Tailscale Now Runs in the Browser

Something something..now we gotta block tailscale enterprise wide and force people (including myself) to use managed chrome to prevent this being used to bypass security controls.

I am all for this to be honest, the need is there. The problem from a security perspective is that browsers don't lend themselves to policy enforcement. Chrome is the the exception but it has a lot to improve as well.

This is another big fail/miss on firefox. It could have gotten more adoption by allowing federated accounts for the browser where admins push configs to browsers. Not just in a corporate setting but imagine logging into multiple devices and they all get your about:config tuning,extensions and extension data (noscript/ublock exceptions!), bookmarks,etc... they could even upsell like "chrome enterprise".

Similarly, wouldn't be awesome if tailscale replaced enterprise vpn's? Like there is sd-wan,zscaler and all that but tailscale is more than a bit different.

This is cool!

Now we can get end-users to do portscanning of their home network for us … or something.

sounds like we could use this for user attestation.

And be protected from DNS or BGP hijacking