hasheddan
Joined 7 years ago
Karma
9,869
Submissions
1,325
Member since
Sep 20
Recent submissions
Comment · 7 days ago
Comment · 9 days ago
Fun fact: esp-idf includes an x509 Certificate Bundle API[0] that will pull in the entire Mozilla trust store by default. However, they will be stripped unless firmware calls `esp_crt_bundle_attach`. There is an issue[1] tracking removal of the eMudhra root CA certificate.
[0] https://docs.espressif.com/projects/esp-idf/en/latest/esp32/...
Comment · 9 days ago
To be clear, I agree that it is not a valid excuse and pushback is warranted.
Comment · 9 days ago
This is unfortunately accurate, sometimes due to real constraints and more often due to loose threat models. I am hopeful that more open source firmware options (e.g. Zephyr RTOS) and more software investment from silicon vendors is helping to change the status quo. That being said, we are still a long way away from a "Let's Encrypt movement" for embedded devices.
[0] https://music.apple.com/includes/ipod/data/us/en-US.json