Updated my OTA server to require client certificate to be presented before providing the firmware binary. This way the binary is kept away from curious eyes, and only provided after mutual TLS authentication proves the asking party is who they say they are.
#IoT #OTA #Security