Tailscale SSH
A keyless SSH access feature provided by Tailscale, built on the WireGuard network and identity authentication mechanisms. Access permissions are controlled through ACL policies, replacing traditional SSH key management.
Timeline (last 90 days)
Tailscale SSH is a keyless SSH access feature offered by Tailscale that uses the WireGuard network and identity authentication mechanisms to replace traditional SSH key management.
Tailscale SSH authorization relies entirely on ACLs, and mistakes in writing ACLs (such as overly permissive *:* rules) directly expand the attack surface.
Tailscale SSH supports a session recording feature that can record the contents of SSH sessions to external storage.
Tailscale SSH's centralized authentication model turns the control plane and policy engine into a critical security boundary; once a flaw appears in the chain, its impact may cover the entire tailnet.
Keyless SSH reduces key management costs, but it does not eliminate security risk; rather, it shifts the risk to the identity provider and policy engine.
All Facts (5)
Tailscale SSH is a keyless SSH access feature offered by Tailscale that uses the WireGuard network and identity authentication mechanisms to replace traditional SSH key management.
50%UnverifiedTailscale SSH authorization relies entirely on ACLs, and mistakes in writing ACLs (such as overly permissive *:* rules) directly expand the attack surface.
50%UnverifiedTailscale SSH supports a session recording feature that can record the contents of SSH sessions to external storage.
50%UnverifiedTailscale SSH's centralized authentication model turns the control plane and policy engine into a critical security boundary; once a flaw appears in the chain, its impact may cover the entire tailnet.
50%UnverifiedKeyless SSH reduces key management costs, but it does not eliminate security risk; rather, it shifts the risk to the identity provider and policy engine.
50%