https://nalar.dev/tags/iot-security/ Recent content in IoT Security on Nalar Hugo en-us Sat, 19 Sep 2026 00:00:00 +0000 https://nalar.dev/esp32-mqtt-tls-transport-encryption-broker-authentication/ Sat, 19 Sep 2026 00:00:00 +0000 https://nalar.dev/esp32-mqtt-tls-transport-encryption-broker-authentication/ <p>An ESP32 that moves an MQTT connection from port 1883 to 8883 crosses more than a port boundary. The TCP stream is now expected to carry MQTT inside TLS. Data in transit is protected only when the TLS client also validates the broker certificate. MQTT username/password authentication is separate: credentials identify the client to the broker, while certificate validation identifies the broker to the ESP32.</p> <p>Calling this &ldquo;MQTT with HTTPS&rdquo; mixes two application protocols. MQTT does not become HTTP when TLS is added. MQTT can run over plain TCP or over a TLS-protected TCP connection.</p>