Hacker News (curated)new | past | comments | ask | show | jobs| show hidden

I make my sshd only listen on the Tailscale IP. Then I don’t even bother setting up SSH keys. I use password authentication, except on mobile where my password is too difficult to type with an onscreen keyboard.


As I understand it, that use case isn't impacted by these vulnerabilities since it's not using Tailscale SSH, just OpenSSH over Tailscale.

Correct. I have no reason to even turn on Tailscale SSH.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact | github