Answered my own question, the answer lies in the Kconfig.projbuild file and its contents:

https://github.com/espressif/esp-idf/bl ... .projbuild

for example:

grep PROV_SECURITY sdkconfig.defaults
CONFIG_EXAMPLE_PROV_SECURITY_VERSION_2=y


but this variable does not make it to my sdkconfig if I removed it and recreate with

idf.py menuconfig

However, other variables seem to be blessed and get through, like these FREERTOS configs ...

The time taken to perform that calculation is less than 1/1000 the time to get the distance from the hcsr04.

Insignificant.

Which calculation are you talking about?

When attempting to use basic auth in combination with https:

void https_basic_auth_task(void *pvParameter)
{
static const char *TASK_TAG = "POST_TASK";
// HTTP Config
esp_http_client_config_t config = {
.url = "https://protected.example.com/protect",
.event_handler = _http_event_handler ...

I got this working by adding the if clause on item:

#include <stdio.h>
#include <string.h>
#include "freertos/FreeRTOS.h"
#include "freertos/task.h"
#include "freertos/queue.h"
#include "freertos/semphr.h"
#include "esp_err.h"
#include "esp_log.h"
#include "driver/rmt.h"
#include "driver/periph ...

I tried making the suggested change, which didn't seem to work, so I also changed `rmt_tx` as well. And I also tried changing the double to a float (as I hear there are issues with double math on the esp32), and changed out the 1000 * 1000 * 2 [which I know should taken care of by the compiler but ...

Has anyone tried this code lately? All I get is this Guru meditation about core panic:

I (114) cpu_start: App cpu up. [10/13182]
I (132) heap_init: Initializing. RAM available for dynamic allocation:
I (139) heap_init: At 3FFAE6E0 len 00001920 (6 KiB): DRAM
I (145) heap_init: At 3FFB2F80 len ...

From here https://docs.espressif.com/projects/esp-idf/en/latest/security/flash-encryption.html#ota-updates

OTA updates to encrypted partitions will automatically write encrypted, as long as the esp_partition_write function is used.

Which sounds to me like the binary is downloaded unencrypted ...