undefined | Better HN

0 pointsMarsIronPI1mo ago0 comments

Huh? I thought one of the appeals of Tailscale is that security is done at the network level; plus that your network is private, so you don't get randos knocking at your ports.

0 comments

akho1mo ago

What does “at the network level” mean?..

Anyway; Tailscale is not your only network. If you’re on a laptop, you need to be able to log onto rando wifi networks. If you’re at home, you need to be mindful of your smart fridge going rogue. You need to run a firewall. Tailscale adds a separate, Tailscale-specific, firewall with centralized management. Now you have two firewalls.

MarsIronPIOP1mo ago

Ah, I see what you mean now. Yes, that's true; you'd still need a firewall for LAN.

> What does “at the network level” mean?..

I meant the normal non-Tailscale firewall (e.g. iptables).

j / k navigate · click thread line to collapse