You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/feature
Andrew Lytvynov 26f9b50247
feature/tpm: disable dictionary attack protection on sealing key (#17952)
DA protection is not super helpful because we don't set an authorization
password on the key. But if authorization fails for other reasons (like
TPM being reset), we will eventually cause DA lockout with tailscaled
trying to load the key. DA lockout then leads to (1) issues for other
processes using the TPM and (2) the underlying authorization error being
masked in logs.

Updates #17654

Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
2 weeks ago
..
ace feature/ace: make ACE modular 2 months ago
appconnectors feature/appconnectors: start making it modular 2 months ago
buildfeatures cmd/tailscale/cli,feature: add support for identity federation (#17529) 2 months ago
c2n feature/c2n: move answerC2N code + deps out of control/controlclient 2 months ago
capture feature/capture: fix wireshark decoding and add new disco frame types (#16089) 6 months ago
clientupdate feature/clientupdate: move clientupdate to a modular feature, disabled for tsnet 2 months ago
condlite/expvar feature/condlite/expvar: add expvar stub package when metrics not needed 2 months ago
condregister cmd/tailscale/cli,feature: add support for identity federation (#17529) 2 months ago
debugportmapper feature/portmapper: make the portmapper & its debugging tools modular 3 months ago
doctor doctor: add ts_omit_doctor support 2 months ago
drive feature/drive: start factoring out Taildrive, add ts_omit_drive build tag 3 months ago
featuretags cmd/tailscale/cli,feature: add support for identity federation (#17529) 2 months ago
identityfederation feature/identityfederation: strip query params on clientID (#17666) 1 month ago
linkspeed feature/linkspeed: move cosmetic tstun netlink code out to modular feature 2 months ago
linuxdnsfight feature/linuxdnsfight: move inotify watching of /etc/resolv.conf out to a feature 2 months ago
oauthkey tsnet,internal/client/tailscale: resolve OAuth into authkeys in tsnet (#17191) 3 months ago
portlist feature/portlist: pull portlist service porting into extension, use eventbus 2 months ago
portmapper wgengine/magicsock: fix js/wasm crash regression loading non-existent portmapper 1 month ago
posture ipn/ipnlocal, feature/posture: pull posture out into a modular feature 2 months ago
relayserver syncs: add Mutex/RWMutex alias/wrappers for future mutex debugging 2 weeks ago
sdnotify feature/sdnotify: move util/systemd to a modular feature 2 months ago
syspolicy util/syspolicy: finish plumbing policyclient, add feature/syspolicy, move global impl 3 months ago
taildrop util/backoff: rename logtail/backoff package to util/backoff 2 months ago
tap all: use Go 1.20's errors.Join instead of our multierr package 2 months ago
tpm feature/tpm: disable dictionary attack protection on sealing key (#17952) 2 weeks ago
useproxy feature, net/tshttpproxy: pull out support for using proxies as a feature 2 months ago
wakeonlan feature/*: make Wake-on-LAN conditional, start supporting modular features 10 months ago
feature.go wgengine/magicsock: fix js/wasm crash regression loading non-existent portmapper 1 month ago
hooks.go types/persist: add AttestationKey (#17281) 2 months ago
sdnotify.go feature, ipn/ipnlocal: add, use feature.CanSystemdStatus for more DCE 3 weeks ago