Tailscale Has Partnered with Mullvad

Re:Tailscale Has Partnered with Mullvad by Spooky23 on Thursday September 07, 2023 @03:44PM (#37424561)

Say you were a county social services department. You wish to use Tailscale to microsegment federal tax data (subject to IRS 1075 safeguards requirements) relating to your child support unit from other traffic (say Medicaid enrollment) which does not have that requirement.

I’m pretty confident that you would draw an audit finding for that reason with a pure tailscale solution. (I also think that’s bullshit.)

[ Parent | on HN ]

Re:Tailscale Has Partnered with Mullvad by tptacek on Thursday September 07, 2023 @04:38PM (#37425226)

1075 does not appear to require that access VPNs use FIPS cryptography. Arguably, it would if you were relying exclusively on WireGuard for data protection, but it's uncommon for people to do that (we're WireGuard true believers and we do in places depend on WireGuard authentication and encryption for our security model, but it's a weird enough thing to do that we notice it when we do it).

[ Parent | on HN ]

Re:Tailscale Has Partnered with Mullvad by Spooky23 on Friday September 08, 2023 @09:10PM (#37441207)

See section 4.18, control SC-13.

[ Parent | on HN ]

Re:Tailscale Has Partnered with Mullvad by tptacek on Saturday September 09, 2023 @02:19AM (#37442747)

Yes, I'm familiar. I don't believe that means everything you use that happens to involve cryptography has to comply with that control.

[ Parent | on HN ]

Re:Tailscale Has Partnered with Mullvad by Spooky23 on Saturday September 09, 2023 @10:40AM (#37445970)

[delayed]

[ Parent | on HN ]