Hacker News Reader

I believe with tailscale you don’t have to trust a 3rd party with your cleartext traffic

But you do seem to get to host a https version of your app in case you need features locked behind secure context.

That can't be right. If they're hosting on a different DNS they have an absolute need to MITM ssl/tls traffic. Can't work otherwise.

So cloudflare sees your plaintext. Btw: tailscale does not (but ssl errors and warnings are unavoidable)