Currently I have a raspberry pi connected to my home security system. I have written a Python daemon running a HTTP server (very insecure I know, but this is still under construction) so I can send it POST requests to arm my alarm. I'm trying to also add disarm alarm functionality, which of course requires much more security than the arm command.
I have seen some guides wrapping the server socket with ssl.wrap_socket and providing a self-signed certificate and key file. My question is, if some hacker manages to connect to my WiFi network and sniff my traffic, will he be able to "record" my disarm requests and send it himself (I think it's called a replay attack?) Or is HTTPS totally encrypted so that all he can see is gibberish.
I'm planning on writing an Android application as the client to send the disarm REST requests locally. Are special configurations required on the client-side to fully take advantage of HTTPS?