Securely authenticate systems to Tailscale without managing long-lived API keys, auth keys, or OAuth clients.
Tailscale Services
Securely connect to and manage access to your internal resources using Tailscale Services.
How we built a lightweight identity provider using Tailscale's tools
How tsnet, application security grants, and Funnel combined to build a secure authorization app.
Tailworm
The design choices of the open source tailscale and headscale software have created an environment ripe for risk, while marketing security as its design and purpose. Choices have been made to move away from security-in-depth, removing layers of authentication, and replacing daemons such as OpenSSH which employ privilege-separation with a highly-privileged process. Other findings include broader-than-advertised network security boundaries, which seems to be legitimate bugs, but the missing security and isolation is precisely what users are advertised by these tools.
Tailscale | Secure Connectivity for AI, IoT & Multi-Cloud
The connectivity platform for devs, IT, and security teams. Zero Trust identity-based access that deploys in minutes and scales to every resource. Start free.
Digging into how Tailscale encrypts its state file on Windows, Apple, and Linux
Tailscale's latest version encrypts more data at rest, making it harder for attackers to potentially clone your nodes. Here's how it works.
Goodbye SSO Tax: How Tailscale Made SSO Free for Everyone
Tailscale eliminates the SSO tax, making all OIDC-compliant SSO identity providers free across every plan. Learn why security shouldn’t be a luxury and how this change aligns with Tailscale’s mission to build a secure internet for everyone.
Tailscale Funnel
Securely route internet traffic to local services using Tailscale Funnel.
Use grants with standard HTTP headers: Tailscale app capabilities
App capabilities help you build applications, in any language, with identity and capability awareness
The best ways to use Tailscale for sharing with friends and family
Using Tailscale's sharing features to make files, self-hosted services, and exit nodes available to your inner circle.
How to self-host with Tailscale: Installing Proxmox and hardware choices
In this tutorial, we’ll start by picking out hardware and installing Proxmox. Tailscale can then securely connect to your self-hosted storage.
Tailscale in the Hugging Face intrusion: The good news and the bad news
An AI agent used a stolen Tailscale auth key at Hugging Face. Workload identity federation, flow logs, and safer defaults could have reduced the risk.
tijs/atproto-oauth
Framework-agnostic OAuth integration for AT Protocol (Bluesky) applications
We're getting close! atlogin.net is a start on the identity side, and we just launched declarative node sharing which lets you share groups of devices with arbitrary outside identities (without them joining your tailnet). tailscale.com/docs/features/declarative-nod…
ATLogin - OIDC for ATProto/Bluesky
atlogin.net