| Age | Commit message (Expand) | Author | Files | Lines |
| 2024-06-27 | ipn/ipnlocal: allow multiple signature chains from the same SigCredential | Anton Tolchanov | 2 | -8/+27 |
| 2024-06-27 | tka: test SigCredential signatures and netmap filtering | Anton Tolchanov | 2 | -0/+102 |
| 2024-06-03 | ipn/ipnlocal: discard node keys that have been rotated out | Anton Tolchanov | 3 | -5/+232 |
| 2024-05-31 | cmd/tailscale/cli: print node signature in `tailscale lock status` | Anton Tolchanov | 1 | -0/+36 |
| 2024-04-16 | all: use Go 1.22 range-over-int | Brad Fitzpatrick | 5 | -5/+5 |
| 2024-02-08 | all: use new AppendEncode methods available in Go 1.22 (#11079) | Joe Tsai | 1 | -10/+1 |
| 2023-12-20 | all: cleanup unused code, part 1 (#10661) | Andrew Lytvynov | 1 | -18/+0 |
| 2023-11-27 | tka: clarify field comment | Jenny Zhang | 1 | -1/+4 |
| 2023-09-09 | all: use set.Set consistently instead of map[T]struct{} | Brad Fitzpatrick | 2 | -6/+8 |
| 2023-09-01 | all: implement AppendText alongside MarshalText (#9207) | Joe Tsai | 1 | -3/+15 |
| 2023-08-01 | all: implement lock revoke-keys command | Tom DNetto | 2 | -3/+246 |
| 2023-07-19 | tka: guard against key-length panics when verifying signatures | Tom DNetto | 2 | -0/+9 |
| 2023-07-19 | tka: allow checkpoint AUMs to change TKA state | Tom DNetto | 1 | -14/+1 |
| 2023-06-20 | tka: add function for generating signing deeplinks (#8385) | Ross Zurowski | 2 | -15/+121 |
| 2023-06-13 | tka: provide verify-deeplink local API endpoint (#8303) | Andrea Gottardo | 1 | -0/+167 |
| 2023-05-25 | tka: fix go vet complaint on copy of lock value in tailchonk_test.go (#8208) | valscale | 1 | -1/+11 |
| 2023-04-17 | various: add golangci-lint, fix issues (#7905) | Andrew Dunham | 6 | -15/+15 |
| 2023-03-03 | tka: compact TKA storage on startup | Tom DNetto | 4 | -5/+242 |
| 2023-03-01 | tka: implement compaction logic | Tom DNetto | 2 | -0/+750 |
| 2023-02-23 | tka: add public API on NodeKeySignature key information | Tom DNetto | 1 | -0/+21 |
| 2023-01-27 | all: update copyright and license headers | Will Norris | 18 | -54/+36 |
| 2023-01-04 | cmd/tailscale,tka: make KeyID return an error instead of panicking | Tom DNetto | 11 | -51/+104 |
| 2023-01-04 | cmd/tailscale,tka: implement compat for TKA messages, minor UX tweaks | Tom DNetto | 2 | -9/+17 |
| 2022-11-29 | cmd/tailscale,ipn: store disallowed TKA's in prefs, lock local-disable | Tom DNetto | 1 | -0/+7 |
| 2022-11-29 | Revert "ipn,types/persist: store disallowed TKA's in prefs, lock local-disable" | Brad Fitzpatrick | 1 | -5/+0 |
| 2022-11-29 | ipn,types/persist: store disallowed TKA's in prefs, lock local-disable | Tom DNetto | 1 | -0/+5 |
| 2022-11-22 | ipn/ipnlocal,tka: generate a nonce for each TKA | Tom DNetto | 2 | -1/+31 |
| 2022-11-11 | cmd/tailscale,ipn: minor fixes to tailscale lock commands | Tom DNetto | 2 | -0/+20 |
| 2022-10-26 | tka, types/key: add NLPublic.KeyID | Adrian Dewhurst | 1 | -0/+38 |
| 2022-10-17 | tka: make rotation signatures use nested keyID | Tom DNetto | 3 | -5/+38 |
| 2022-10-05 | ipn/ipnlocal,tka: Fix bugs found by integration testing | Tom DNetto | 1 | -0/+4 |
| 2022-09-29 | all: fix spelling mistakes | Josh Soref | 3 | -9/+9 |
| 2022-09-29 | ipn/ipnlocal, tka: Implement TKA synchronization with the control plane | Tom DNetto | 2 | -0/+15 |
| 2022-09-26 | tka: Checkpoint every 50 updates | Tom DNetto | 4 | -11/+131 |
| 2022-09-21 | control/controlclient,ipn/ipnlocal: wire tka enable/disable | Tom DNetto | 7 | -14/+26 |
| 2022-09-15 | refactor: move from io/ioutil to io and os packages | Eng Zer Jun | 1 | -2/+1 |
| 2022-08-31 | tka: implement credential signatures (key material delegation) | Tom DNetto | 3 | -27/+153 |
| 2022-08-30 | tka: validate key after UpdateKey before applying state | Tom DNetto | 2 | -2/+10 |
| 2022-08-26 | tka: make storage a parameter rather than an Authority struct member | Tom DNetto | 6 | -107/+143 |
| 2022-08-25 | tka: move disablement logic out-of-band from AUMs | Tom DNetto | 7 | -74/+54 |
| 2022-08-24 | tka: optimize common case of processing updates built from head | Tom DNetto | 2 | -13/+85 |
| 2022-08-24 | tka: support rotating node-keys in node-key signatures | Tom DNetto | 4 | -23/+280 |
| 2022-08-22 | client,cmd/tailscale,ipn,tka,types: implement tka initialization flow | Tom DNetto | 6 | -9/+13 |
| 2022-08-15 | tka: Use strict decoding settings, implement Unserialize() | Tom DNetto | 7 | -10/+89 |
| 2022-08-08 | tka: stable text representation of AUMHash | David Crawshaw | 3 | -28/+53 |
| 2022-08-04 | tka,types/key: remove dependency for tailcfg & types/ packages on tka | Tom DNetto | 12 | -50/+56 |
| 2022-08-03 | tka,types/key: implement direct node-key signatures | Tom DNetto | 3 | -0/+150 |
| 2022-08-03 | tka: add attack-scenario unit tests, defensive checks, resolve TODOs | Tom DNetto | 3 | -57/+189 |
| 2022-08-03 | assorted: plumb tka initialization & network-lock key into tailscaled | Tom DNetto | 1 | -0/+13 |
| 2022-07-29 | tka,types/key: implement NLPrivate glue for tailnet key authority keys | Tom DNetto | 8 | -65/+64 |