4 ms·
What are the failure modes? Openssh is a well understood risk, this seems... unquantifiable?
by woleium 4y ago
What are the failure modes? Openssh is a well understood risk, this seems... unquantifiable?
- tptacek 4y agoTailscale is a userland process built in a memory-safe language, which leaves you only the SSH protocol cryptography-type vulnerabilities, which are themselves mooted by Tailscale (see downthread for a discussion about why they didn't simply expose rsh instead of ssh). This is safer than OpenSSH. (OpenSSH, as a piece of software, is extraordinarily safe, and has one of the best records of any memory-unsafe codebases. But OpenSSH as configurable infrastructure is much less safe; people screw it up all the time.)
- woleium 4y agoSure, but how reliable is it. What are the risks that I'm going to get locked out of a production instance and suffer loss of earnings?