301–310 of 354 posts
Earlier quoted context omitted.
I think that's quite smart, and OIDC is an open standard at least. Securing usernames/passwords and handling second factors etc; is already done so well and it's hard to do. Having a clear 'this is where we can be secure' stances is what makes me want to trust them more.
It's an open standard, but would they allow me to use my OIDC?
Earlier quoted context omitted.
I think that's quite smart, and OIDC is an open standard at least. Securing usernames/passwords and handling second factors etc; is already done so well and it's hard to do. Having a clear 'this is where we can be secure' stances is what makes me want to trust them more.
Why is that smart? I signed up for a Microsoft Account with my email and I can use Microsoft Account to log in to Tail scale but I can't use the email directly? How does the middle man bring anything to the table?
I'm a fan of TS and have been a paying customer for work infra for almost a year now. It really is well put together and easy to use, but I do run up against some issues/complaints when diving deep that I hope they can work out: * The pricing tiers and included features by tier penalizes you in frustrating ways. The base plan is a reasonable $6/user/m, but if you want to use ACLs to control anything in a workable way…
There is no enterprise tier, instead you pay for any additional features you need. I.e. log streaming is 2$/month/user and SSH recording is 3$/month/user.
Earlier quoted context omitted.
Why is that smart? I signed up for a Microsoft Account with my email and I can use Microsoft Account to log in to Tail scale but I can't use the email directly? How does the middle man bring anything to the table?
Because then tailscale doesn’t store a username and password for you, so unless microsoft is hacked you won’t be- theoretically.
And if you for whatever reason get locked out of your microsoft account (and I say this as someone who had this happen with a Google account) your are basically locked out of your online life.
I own my own domain for my email address (xxxx@mydomain.com). As long as I can set the MX record of that domain freely, I can always restore access to my email adress no matter what any email provider decides to do or block me for.
Earlier quoted context omitted.
Because then tailscale doesn’t store a username and password for you, so unless microsoft is hacked you won’t be- theoretically.
but at the same time, now Microsoft knows you are using Tailscale (and they use this data in their tracking + analytics). And all the other products. They get a very good insight of your online habbit, because they have a list of all other products and apps you use where you sign in with your microsoft account. And due to the way token refresh works, they even have a good idea how frequently you use each individual o…
Its not hard.
If you don’t feel comfortable doing so: maybe that is telling.
I'm a fan of TS and have been a paying customer for work infra for almost a year now. It really is well put together and easy to use, but I do run up against some issues/complaints when diving deep that I hope they can work out: * The pricing tiers and included features by tier penalizes you in frustrating ways. The base plan is a reasonable $6/user/m, but if you want to use ACLs to control anything in a workable way…
"Subnet routing broke on Ubuntu (maybe other distros) recently" Do you have more infos on this one? I use Debian and that would be a major problem for me.
I've got conflicted feels about Tailscale. I love their product and a bunch of the people I know use their free tier, including myself. But their enterprise strategy destroys their good will. I can only assume it's focused on killing old school VPN products. The free tier that we love is a marketing expense. And it’s not even a conversion play. People are complaining about ~10/user/month -- add basic things that you'…
If 20$/user/month is too much, maybe you could apin up headscale and plug in your OIDC provider? Never tried it myself, I only manage small tailnets so the free tier is fine
I've got conflicted feels about Tailscale. I love their product and a bunch of the people I know use their free tier, including myself. But their enterprise strategy destroys their good will. I can only assume it's focused on killing old school VPN products. The free tier that we love is a marketing expense. And it’s not even a conversion play. People are complaining about ~10/user/month -- add basic things that you'…
Given how goddamn terrible Cisco anyconnect is, I hope they succeed.