- Record that ONVIF, snapshots and ISAPI all use plain HTTP and that
MediaMTX pulls RTSP with the login in the URL; no password crosses the
wire in the clear, but everything else does.
- Both cameras answer HTTPS with a self-signed certificate, yet digest
that works on port 80 is refused on 443; repeated attempts tripped the
camera's login lock, so testing resumes tomorrow, one attempt at a time.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>