News for hackers. Stuff that matters.
Re:Tailscale state file encryption no longer enabled by default by sp_c on Wednesday January 07, 2026 @05:46PM (#46534299)
So in linux it looks like we just update /etc/default/tailscaled with:

FLAGS="--encrypt-state"

...and hope for the best?

edit: I see this in my logs, I guess it is working:

migrated "/var/lib/tailscale/tailscaled.state" from plaintext to TPM-sealed format

There are no comments on this comment yet.