Document the new HTTPS enforcement feature for production builds:
- REST API Reference: Add Production Mode section explaining HTTPS-only
behavior, updated base URL examples, updated security best practices
- Security Architecture: Add HTTPS Enforcement section with build mode
comparison table, updated API layer status, removed HTTPS from future
enhancements (now implemented)
- Production Build Guide: Add HTTPS-Only API section, update feature
list and comparison table
- Firmware Security: Add HTTPS Enforcement section with build behavior
Production builds (CONFIG_NETWORK_API_PRODUCTION_MODE) now:
- Default http_port to 0 (disabled)
- Reject any HTTP configuration with ESP_ERR_INVALID_ARG
- Require HTTPS for all API communications
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
0b2de7b46f