5 ms·
Good point. I self host headscale but it also has the ssh feature, probably also insecure.
by cevn 2mo ago
Good point. I self host headscale but it also has the ssh feature, probably also insecure.
- OJFord 2mo agoNot necessarily, it's a clean room implementation. Even if leading dashes was known/documented/tested to implement they might have done it differently. And maybe it was an implementation detail that it was ever allowed, but that's a weird username, headscale implementation happened not to allow it, and nobody ever noticed the discrepancy.
- cevn 2mo agoNice, this makes me feel a little better.
- saintfire 2mo agoHow is that true if: This project is not associated with Tailscale Inc. However, one of the active maintainers for Headscale is employed by Tailscale and he is allowed to spend work hours contributing to the project. Contributions from this maintainer are reviewed by other maintainers.