Chapter 7: Security First!

Any internet-facing solution must be designed with security-first in mind, otherwise it is vulnerable to cyber-attacks. This especially applies to IoT products since they are usually introduced in batches to the market and delivered to end users who often don't have any basic understanding of IoT security.

When it comes to security, ESP32 provides a good level of hardware support for developers with its cryptography subsystem. ESP-IDF also integrates industry-standard encryption libraries and provides a good abstraction when a custom security solution is needed. In this chapter, we will discuss the essentials of the ESP32 platform when developing production-grade IoT devices and see examples of secure communication protocols to understand how to utilize them in our projects. This chapter requires some background knowledge to follow the examples easily. If you don't feel comfortable with the security fundamentals, you can find some resources...