←back to thread

Tailscale raises $100M

(tailscale.com)
854 points gmemstr | 1 comments | 04 May 22 13:17 UTC | HN request time: 0.245s | source
Show context
boesboes ◴[04 May 22 13:43 UTC] No.31260274[source]▶
For anyone else who wonders wtf tailscale is:

> Tailscale is a VPN service that makes the devices and applications you own accessible anywhere in the world, securely and effortlessly. It enables encrypted point-to-point connections using the open source WireGuard protocol, which means only devices on your private network can communicate with each other.

It seems to take care of key distribution, nat-traversal, authentication etc etc

Neat! No sure how that is 'fixing internet' exactly, but really cool anyway

replies(8): >>31260403 #>>31260446 #>>31260650 #>>31260654 #>>31260970 #>>31261908 #>>31268396 #>>31268813 #
ncmncm ◴[04 May 22 14:09 UTC] No.31260654[source]▶
I thought that Tailscale was pretty interesting.

Avery Pennarun, its CTO, is somebody whose judgment I am used to trusting.

Then I learned that to use it, I would be dependent on authenticating using a login on one of the unaccountable internet behemoths who could take away my account for any random reason or no expressed reason at all.

No, thank you.

replies(10): >>31260714 #>>31260778 #>>31261024 #>>31261405 #>>31261904 #>>31262913 #>>31263886 #>>31268402 #>>31272508 #>>31275084 #
__float ◴[04 May 22 14:18 UTC] No.31260778[source]▶
If you use an identity provider like Okta or OneLogin, then you're not tied to any "contentful" services like GitHub or a Google account that "historically" seem to have more problems of this type.

As far as threat models go, I can't really say I understand this one too much.

replies(3): >>31261608 #>>31262055 #>>31265188 #
1. DarylZero ◴[04 May 22 15:42 UTC] No.31262055[source]▶
Okta and OneLogin are both private corporations that have each existed for 13 years. Does your threat model include an estimate for how long they will stay in business? What if one of them puts the other out of business? Does your threat model choose a winner in that fight?

As far as paid services the possibility also is there that someday _you_ run out of money and have to stop paying them. They tend to shut down your access when that happens. Another financial threat you have to model.

These things don't happen when you use public key authentication.