Secure ESP32 OTA Is a Chain of Trust, Not an HTTPS Download
HTTPS protects a firmware transfer in transit. A production OTA design also has to prove image authenticity, select boot slots safely, confirm health, permit recovery, and prevent rollback to revoked vulnerable firmware.