From 7f5f1ece989897e23255afc0fa8cae109514ec96 Mon Sep 17 00:00:00 2001
From: "J. Nick Koston" <nick@home-assistant.io>
Date: Thu, 20 Aug 2026 17:22:04 -0500
Subject: [PATCH] Note why SSLError stays transient

---
 esphome/net_retry.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/esphome/net_retry.py b/esphome/net_retry.py
index c56d45e217..f7e6e601ea 100644
--- a/esphome/net_retry.py
+++ b/esphome/net_retry.py
@@ -73,6 +73,8 @@ def is_transient_download_error(e: Exception) -> bool:
         e
     ):
         return False
+    # SSLError (a ConnectionError subclass) stays transient on purpose: it
+    # also covers mid-handshake connection drops, not just bad certificates.
     return isinstance(
         e,
         (