parasyte

Tailscale is most similar to ZeroTier, in that it's a mesh VPN with a control plane to handle key distribution. It's not a virtual ethernet or similar network, so it doesn't do broadcast or multicast traffic like ZeroTier. It does use WireGuard under the hood, and besides the control plane for Wireguard key distribution, you can set ACLs to restrict which mesh participants can connect to which endpoints (on which ports or services), and it can leverage its authentication for some handy tricks like SSH key management.

Most of the neat tricks like funnel, serve, SSH, etc are off by default and you need to specifically allow them for hosts to use them.

you're not a moderate, you put words in others mouths to justify your own extremist beliefs. own it.

CAA records were never intended to be used by clients (Relying Parties), the RFC specifically prohibits them from using the CAA record to determine if the issuer was allowed to have issued the cert.

I infer from the wording around there and elsewhere in the RFC that this is mostly because someone could switch issuers but still serve valid certs from the prior issuer, and there's no way an RP would have a historical record of which CAA values were in effect when to be able to determine if the issuance was valid or not.

i personally have used it * to provide access to my home network, as though i am on the home network, while outside of said network * to connect several locations to the same business network

the first lets me provide locally hosted services without exposing them to the internet, by allowing members of the VPN ("tailnet" in their parlance) to connect to those services

the second was very handy to move a few users from a company in the process of shutting down to their homes, so they could continue to work like they had in the company network once the actual internal company network was shut down.

This isn't due to tailscale not supporting or working with netcat; you can nc to an address on your tailnet just fine.

This is using the infrastructure tailscale set up for a different purpose. Rather than requiring a tailnet or even an account anywhere, you can tailcat between any two endpoint. Tailscale is there because it runs the DERP relays which get the client's pubkey to the server, brokers the connection, and coordinates holepunching.