megachangelog
Improvement1.82.0

Tailscale v1.82.0

Tailscale v1.82.0 introduces certificate pinning for DERP self-signed certificates, improves NAT traversal fallback routing, and fixes multiple stability issues including captive portal detection, port mapping, and platform-specific bugs on macOS and iOS. Go is updated to 1.24.1.

All platforms
  • New: DERP functionality within the client supports certificate pinning for self-signed IP address certificates for those unable to use Let's Encrypt or WebPKI certificates.
  • Changed: Go is updated to version 1.24.1
  • Changed: NAT traversal code uses the DERP connection that a packet arrived on as an ultimate fallback route if no other information is available, in the event of a slow or misbehaving server.
  • Fixed: Captive portal detection reliability is improved on some in-flight Wi-Fi networks, including British Airways and WestJet.
  • Fixed: Port mapping success rate is improved by retrying in additional error cases.
  • Fixed: Web interface setting changes occur as expected and without error.
macOS
  • Changed: The .pkg installer size is decreased by 35%.
  • Fixed: Memory leak issue related to shortcuts is resolved.
  • Fixed: MagicDNS intermittent configuration failures no longer occur when waking from sleep.
  • Fixed: Seamless key renewals occur as expected, ensuring the client remains connected.
iOS
  • Fixed: Memory leak issue related to shortcuts is resolved.
  • Fixed: MagicDNS intermittent configuration failures no longer occur when waking from sleep.
Android

Note: The Android client release for v1.82.0 was delayed and moved into the v1.82.1 client release instead.

App connectors
derpconnectivitystabilitymacosios

Source: original entry ↗