4 ms·

“Tailscale takes over port 22 for SSH connections incoming from the Tailscale network”

by aidos 2y ago

saghm 2y ago
Yes, I read that sentence. To me, "take over" doesn't sound like a "partial" thing, it sounds like it fully takes it over, and "for" sounds like it's just saying why it takes it over, not that it only partially takes control of it. The reason I asked is because I felt like the documentation implies something else despite the wording sounding like this. Generally speaking, if someone quotes something and asks a clarification, it's because they don't find the wording clear. Repeating it, even with italics, doesn't make the wording any more clear to someone who already doesn't think it's clear.
- tekla 2y ago
  > The reason I asked is because I felt like the documentation implies something else despite the wording sounding like this. It literally tells you in the same section what they mean by that sentence and implications for normal SSH. it doesn't imply anything past what reading a few more sentences would say. > it sounds like it fully takes it over, and "for" sounds like it's just saying why it takes it over, not that it only partially takes control of it No it doesn't. > Your SSH config (/etc/ssh/sshd_config) and keys (~/.ssh/authorized_keys) files will not be modified, which means that other SSH connections to the same host, not made over Tailscale, will still work. > Tailscale takes over port 22 for SSH connections incoming from the Tailscale network. Tailscale will authenticate and encrypt the connection over WireGuard, using Tailscale node keys. The SSH client and server will still create an encrypted SSH connection, but it will not be further authenticated. What is hard to understand about this?
  - saghm 2y ago
    > it doesn't imply anything past what reading a few more sentences would say. > Your SSH config (/etc/ssh/sshd_config) and keys (~/.ssh/authorized_keys) files will not be modified, which means that other SSH connections to the same host, not made over Tailscale, will still work. I literally quoted the section about the ssh config files in my original question, so obviously I read further than that one sentence you requoted first. > No it doesn't. To you, it doesn't. To me, it does. If you don't think different people can interpret the same words slightly differently in a way that changes the meaning, I'm not sure why you'd bother trying to explain to me what it means. > What is hard to understand about this? The exact parts that I asked about and got helpful explanations about from other people in this thread. I read the two parts you quoted (after I had already quoted them before your original response), and I thought that the first part was vague in a way that the second part conflicted with, so I asked a question for clarification.

“Tailscale takes over port 22 for SSH connections incoming from the Tailscale network”

by aidos 2y ago

“Tailscale takes over port 22 for SSH connections incoming from the Tailscale network”

Yes, I read that sentence. To me, "take over" doesn't sound like a "partial" thing, it sounds like it fully takes it over, and "for" sounds like it's just saying why it takes it over, not that it only partially takes control of it. The reason I asked is because I felt like the documentation implies something else despite the wording sounding like this. Generally speaking, if someone quotes something and asks a clarification, it's because they don't find the wording clear. Repeating it, even with italics, doesn't make the wording any more clear to someone who already doesn't think it's clear.

tekla 2y ago
> The reason I asked is because I felt like the documentation implies something else despite the wording sounding like this. It literally tells you in the same section what they mean by that sentence and implications for normal SSH. it doesn't imply anything past what reading a few more sentences would say. > it sounds like it fully takes it over, and "for" sounds like it's just saying why it takes it over, not that it only partially takes control of it No it doesn't. > Your SSH config (/etc/ssh/sshd_config) and keys (~/.ssh/authorized_keys) files will not be modified, which means that other SSH connections to the same host, not made over Tailscale, will still work. > Tailscale takes over port 22 for SSH connections incoming from the Tailscale network. Tailscale will authenticate and encrypt the connection over WireGuard, using Tailscale node keys. The SSH client and server will still create an encrypted SSH connection, but it will not be further authenticated. What is hard to understand about this?
- saghm 2y ago
  > it doesn't imply anything past what reading a few more sentences would say. > Your SSH config (/etc/ssh/sshd_config) and keys (~/.ssh/authorized_keys) files will not be modified, which means that other SSH connections to the same host, not made over Tailscale, will still work. I literally quoted the section about the ssh config files in my original question, so obviously I read further than that one sentence you requoted first. > No it doesn't. To you, it doesn't. To me, it does. If you don't think different people can interpret the same words slightly differently in a way that changes the meaning, I'm not sure why you'd bother trying to explain to me what it means. > What is hard to understand about this? The exact parts that I asked about and got helpful explanations about from other people in this thread. I read the two parts you quoted (after I had already quoted them before your original response), and I thought that the first part was vague in a way that the second part conflicted with, so I asked a question for clarification.