Summary

An IoT product to be launched on the market requires different security approaches combined in the same solution. A solution usually has different components, including connected devices, a backend service, and client applications to interact with the product. When we talk about IoT security, it covers the entire solution with all of these components. In this chapter, we discussed what the ESP32 platform, hardware, and software together provide us to ensure the utmost cybersecurity for our products. We talked about the Secure Boot and flash encryption features to secure the firmware on ESP32 devices. The newer ESP32 families, such as ESP32-C3, come with a digital signature peripheral to secure the application’s private keys with a smart technique. OTA update is one of the most valuable features of any IoT product.

We have seen two different examples of OTA updates. We learned that we need to monitor our devices in the field where possible. ESP RainMaker is a well...