Brad Fitzpatrick

I'd propose trying to run a DNS-over-HTTPs server on 100.100.100.100 instead of the classic UDP DNS server we run, but surely (hopefully) Android is checking the TLS cert validity. They...

@normanr, I was both afraid (and excited) it might come to that. Glad to hear it should work! We have some WIP code to do that elsewhere, so that might...

We'll know later once we've done more of the work to move discovery & connectivity probing up into magicsock, not relying on the UpdateDst hack in wireguard-go. It'd also overlap...

We should probably do LAN-based discovery of peer nodes (e.g. https://github.com/tailscale/tailscale/issues/1252) first. Then nodes would know their L2 neighbors. We want to do that anyway to stop reporting private LAN...

@toffaletti: https://github.com/tailscale/tailscale/pull/4536

@toffaletti, that won't work. We'll start shipping standalone Mac builds (outside the app store) at https://pkgs.tailscale.com/unstable/ soon-ish I think. That'll probably be the easiest way to test things. But this...

Any updates for this would've been posted here.

> `Fixes tailscale/tailscale#17470` That issue doesn't exist.

Some corners were cut but it seems to work.

Including video here too. Not shown, the ADB commands... ``` adb install -r tailscale-debug.apk adb shell am start -n com.tailscale.ipn/com.tailscale.ipn.IPNActivity adb shell am broadcast -n com.tailscale.ipn/.IPNReceiver -a com.tailscale.ipn.INIT_WITH_AUTHKEY --es authkey...