Security has always been an issue with IoT devices. Off the shelf devices ... The normal ways to do HTTPS with an ESP8266 is to either use Fingerprints, or to use client.setInsecure().

With progress slowly being made on turning the ESP8266 UART to WiFi module into something great, there is still the question of what the range is for the radio in this tiny IoT wonder.