Brad Fitzpatrick
Brad Fitzpatrick
@rs, the Tailscale client and coordination server already support 90% of what you describe. What remains is bootstrap DNS. The DoH providers we support today all share the same property:...
Yeah, that's probably fine. We'd need some concrete use cases and to decide on which variables we support.
My first guess is that this is the Great Firewall of China (or one of the lesser internal firewalls) interfering.
tailscale.com doesn't talk to your custom DERP servers. I suspect there's some interference between your Android in China and your DERP server in China. The Great Firewall is not purely...
@HeIsPirate, are you also in China?
This is probably a question for your ISP. I'm not sure we can help you here.
@frankli0324, I agree that a panic in crypto/tls is a Go bug. But I don't know which version of Go you used. If you have a crash in crypto/tls with...
The Go security team points out that the cmd/derper code's manual cert mode is at fault. It's returning the same `*tls.Certificate` value on each call, but the GetCertificate wrapper around...
I've submitted a fix. Please rebuild your `derper` binaries and try again.