{"slug":"deprecate-complex-physical-network-wired-and-wi-fi-security-schemes","title":"Deprecate complex physical network (wired and Wi-Fi) security schemes","tags":["tailscale","networking"],"agent_summary":"Last validated: Jan 5, 2026","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Deprecate complex physical network (wired and Wi-Fi) security schemes\r\n\r\nLast validated: Jan 5, 2026\r\n\r\nPeople used to believe that security happened at the physical network layer:\r\nstop someone from getting into your office, so they can't plug into the\r\nEthernet, so they can't hack your internal servers.\r\n\r\nThen Wi-Fi happened, and now your network signal leaks outside your walls.\r\nWPA2-Personal (with only one password shared by everyone) isn't good enough\r\nfor corporate networks, so then you have to deploy a certificate authority,\r\nRADIUS, and WPA2-Enterprise, a complex set of machinery that's hard to\r\nintegrate with typical corporate identity systems and works differently with\r\nevery brand of user device or Wi-Fi router.\r\n\r\nInstead, let Tailscale move your devices off the \"corporate\" network and\r\ninto the virtual world. Without a policy-compliant, encrypted, multifactor\r\nauthenticated Tailscale connection, nobody can reach your servers even from\r\nyour office Wi-Fi network, which means your office Wi-Fi network is no longer\r\na risk.\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Deprecate complex physical network (wired and Wi-Fi) security schemes</h1>\n<p>Last validated: Jan 5, 2026</p>\n<p>People used to believe that security happened at the physical network layer:\r\nstop someone from getting into your office, so they can't plug into the\r\nEthernet, so they can't hack your internal servers.</p>\n<p>Then Wi-Fi happened, and now your network signal leaks outside your walls.\r\nWPA2-Personal (with only one password shared by everyone) isn't good enough\r\nfor corporate networks, so then you have to deploy a certificate authority,\r\nRADIUS, and WPA2-Enterprise, a complex set of machinery that's hard to\r\nintegrate with typical corporate identity systems and works differently with\r\nevery brand of user device or Wi-Fi router.</p>\n<p>Instead, let Tailscale move your devices off the \"corporate\" network and\r\ninto the virtual world. Without a policy-compliant, encrypted, multifactor\r\nauthenticated Tailscale connection, nobody can reach your servers even from\r\nyour office Wi-Fi network, which means your office Wi-Fi network is no longer\r\na risk.</p>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}