| Age | Commit message (Expand) | Author | Files | Lines |
| 2025-10-24 | ipn/ipnlocal: skip TKA bootstrap request if Tailnet Lock is unavailable | Alex Chan | 1 | -0/+4 |
| 2025-10-21 | ipn, tka: improve the logging around TKA sync and AUM errors | Alex Chan | 1 | -5/+6 |
| 2025-09-12 | all: add ts_omit_tailnetlock as a start of making it build-time modular | Brad Fitzpatrick | 1 | -0/+49 |
| 2025-06-18 | ipn/ipnlocal: make pricing restriction message for Tailnet Lock clearer | Anton Tolchanov | 1 | -6/+9 |
| 2025-04-25 | ipn/ipnlocal: add localNodeContext with netmap-related fields and methods | Nick Khyl | 1 | -10/+9 |
| 2025-01-30 | ipn: generate LoginProfileView and use it instead of *LoginProfile where appr... | Nick Khyl | 1 | -2/+2 |
| 2024-11-11 | all: use iterators over slice views more | Brad Fitzpatrick | 1 | -4/+2 |
| 2024-09-04 | tka: truncate long rotation signature chains | Anton Tolchanov | 1 | -10/+11 |
| 2024-08-30 | ipn/ipnlocal: fix a nil pointer dereference when serving /localapi/v0/tka/status | Nick Khyl | 1 | -4/+7 |
| 2024-08-21 | cmd/tl-longchain: tool to re-sign nodes with long rotation signatures | Anton Tolchanov | 1 | -17/+32 |
| 2024-08-20 | ipn/ipnlocal: network-lock, error if no pubkey instead of panic | Kristoffer Dalby | 1 | -1/+4 |
| 2024-08-14 | cmd/tailscale/cli: support passing network lock keys via files | Brad Fitzpatrick | 1 | -1/+2 |
| 2024-06-27 | ipn/ipnlocal: allow multiple signature chains from the same SigCredential | Anton Tolchanov | 1 | -3/+11 |
| 2024-06-03 | ipn/ipnlocal: discard node keys that have been rotated out | Anton Tolchanov | 1 | -4/+97 |
| 2024-05-31 | cmd/tailscale/cli: print node signature in `tailscale lock status` | Anton Tolchanov | 1 | -8/+13 |
| 2024-04-26 | ipn/{ipnlocal,localapi},wgengine{,/magicsock}: plumb health.Tracker | Brad Fitzpatrick | 1 | -6/+5 |
| 2024-04-25 | health: add Tracker type, in prep for removing global variables | Brad Fitzpatrick | 1 | -5/+5 |
| 2024-04-16 | all: use Go 1.22 range-over-int | Brad Fitzpatrick | 1 | -3/+3 |
| 2024-02-25 | all: remove LenIter, use Go 1.22 range-over-int instead | Brad Fitzpatrick | 1 | -1/+1 |
| 2023-11-17 | ipn/ipnlocal,cmd/tailscale: persist tailnet name in user profile | Marwan Sulaiman | 1 | -1/+4 |
| 2023-09-18 | ipn/ipnlocal: add tailnet MagicDNS name to ipn.LoginProfile | Sonia Appasamy | 1 | -1/+1 |
| 2023-08-21 | types/netmap, all: make NetworkMap.SelfNode a tailcfg.NodeView | Brad Fitzpatrick | 1 | -2/+2 |
| 2023-08-20 | types/views,cmd/viewer: add ByteSlice[T] to replace mem.RO | Maisem Ali | 1 | -3/+2 |
| 2023-08-19 | ipn/ipnlocal: fix regression in printf arg type | Brad Fitzpatrick | 1 | -2/+2 |
| 2023-08-18 | types/netmap, all: use read-only tailcfg.NodeView in NetworkMap | Brad Fitzpatrick | 1 | -10/+12 |
| 2023-08-01 | all: implement lock revoke-keys command | Tom DNetto | 1 | -0/+87 |
| 2023-07-19 | cmd/tailscale: warn if node is locked out on bringup | Tom DNetto | 1 | -1/+2 |
| 2023-07-11 | ipn: rename CapTailnetLockAlpha -> CapTailnetLock | Tom DNetto | 1 | -15/+4 |
| 2023-06-21 | ipn/ipnlocal: quiet some spammy network lock logging | Brad Fitzpatrick | 1 | -2/+4 |
| 2023-06-13 | tka: provide verify-deeplink local API endpoint (#8303) | Andrea Gottardo | 1 | -0/+12 |
| 2023-05-24 | tka: provide authority StateID in NetworkLockStatus response (#8200) | Andrea Gottardo | 1 | -0/+3 |
| 2023-03-09 | cmd/tailscale: surface node-key for locked out tailnet-lock peers | Tom DNetto | 1 | -0/+1 |
| 2023-03-08 | all: implement preauth-key support with tailnet lock | Tom DNetto | 1 | -0/+36 |
| 2023-03-03 | tka: compact TKA storage on startup | Tom DNetto | 1 | -0/+5 |
| 2023-03-03 | ipn,cmd/tailscale: implement resigning nodes on tka key removal | Tom DNetto | 1 | -0/+94 |
| 2023-01-27 | all: update copyright and license headers | Will Norris | 1 | -3/+2 |
| 2023-01-04 | health,ipn/ipnlocal: report the node being locked out as a health issue | Tom DNetto | 1 | -0/+11 |
| 2023-01-04 | cmd/tailscale,tka: make KeyID return an error instead of panicking | Tom DNetto | 1 | -1/+5 |
| 2022-12-07 | ipn/ipnlocal,cmd/tailscale: minor improvements to lock modify command | Tom DNetto | 1 | -0/+3 |
| 2022-12-05 | ipn/ipnlocal: fix use of stale profile while processing netmap | Tom DNetto | 1 | -0/+2 |
| 2022-11-30 | types/key,cmd/tailscale/cli: support tlpub prefix for tailnet-lock keys | Tom DNetto | 1 | -1/+1 |
| 2022-11-30 | ipn/ipnlocal,tailcfg: introduce capability to gate TKA init paths | Tom DNetto | 1 | -21/+25 |
| 2022-11-30 | cmd/tailscale,ipn: surface TKA-filtered peers in lock status command | Tom DNetto | 1 | -0/+27 |
| 2022-11-29 | cmd/tailscale,ipn: store disallowed TKA's in prefs, lock local-disable | Tom DNetto | 1 | -2/+42 |
| 2022-11-29 | ipn,types/persist: add DisallowedTKAStateIDs, refactor as view type | Tom DNetto | 1 | -10/+10 |
| 2022-11-29 | Revert "ipn,types/persist: store disallowed TKA's in prefs, lock local-disable" | Brad Fitzpatrick | 1 | -41/+2 |
| 2022-11-29 | ipn,types/persist: store disallowed TKA's in prefs, lock local-disable | Tom DNetto | 1 | -2/+41 |
| 2022-11-28 | cmd/tailscale,ipn: improve UX of lock init command, cosmetic changes | Tom DNetto | 1 | -6/+7 |
| 2022-11-25 | ipn/ipnlocal: drop LocalBackend.inServerMode | Maisem Ali | 1 | -1/+1 |
| 2022-11-22 | ipn/ipnlocal,tka: generate a nonce for each TKA | Tom DNetto | 1 | -0/+10 |