Has anyone got around to wiresharking the traffic from the Evotouch yet ? Is there any naked ntp traffic visible or is all communication (including time setting) done through a TLS connection to the Honeywell servers ?
I keep meaning to set up a spare Raspberry Pi 2 as a hostapd style access point to connect the Evotouch to, and then do a tcpdump to a file for later analysis...