ESP32: sign OTA firmware updates so attackers cannot push their own
The MITM attack on unsigned OTA, why HTTPS alone does not save you, and the signed-update pattern that closes the loop. With anti-rollback and key rotation.
Tag
#ota
3 tutorials
ESP32: secure boot and flash encryption, the real product build
Burn efuses, sign firmware, and lock the flash so a stolen ESP32 cannot be cloned. The right way to ship an ESP32 product instead of a hobby board.
ESP32: OTA (over-the-air) firmware updates
Update ESP32 firmware over Wi-Fi without plugging in USB. The feature that turns a project from prototype into something you actually deploy.