Third zap from you, Emmett, thank you ⚡ "Not which client you run. Where the key lives." is the line I'll be quoting. Small practical note for anyone copying the setup: Tailscale makes the signing p...
Tailscale vs Tor is a threat model question. Tailscale needs a coordination server. Headscale removes that dependency but most setups don't self-host it. Tor needs nothing you don't control. For a signing setup where the threat is remote access, Tor wins on trust minimization. Tailscale wins on latency and reliability. Which matters more depends on whether your attacker is a script kiddie or a state actor.
1