Tailscale SSH (tailscale.com)

Article summary

Tailscale has introduced Tailscale SSH, a feature that simplifies and secures SSH connections within a Tailscale network. This feature allows users to establish SSH connections between devices without managing SSH keys, using WireGuard for authentication and encryption. Tailscale SSH integrates with existing identity providers, making it easy to manage permissions and access controls. The feature is available in beta and included in all Tailscale plans.

Main themes

• Tailscale SSH
• Security and Authentication
• SSO and IAM
• Identity Providers
• Network Access Control
• Convenience vs Security Trade-offs

What commenters say

• Some users are concerned about the security implications of relying on a single authentication provider, such as Google, for all access controls.
• Others argue that centralized authentication is a best practice for security teams and that trusting a reputable provider like Google is a reasonable decision.
• The use of SSO and IAM systems can potentially give the provider access to all authenticated resources, which is a concern for some users.
• Some commenters suggest using alternative authentication methods, such as hosting their own auth server, to mitigate these risks.
• The convenience and simplicity of Tailscale's login flow are seen as benefits by some users, but others find it confusing or problematic, especially for headless servers.
• There are differing opinions on the trade-offs between convenience, security, and control when using SSO and IAM systems.
• Some users appreciate the ability to use Tailscale with their existing identity provider, while others are concerned about the potential risks and limitations of this approach.