Hacker News Reader

I guess this could be mitigated by not trusting the coordination server? https://tailscale.com/blog/tailnet-lock/

I just tried to set this up and couldn't. Seems like it's invite only with a waitlist :/

Yeah, we're adding people slowly because decentralized authorities like the one that tailnet lock implements can have nasty failure modes, e.g. some bug that prevents any new addition to the tailnet at all and forces manual recovery on each of your devices separately. So, we're putting miles on it with a little care, and making sure folks who sign up are aware of the current limitations and risks.

Oh is that all the problem is?

Anyone with automated deployments and self provisioning should be fine with that risk. I thought it was a lot more premature than this.

Good ops is more than automated deployments. Complex systems have complex failure modes.

If you're excited about tailnet lock and want to get on the alpha sooner rather than later, feel free to drop me an email. As Dave mentioned we are slowly crunching through the waitlist to get some miles in, but I'm also happy to take on enthusiastic testers ahead of that!

You can email me at tom@ (tailscale dot com)

Reply on news.ycombinator.com