hi crawshaw, I've started playing with Tailscale as potential alternative for how we're using LISP in Project EVE (Edge Computing Mesh Network usecase) and was wondering whether there's any way today to make Linux clients negotiate (even if through a manual process without) going through your control plane?

It is, admittedly, impossible for me to be unbiased in this discussion (coauthor of Nebula, hi), but I strongly disagree that your client code is your most important component, from a trust perspective.

Your coordination server tells every node about every other node and distributes the keys for the entire network. Everything on a tailscale network implicitly trusts your coordination service.

If an individual client is compromised, code or otherwise, the effect is more limited than your coordination service being compromised, in which case the entire system's trust is broken.