3 ms·
How secure is Tailscale in general, and their new SSH offering? I assume the crypto is unbreakable for outside parties that just sniff the traffic along the wa
by fl7305 2y ago
How secure is Tailscale in general, and their new SSH offering?
I assume the crypto is unbreakable for outside parties that just sniff the traffic along the way.
But what if Tailscale gets hacked? Are my keys available there for someone else to connect into my network? How hard would it be for the hacker to add their own machine to my network?
- irusensei 2y agoTailscale uses the WireGuard protocol. About the question about Tailscale being hacked or injecting hosts in your network. With the default configuration yes. There is Tailscale lock https://tailscale.com/kb/1226/tailnet-lock https://tailscale.com/kb/1226/tailnet-lock In which you need to sign the devices participating in your network. The signing keys are in your device.
- fl7305 2y agoThanks! How much more cumbersome does the lock make it to use Tailscale?
- irusensei 2y agoNot much. You first add the host and then you need to either click the link that will open the Tailscale app to sign the host or you run a command. If you use Mullvad VPN you need to sign the Mullvad exit nodes. Just make sure to have more than one signing device in case something happens to your main computer.
- bananapub 2y agoTailscale is key distribution for Wireguard + ACLs + some proxying/auth things. if tailscale got completely owned then obviously an attacker can fuck with the keys, which is why they have this feature: https://tailscale.com/kb/1226/tailnet-lock https://tailscale.com/kb/1226/tailnet-lock
- aborsy 2y agoHow secure is Tailscale with taillock? What are the risks, still?