1  menu "ESP HTTPS OTA"
 2  
 3      config OTA_ALLOW_HTTP
 4          bool "Allow HTTP for OTA (WARNING: ONLY FOR TESTING PURPOSE, READ HELP)"
 5          default n
 6          help
 7              It is highly recommended to keep HTTPS (along with server certificate validation) enabled.
 8              Enabling this option comes with potential risk of:
 9              - Non-encrypted communication channel with server
10              - Accepting firmware upgrade image from server with fake identity
11  
12  endmenu