@paulmillr: More context on this + Tailscale is using wireguard. Tailnet Lock ensures it’s impossible to TS themselves to add new d…

X AI KOLs Following News
wireguard tailscale vpn security privacy open-source networking

Summary

Paul Miller 提供了关于 Tailscale 与 WireGuard 使用的更多背景：Tailnet Lock 可防止 Tailscale 自行为用户账户添加新设备，且 Tailscale 软件开源可审计，但缺少后量子加密支持；他建议用户也可自建 WireGuard 服务器。

More context on this + Tailscale is using wireguard. Tailnet Lock ensures it’s impossible to TS themselves to add new devices to user account. + TS software is open, which means you can fork it & audit. - There is no post-quantum As for the self-hosted wireguard…
Original Article
View Cached Full Text

Cached at: 10/28/26, 01:47 AM

More context on this

  • Tailscale is using wireguard. Tailnet Lock ensures it’s impossible to TS themselves to add new devices to user account.
  • TS software is open, which means you can fork it & audit.
  • There is no post-quantum

As for the self-hosted wireguard…

Paul Miller (@paulmillr): If you’re using tailscale, better to only use it with Tailnet Lock (“e2e”).

Even better, ditch Tailscale & host your own wireguard server. Takes 5 mins with agents.

Similar Articles

@NFTCPS: Tailscale does something counterintuitive, launching Tailcat. In a nutshell: Tailscale without Tailscale. No account registration, no VPN installation, no port opening, no root required, and it doesn't alter your routing or DNS. Two machines, send a short t…

X AI KOLs Following

Tailcat is an open-source tool launched by Tailscale that allows direct connection between two machines via WireGuard end-to-end encryption without account registration or VPN installation, supporting file transfer, SSH, and proxy functions.

tailscale/tailscale

GitHub Trending (daily)

Tailscale's open-source repository containing the daemon and CLI tool for easy private WireGuard networks.

Tailcat: Secure Tunnels in Seconds (Tailscale)

Hacker News Top

Tailcat is an open-source command-line tool and Go library that creates secure WireGuard-encrypted tunnels over Tailscale's data plane, enabling quick and secure point-to-point connections without a Tailscale account.

@brucexu_eth: Tailscale is absolutely amazing! Now all my servers and devices are connected via Tailscale, and I've enabled Tailscale SSH. Since then, I've basically never fiddled with Private Keys again, nor do I need to sync SSH keys everywhere. I just ssh root@ta…

X AI KOLs Timeline

The user shares how they used Tailscale to configure access control and SSH policy to isolate internal and public servers, preventing lateral spread after a breach. By grouping devices with tags, they restrict public servers from reverse-connecting to personal devices, improving security.