F21-TS: Yes
Rationale
For traffic received through the selected Tailscale interface, a receiving application can query LocalAPI WhoIs with the remote address to obtain the authenticated node and its user or tags. No extra remote application-authentication exchange is required.
Assessment method
Official documentation and pinned source/declaration review; no runtime test
Source context
Tailscale identity documentation, LocalAPI and PATENTS grant
Outstanding qualification
Requires LocalAPI read permission and binding the query to the actual received Tailscale connection. Do not trust an arbitrary user-supplied IP. No subnet or exit-node substitution is selected; this is node identity, not proof of a civil identity or a durable historical attestation.
Public sources
- https://tailscale.com/docs/concepts/tailscale-identity
- https://tailscale.com/docs/concepts/tailscale-identity
- https://raw.githubusercontent.com/tailscale/tailscale/566f89e0fb2aa4b2f1ebf98761e45e62aa5ef225/PATENTS
- https://raw.githubusercontent.com/tailscale/tailscale/566f89e0fb2aa4b2f1ebf98761e45e62aa5ef225/LICENSE
- https://raw.githubusercontent.com/tailscale/tailscale/566f89e0fb2aa4b2f1ebf98761e45e62aa5ef225/ipn/localapi/localapi.go
- https://tailscale.com/docs/install/linux
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round588.html
- round588-sources.json