esp8266 https using io.adafruit.com fingerprint

Moderators: adafruit_support_bill, adafruit

Forum rules
If you're posting code, please make sure your code does not include your Adafruit IO Active Key or WiFi network credentials.
Locked
User avatar
tubos
 
Posts: 14
Joined: Sun Feb 02, 2020 5:05 am

esp8266 https using io.adafruit.com fingerprint

Post by tubos »

I have a project that connects to io.adafruit.com over https using the fingerprint , is that something that changes yearly ? Is there some status page that warns us when the fingerprint will change?

Suggesting to use an esp32 using certs is not an option , because i have a bunch of esp8266 lying around that i would like to continue to use fro small project ( 1 sensor)

User avatar
brubell
Learn User Page
 
Posts: 2010
Joined: Fri Jul 17, 2015 10:33 pm

Re: esp8266 https using io.adafruit.com fingerprint

Post by brubell »

I have a project that connects to io.adafruit.com over https using the fingerprint , is that something that changes yearly ? Is there some status page that warns us when the fingerprint will change?
It changes every few years. We post a warning in this forum and on the top of io.adafruit.com when we need to rotate it. It was last updated on 08/15/22.


If security is a concern for your project, we strongly recommend users impacted by this either moving to ESP32 which has certificate verification by storing root certs and having a chain-of-trust rather than doing individual certificate fingerprints, or connecting insecurely to port 1883 and not using SSL/TLS.

User avatar
jwcooper
 
Posts: 1004
Joined: Tue May 01, 2012 9:08 pm

Re: esp8266 https using io.adafruit.com fingerprint

Post by jwcooper »

The fingerprint will be changing sometime in July or August of this year as well.

Locked
Forum rules
If you're posting code, please make sure your code does not include your Adafruit IO Active Key or WiFi network credentials.

Return to “Internet of Things: Adafruit IO and Wippersnapper”