Comment on PSA: Update your Tailscale!
forbiddenlake@lemmy.world 5 days agoTailscale ssh isn’t enabled by default and I for one don’t see the need for it.
Your choice is valid, but you’ve chosen to be responsible for adding new clients everywhere and making sure they can all connect to each other, etc. you have simpler software but more manual work, which is a valid choice if you’re up for it.
lemmyvore@feddit.nl 4 days ago
Also, I’ve never been able to understand how something exposed to the entire internet (a WG server) is considered more secure than something that only connects peers privately to each other.
The attack surfaces are nothing alike.
Even if you limit access to WG with IP blocking there’s still no comparison to something you can’t access at all from outside.