3 ms·
So, giving access via tailscale but using OpenSSH is safe, right?
by e40 2mo ago
So, giving access via tailscale but using OpenSSH is safe, right?
- lugoues 2mo agoYes, this only involves their wrapper that is managed by ACL rules.
- iririririr 2mo agoas much as handing control to a remote third part is, yes.
- cevn 2mo agoGood point. I self host headscale but it also has the ssh feature, probably also insecure.
- OJFord 2mo agoNot necessarily, it's a clean room implementation. Even if leading dashes was known/documented/tested to implement they might have done it differently. And maybe it was an implementation detail that it was ever allowed, but that's a weird username, headscale implementation happened not to allow it, and nobody ever noticed the discrepancy.
- cevn 2mo agoNice, this makes me feel a little better.
- saintfire 2mo agoHow is that true if: This project is not associated with Tailscale Inc. However, one of the active maintainers for Headscale is employed by Tailscale and he is allowed to spend work hours contributing to the project. Contributions from this maintainer are reviewed by other maintainers.