Ellie Huxtableok how tf does this work
i send SSH_USERAUTH_NONE to a machine using tailscale ssh and libssh2 chatters about and then just opens my browser???
feels magic but HOW
that's actually really neat. userauth_none will normally respond with failure + list all the methods, but tailscale just uses that to implement their own fancy auth instead
Adda@ellie Wait, does that mean that Tailscale figures out that one sends precisely SSH_USERAUTH_NONE (which would normally fail because you send no auth), and interprets it as an instruction for them to now do their magic and connect you?
@Adda yes! from what i can tell anyway
@Adda tbf it's arguably accurate, you're not providing auth + relying on the protocol to do that for you
@ellie Actually, you are right. It makes sense since the other SSH auth functions expect specific auth approaches which do not allow for "custom auth solution", as is needed in this case. Reading about it now, it is exactly the purpose of `SSH_USERAUTH_NONE`. TIL ❤️