Signed URLs on ESP32

(blog.golioth.io)

2 points | by hasheddan 8 hours ago ago

1 comments

  • theamk 8 hours ago ago

    Their example is using signed URLs for OTA firmware updates - that is, ensuring only the authentic devices can download firmware files, and not security researchers or device owners.

    I see no good use for that feature. I should be able to at least know what every device I own runs, and ideally be able to upload arbitrary firmware too (with the understanding that this can brick the device if done wrong)