I have a project that connects to io.adafruit.com over https using the fingerprint , is that something that changes yearly ? Is there some status page that warns us when the fingerprint will change?
Suggesting to use an esp32 using certs is not an option , because i have a bunch of esp8266 lying around that i would like to continue to use fro small project ( 1 sensor)
esp8266 https using io.adafruit.com fingerprint
Moderators: adafruit_support_bill, adafruit
Forum rules
If you're posting code, please make sure your code does not include your Adafruit IO Active Key or WiFi network credentials.
If you're posting code, please make sure your code does not include your Adafruit IO Active Key or WiFi network credentials.
- tubos
- Posts: 14
- Joined: Sun Feb 02, 2020 5:05 am
- brubell
- Learn User Page
- Posts: 2010
- Joined: Fri Jul 17, 2015 10:33 pm
Re: esp8266 https using io.adafruit.com fingerprint
It changes every few years. We post a warning in this forum and on the top of io.adafruit.com when we need to rotate it. It was last updated on 08/15/22.I have a project that connects to io.adafruit.com over https using the fingerprint , is that something that changes yearly ? Is there some status page that warns us when the fingerprint will change?
If security is a concern for your project, we strongly recommend users impacted by this either moving to ESP32 which has certificate verification by storing root certs and having a chain-of-trust rather than doing individual certificate fingerprints, or connecting insecurely to port 1883 and not using SSL/TLS.
- jwcooper
- Posts: 1004
- Joined: Tue May 01, 2012 9:08 pm
Re: esp8266 https using io.adafruit.com fingerprint
The fingerprint will be changing sometime in July or August of this year as well.
Forum rules
If you're posting code, please make sure your code does not include your Adafruit IO Active Key or WiFi network credentials.
If you're posting code, please make sure your code does not include your Adafruit IO Active Key or WiFi network credentials.