# Tailscale SSH

13 Hacker News commenters recommended Tailscale SSH and 26 criticized it, November 2025 to November 2026. It was recommended in 5 of 13 months.

**Verdict:** Recommended for SSH access without public ports, easy revocation and logging. Critics cite a recent argument-handling vulnerability and slow patch rollout.

## Why people recommend it

- No public SSH port needed (2 comments): "The advantage of tailscale ssh is that the machine doesn't need to have the ssh port open publicly." ([source](https://news.ycombinator.com/item?id=48955681)) "Arguably that's a more secure starting point than vanilla ssh to publicly accessible machine." ([source](https://news.ycombinator.com/item?id=48917042))
- Simple, convenient, easily revocable access (3 comments): "Convenience for the most part but in general, I agree. I like having it as an option." ([source](https://news.ycombinator.com/item?id=48915437)) "It was simple and convenient and access was easily revocable." ([source](https://news.ycombinator.com/item?id=48915584)) "It is insanely straightforward and very robust." ([source](https://news.ycombinator.com/item?id=50325529))
- Login managed alongside connectivity (2 comments): "tailscale allows you to manage remote login at the same layer as connectivity, with better logging and alerting" ([source](https://news.ycombinator.com/item?id=50287284)) "It's handy to open a TTY connection in the browser, or to delegate your tailscale MFA account as remote authentication." ([source](https://news.ycombinator.com/item?id=50268704))
- Works well day to day (2 comments): "Otherwise it’s been great for me" ([source](https://news.ycombinator.com/item?id=48917298)) "using Tailscale SSH is brilliant" ([source](https://news.ycombinator.com/item?id=47912536))

## What people warn about

- Argument handling vulnerability raised concerns (4 comments): "But why should insecure argument handling bugs (as per your recent SSH bulletin) be found after release ?" ([source](https://news.ycombinator.com/item?id=49128476)) "Well, they clearly don't if they have an "insecure argument handling" vulnerability." ([source](https://news.ycombinator.com/item?id=48920944)) "damn you guys ought to be more careful with such a sensible and important component" ([source](https://news.ycombinator.com/item?id=50266222))
- Patch and disclosure handling criticized (3 comments): "I don't see the point of publishing a security bulletin if you are not going to timely push the fix to artifacts on all affected platforms." ([source](https://news.ycombinator.com/item?id=48917448)) "Tailscale should not be relying on the random goodwill of others to do random audits of unknown coverage at random intervals." ([source](https://news.ycombinator.com/item?id=48921409)) "Feels pretty weird practice to advise upgrading to a non-existent version." ([source](https://news.ycombinator.com/item?id=48918471))
- Adds complexity over OpenSSH (3 comments): "sounds like just adding complexity over traditional method of OpenSSH + key distribution" ([source](https://news.ycombinator.com/item?id=50272055)) "It interferes with sshd features and adds to your attack surface." ([source](https://news.ycombinator.com/item?id=50267843)) "Why would I want to swap the well tested auth in ssh for auth managed by tailscale?" ([source](https://news.ycombinator.com/item?id=50266279))
- Unclear security bulletin wording (2 comments): "I fully understand being carefully worded when you need serious brain power just to figure out every claim in the logorrhea" ([source](https://news.ycombinator.com/item?id=50266506)) "There is some weaselly language." ([source](https://news.ycombinator.com/item?id=50265482))

## Where to get it

- [Visit the official site](https://tailscale.com/)

## Cite as

Hacker Approved, "Tailscale SSH", https://hackerapproved.com/p/tailscale-ssh/ (counts from 1,795,640 Hacker News comments, November 2025 to November 2026).