Add a "Check mode" for sensitive applications

[b-]

I was just thinking that a "Check mode" would be nice for sensitive applications, the way it exists for SSH. That way if someone gained access to my unlocked laptop, they wouldn't automatically be signed into just anything.

[mostlygeek]

adding this here for my own ref:

Check mode

Optionally, connections over Tailscale SSH can require a user to re-authenticate before establishing an SSH connection. This requires the user to sign in again with their identity provider. A user will not need to re-authenticate for other connections in check mode for the next 12 hours, or a specified check period.