This is root cert i am using to connect with aws amazon service: -----BEGIN CERTIFICATE----- MIIDQTCCAimgAwIBAgITBmyfz5m/jAo54vB4ikPmljZbyjANBgkqhkiG9w0BAQsF ADA5MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRkwFwYDVQQDExBBbWF6 b24gUm9vdCBDQSAxMB4XDTE1MDUyNjAwMDAwMFoXDTM4MDExNzAwMDAwMFowOTEL MAkGA1UEBhMC...

I didnt see it before but here is what you are looking for (i think): https://github.com/espressif/esp-idf/tree/master/examples/provisioning/ble_prov Here is another example: https://github.com/espressif/esp-idf/tree/master/examples/bluetooth/blufi or here https://github.com/chegewara/esp32-ota-with...

You can have 2 step protection. One is to have secured flash and bootloader with eFuse etc. So, even if someone will download your file or make copy from your esp32 product (dump binary) it will be not possible to see how code looks like. Second step can be with key (any value) stored in nvs in prod...

We can only wait for some time yet:
https://github.com/espressif/esp-idf/is ... -434271002

Ritesh
https://github.com/espressif/esp-idf/tr ... /mesh_docs

ESP32 stores all necessary provisioning data like app key, IV etc, as you mentioned. Currently, it doesn't store the data in NVS. So if you don't reboot the device, it should work finely. If it doesn't work on your side, could you tell us how to reproduce your issue? BTW, for the "power-down memory...

Yes John, you can control it from esp32 side. You can configure esp32 to use encrypted connection and if iPhone app is configured to not use encrypted connection, very unlikely, then will just drop connection.

Itd hard to determine what it's the issue but devs are working on it.

Also if its not important to change UNO params in real time you can pool every minute, hour or so webserver and get response with new data for UNO.