running wireguard company-wide?

running wireguard company-wide?

[Harald Dunkel]

Hi folks,

how can I bind the private key to a specific host, eg. an office
Macbook? Esp on MacOS the private key is in plain sight in the
wireguard GUI, making it easy to reuse it for other, unintended
purposes.

For private installations this might be OK, but for a company-wide
deployment this is a major headache.

Every helpful hint is highly appreciated
Harri

RE: running wireguard company-wide?

[Jonathan Aquilina]

Hi all,

Just a long time follower of this list and very curious to try wireguard when I get the chance.

On a Mac you have a keychain where you can store keys passwords certs, is there a reason why wireguard cannot take advantage of the keychain functionality?

Regards,
Jonathan

-----Original Message-----
From: WireGuard <wireguard-bounces@lists.zx2c4.com> On Behalf Of Harald Dunkel
Sent: 16 June 2021 15:30
To: wireguard@lists.zx2c4.com
Subject: running wireguard company-wide?

Hi folks,

how can I bind the private key to a specific host, eg. an office Macbook? Esp on MacOS the private key is in plain sight in the wireguard GUI, making it easy to reuse it for other, unintended purposes.

For private installations this might be OK, but for a company-wide deployment this is a major headache.

Every helpful hint is highly appreciated Harri