The worst part is this appears to be by design...

> By default, Tailscale tries to account for domains on shared email providers (like gmail.com) where users will share a domain, but are unrelated and should not share a single tailnet.

> Since we were unaware of poczta.pl, it was treated as a company domain, which meant others with the domain ended up on your tailnet as they joined.

well, you did pay a company to manage your keys. what people really expect?

Previously submitted: https://news.ycombinator.com/item?id=44065944