<plist version="1.0">
    <dict>
        <key>ApplicationDescription</key>
        <string>Tailscale is a VPN service that makes the devices and applications you own accessible anywhere in the world, securely and effortlessly.</string>
        <key>DeveloperName</key>
        <string>Tailscale Inc.</string>
        <key>Website</key>
        <string>https://tailscale.com</string>
        <key>Connections</key>
        <array>
            <dict>
                <key>IsIncoming</key>
                <false/>
                <key>Host</key>
                <string>pkgs.tailscale.com</string>
                <key>Relevance</key>
                <string>Default</string>
                <key>Purpose</key>
                <string>Tailscale periodically looks for software updates from this server.</string>
                <key>DenyConsequences</key>
                <string>If you deny these connections, Tailscale updates won't be available for download. You'll need to keep the client updated manually.</string>
            </dict>
            <dict>
                <key>IsIncoming</key>
                <false/>
                <key>Host</key>
                <string>log.tailscale.com</string>
                <key>Relevance</key>
                <string>Default</string>
                <key>Purpose</key>
                <string>Tailscale periodically uploads diagnostic information and crash reports to provide support and monitor the quality of the service.</string>
                <key>DenyConsequences</key>
                <string>If you deny these connections, Tailscale support won't be able to assist you with any issues with the product.</string>
            </dict>
            <dict>
                <key>IsIncoming</key>
                <false/>
                <key>Host</key>
                <string>controlplane.tailscale.com</string>
                <key>Relevance</key>
                <string>Essential</string>
                <key>Purpose</key>
                <string>Tailscale connects to the coordination server to fetch details and encryption keys for the other devices in your tailnet.</string>
                <key>DenyConsequences</key>
                <string>If you deny these connections, Tailscale won't be able to connect.</string>
            </dict>
            <dict>
                <key>IsIncoming</key>
                <false/>
                <key>Host</key>
                <string>*.tailscale.com</string>
                <key>Relevance</key>
                <string>Essential</string>
                <key>Purpose</key>
                <string>Tailscale connects to relay servers operated by Tailscale to route traffic when direct connections cannot be established.</string>
                <key>DenyConsequences</key>
                <string>If you deny these connections, Tailscale won't be able to establish connections to other devices.</string>
            </dict>
            <dict>
                <key>IsIncoming</key>
                <true/>
                <key>Host</key>
                <string>local-net</string>
                <key>Relevance</key>
                <string>Essential</string>
                <key>Purpose</key>
                <string>Tailscale accepts direct connections from other devices in your LAN to improve performance.</string>
                <key>DenyConsequences</key>
                <string>If you deny these connections, other devices will connect via a relay, which will severely impact performance.</string>
            </dict>
            <dict>
                <key>IsIncoming</key>
                <false/>
                <key>Host</key>
                <string>local-net</string>
                <key>Relevance</key>
                <string>Essential</string>
                <key>Purpose</key>
                <string>Tailscale establishes encrypted tunnels with other devices in your LAN to improve performance.</string>
                <key>DenyConsequences</key>
                <string>If you deny these connections, other devices will connect via a relay, which will severely impact performance.</string>
            </dict>
            <dict>
                <key>IsIncoming</key>
                <true/>
                <key>Host</key>
                <string>0.0.0.0/0</string>
                <key>Relevance</key>
                <string>Essential</string>
                <key>Purpose</key>
                <string>Tailscale accepts direct encrypted connections from other devices in your tailnet across the Internet to improve performance.</string>
                <key>DenyConsequences</key>
                <string>If you deny these connections, other devices will connect via a relay, which will severely impact performance.</string>
            </dict>
            <dict>
                <key>IsIncoming</key>
                <false/>
                <key>Host</key>
                <string>0.0.0.0/0</string>
                <key>Relevance</key>
                <string>Essential</string>
                <key>Purpose</key>
                <string>Tailscale establishes encrypted tunnels across the Internet with other devices in your tailnet to improve performance.</string>
                <key>DenyConsequences</key>
                <string>If you deny these connections, other devices will connect via a relay, which will severely impact performance.</string>
            </dict>
            <dict>
                <key>IsIncoming</key>
                <false/>
                <key>Host</key>
                <string>*.googleusercontent.com</string>
                <key>Purpose</key>
                <string>Tailscale connects to Google servers to fetch user profile avatars when you log in using a Google account.</string>
                <key>DenyConsequences</key>
                <string>If you deny these connections, user profile avatars might not appear in the Tailscale client.</string>
            </dict>
            <dict>
                <key>IsIncoming</key>
                <false/>
                <key>Host</key>
                <string>*.githubusercontent.com</string>
                <key>Purpose</key>
                <string>Tailscale connects to GitHub servers to fetch user profile avatars when you log in using a GitHub account.</string>
                <key>DenyConsequences</key>
                <string>If you deny these connections, user profile avatars might not appear in the Tailscale client.</string>
            </dict>
        </array>
    </dict>
</plist>
