a signature, but I don't know whether that's in active use.