ESP32: sign OTA firmware updates so attackers cannot push their own
The MITM attack on unsigned OTA, why HTTPS alone does not save you, and the signed-update pattern that closes the loop. With anti-rollback and key rotation.
Tag
9 tutorials
The MITM attack on unsigned OTA, why HTTPS alone does not save you, and the signed-update pattern that closes the loop. With anti-rollback and key rotation.
Move past setInsecure() and the WiFiClientSecure default that ships in every HTTPS example. Bundle root CAs, validate chains, and pin fingerprints on the ESP32.
Make the ESP32 show up as a Bluetooth device that a phone can see and connect to. The foundation for any BLE-based IoT project.
Build a multi-hop Wi-Fi network with multiple ESP32 boards. Self-healing, automatic routing, no central router needed.
Make the ESP32 broadcast its own Wi-Fi network and serve a configuration page. The right pattern for projects that need Wi-Fi credentials but have no keyboard.
Add a small solar panel to your 18650 battery setup for perpetual operation. The math for sizing the panel and the protection circuit you actually need.
Press a button, get a notification on your phone. The ESP32 + Pushover (or Telegram) + a simple button. Replaces a $50 smart doorbell.
Connect a Pico W to Wi-Fi and publish sensor readings to an MQTT broker from MicroPython. The pico equivalent of the ESP32 MQTT tutorial.
Send sensor data over MQTT from an ESP32 to a broker, and subscribe from another device. The pub/sub pattern that runs most home automation.