Post

Brad Fitzpatrick
@bradfitz.com

I can finally talk about this, 3 years later... github.com/tailscale/ta... It's a library + CLI tool that's like netcat, but over Tailscale's data plane without any control plane (no accounts, no dependence on Tailscale the company, all open source) WireGuard + NAT traversal without IP addresses.

github.comGitHub - tailscale/tailcat: like netcat, but over Tailscale's data plane, without Tailscale's control planelike netcat, but over Tailscale's data plane, without Tailscale's control plane - tailscale/tailcat

35 reposts238 likes

Filippo Valsorda
@filippo.abyssdomain.expert

Uuuuh, neat! Would it be easy enough to add 32 bytes of WireGuard PSK and get some degree of post-quantum protection, since these are already secret tokens? I am growing uncomfortable with Tailscale's lack of harvest-now-decrypt-later protection against QCs.

Brad Fitzpatrick
@bradfitz.com

I remember when wush came out and I saw the README I was like "ugh, we should release derpcat" (since renamed tailcat to not imply it's always over DERP) But I haven't used wush or seen how it works. I suspect approximately the same, though.