Hacker News: emmanuelkimaswahttps://news.ycombinator.com/user?id=emmanuelkimaswaHacker News RSShttps://hnrss.org/hnrss v2.1.1Sun, 21 Jun 2026 12:05:57 +0000<![CDATA[New comment by emmanuelkimaswa in "Tessera – a consent-gated tunnel that's blind to your traffic"]]>Tessera is the ten-minute version of remote access: let a teammate reach a service on your machine for one debugging session, then leave nothing behind. No VPN, no static credential, no port left open.

It's consent-gated. The tunnel doesn't exist until you type "y" at your terminal, and the coordinator in the middle is a dumb pipe. A second, end-to-end TLS handshake runs between the two ends, and the CA's private key never leaves the host, so the broker can't impersonate either side or read the payload. Every approval and denial lands in an append-only audit log.

It's pre-1.0 with no independent security review yet, so I wouldn't guard anything sensitive with it. Happy to dig into the design in the comments, especially the trust model and the metadata it does still leak.

]]>Wed, 10 Jun 2026 12:59:07 +0000https://news.ycombinator.com/item?id=48475643emmanuelkimaswahttps://news.ycombinator.com/item?id=48475643https://news.ycombinator.com/item?id=48475643<![CDATA[Tessera – a consent-gated tunnel that's blind to your traffic]]>Article URL: https://github.com/emmayusufu/tessera

Comments URL: https://news.ycombinator.com/item?id=48475642

Points: 23

# Comments: 2

]]>Wed, 10 Jun 2026 12:59:07 +0000https://github.com/emmayusufu/tesseraemmanuelkimaswahttps://news.ycombinator.com/item?id=48475642https://news.ycombinator.com/item?id=48475642