The enterprise option is nifty. I'm gonna use it for my next startup. I find it to be pretty freaking amazing. But if you're suggesting that having an open port on a secure connection is dangerous... well that's why you have a secure connection. So just use ACLs to restrict access to machines you shouldn't have access to. And you can do it by port. Is there something I'm missing?
historical note: Taildrop pre-dates Tailscale SSH by more than a year, so if you had concerns about Taildrop's functionality, those were valid way before ssh functionality was enabled.
Both Taildrop and Tailscale SSH are disabled the moment any ACL but the default (which allows everything to access anything which is what no enterprise runs with) is configured because their ACL feature allows only access but no denial, so if something isn't listed explicitly, it's denied.
Of course this makes companies very fragile to things like this.
If they’re using Tailscale they can already spin up a good old HTTP server over whatever open port and download from there, if said enterprise isn’t competent enough to configure proper access control.
Only if the feature is enabled, it is disabled by default.
I'm going off the documentation that says it is disabled by default because it is an alpha feature.
Well yeah if a user needs a file on their phone then that's the point of the app. Seems like a pretty conventional and valid use-case?
I totally get that they are trying to appeal to tech startups and not big companies. But how jazzed would you be that a manager at your bank can zip your mortgage documents over to his cell phone to review them on the go?