I've been a fan of Tailscale since encountering it for the first time at a previous job at a small startup. Someone asked if anyone had a Linux machine when we were all testing out something, and I mentioned I had a personal Linux desktop but wasn't sure how to connect it to the VPN for access, and it turned out that the solution was just literally running two commands in the terminal after installing tailscale from the repos. Compared to my first job where connecting to the VPN from Linux required hours of mucking around with openswan (or was it strongswan? so many swans...) and trial and error with various config files, it was unfathomably straightforward.
replyWith a desktop its usually possible from the network setting GUI? Worked like that last time I needed to use a VPN for access to a corporate network.
replyI think their reasoning on not being an identify provider but acting solely downstream is very clever.
replyY? What's wrong with providing username/password authentication
replyYou become responsible for keeping those credentials secure, among a whole host of other problems. (Abuse like credential stuffing (more), data breaches (more), account farms (more), and so on.)
replyJust FYI - with Tailscale you can switch SSO providers by putting in a support ticket. I did it last year and it was a breeze.
replyOh, thank you! I might do that.
replyYeah, I have my Tailscale tied to my Apple account, which just feels weird. I can add a Passkey account to my Tailnet and make it manager, etc., so that’s what I’ve done. The owner is my Apple account, but I actually do everything admin-wise with a Passkey account.
replyOh I had no idea they supported Apple. Maybe they didn't back when I signed up? I'm seemingly stuck with GitHub forever now though.
reply