C02-TS: No
Rationale
The first DERP relay terminates its client transport and reads the destination node public key in FrameSendPacket. The final peer selector is therefore visible to that intermediary despite payload encryption.
Assessment method
Official documentation and pinned source inspection; no runtime test
Source context
Tailscale control plane and DERP source 566f89e0fb2aa4b2f1ebf98761e45e62aa5ef225
Outstanding qualification
This counterexample uses the selected relayed path, not direct communication. It reveals a node key, not necessarily a civil identity; TLS only hides the frame from external carrier observers.
Public sources
- https://raw.githubusercontent.com/tailscale/tailscale/566f89e0fb2aa4b2f1ebf98761e45e62aa5ef225/derp/derp.go
- https://tailscale.com/docs/concepts/control-data-planes
- https://raw.githubusercontent.com/tailscale/tailscale/566f89e0fb2aa4b2f1ebf98761e45e62aa5ef225/derp/README.md
- https://raw.githubusercontent.com/tailscale/tailscale/566f89e0fb2aa4b2f1ebf98761e45e62aa5ef225/derp/derp.go
- https://raw.githubusercontent.com/tailscale/tailscale/566f89e0fb2aa4b2f1ebf98761e45e62aa5ef225/derp/derpserver/derpserver.go
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round586.html
- round586-sources.json