Hacker News Reader

Comment by lvh | Hacker News Reader

Tailscale will let you use any SAML or OIDC provider you like in the Enterprise plan (presumably because of the cost of supporting the long tail of nonsense IdPs will produce).

(Disclosure: I'm a (small) investor via Latacora's sibling fund, Lagomorphic.)

View on HN

Semi-related question: did Latacora or @tqbf ever open source their Go-based SAML IDP: https://twitter.com/tqbf/status/938501701526487040

(That tweet I think was a teaser saying it was coming. I subsequently looked for it a few times and never found it, but maybe plans changed, or maybe I just failed to find it).

Nope. It was pretty much just Thomas and Erin working on it, and I don't think it's operational. Sorry :(

Don't you have to also trust Tailscales closed source coordinator node?

Which also applies to Tailscale's SD-WAN and cloud VPN competitors.

But doesn't apply to my wireguard setup on my OPNSense installation at home.

This is the HN disconnect: people commenting here have completely different concerns than Tailscale's actual customers.

That is true. Sometimes we are talking about the business aspects of product-market fit, and sometimes we are talking about our own personal use of the product or domain. In this case it's both.

That only addresses half the problem, though, right? Can't Tailscale still add any nodes they want to one's network?

Also, it doesn't address the individual case, but that's fair enough: Tailscale isn't a charity.

Reply on news.ycombinator.com