MetaMask / MetaMask/metamask-mobile

Do not require HTTPS on Tailscale VPN subnet 100.64.0.0/10

Open
#4,842 3 comments 0 reactions 0 assignees View on GitHub
devrel feature-request
Dominant language
TypeScript
Stars
3k
Forks
1.7k
Avg merge
1d 14h
Merged PRs (30d)
669

Description

**Describe the bug**
When trying to add my own RPC node that I connect to via Wireguard (using Tailscale) on HTTP, MetaMask mobile refuses to do so and wrongly requires HTTPS.

**Screenshots**
![image](https://user-images.githubusercontent.com/609945/184221853-0c60f695-cbe9-47d4-83f0-6a75126b1580.png)

**To Reproduce**
1. Add a network
2. Set your own RPC node URL

**Expected behavior**
Being able to add the network.
MetaMask should not require HTTPS in the `100.64.0.0/10` subnet as it’s a private Tailscale VPN the same way it doesn’t require HTTPS on `192.168.0.0/16`.
More details on https://tailscale.com/kb/1015/100.x-addresses/

**Smartphone (please complete the following information):**
- Device: Pixel 6 Pro
- OS: Android 12
- App Version: 5.5.0 (939)

-------------------------------------------------------------
_to be added after bug submission by internal support / PM_
**Severity**

- How critical is the impact of this bug on a user?
- Add stats if available on % of customers impacted
- Is this visible to all users?
- Is this tech debt?

Contributor guide

Open the contributing guide

Research direction

Start with the add-network flow and trace the RPC URL HTTPS validation, comparing its existing 192.168.0.0/16 exception with 100.64.0.0/10. Done means a Tailscale subnet HTTP URL can be added while HTTPS remains required elsewhere; verify the reproduction on Android.

Written by the indexing model from the issue text.

Assessment

Tech stack
react-native, typescript
Domain
mobile, networking
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.