diff options
| author | Andrew Lytvynov <awly@tailscale.com> | 2025-11-17 14:42:15 -0800 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2025-11-17 14:42:15 -0800 |
| commit | 26f9b50247c9ba82ee33e4ae3acb5a107424c3a4 (patch) | |
| tree | 576e42e7da894de5f4b43e9758eb57469dbc3ebc /control/controlhttp/controlhttpserver/controlhttpserver.go | |
| parent | f1cddc6ecf4624b7608b1aeb06bd108c24687fef (diff) | |
| download | tailscale-26f9b50247c9ba82ee33e4ae3acb5a107424c3a4.tar.xz tailscale-26f9b50247c9ba82ee33e4ae3acb5a107424c3a4.zip | |
feature/tpm: disable dictionary attack protection on sealing key (#17952)
DA protection is not super helpful because we don't set an authorization
password on the key. But if authorization fails for other reasons (like
TPM being reset), we will eventually cause DA lockout with tailscaled
trying to load the key. DA lockout then leads to (1) issues for other
processes using the TPM and (2) the underlying authorization error being
masked in logs.
Updates #17654
Signed-off-by: Andrew Lytvynov <awly@tailscale.com>
Diffstat (limited to 'control/controlhttp/controlhttpserver/controlhttpserver.go')
0 files changed, 0 insertions, 0 deletions