C06-TS: No
Rationale
A transit observer on the selected direct path sees the outer source and destination locators and UDP flow identifiers linking the communicating endpoint attachments. Encryption conceals inner addresses, not that direct-path association.
Assessment method
Primary documentation and explicit architectural inference; no runtime test
Source context
Tailscale service model and WireGuard protocol
Outstanding qualification
No claim that outer addresses reveal civil identities or uniquely identify a device behind shared NAT. No anonymity wrapper is selected.
Public sources
- https://tailscale.com/docs/reference/connection-types
- https://tailscale.com/docs/features/access-control
- https://tailscale.com/docs/concepts/tailscale-ip-addresses
- https://tailscale.com/docs/concepts/control-data-planes
- https://tailscale.com/docs/reference/connection-types
- https://tailscale.com/docs/features/site-to-site
- https://www.wireguard.com/protocol/
- https://www.wireguard.com/
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round585.html
- round585-sources.json