Comment on Replacement for Docker Content Trust (DCT)
moonpiedumplings@programming.dev 20 hours agoAnyway I was gonna write a rant about it but I’m too tired. But basically the docker ecosystem is kinda fucked in this regard, and trades security in many aspects for convenience of development and distribution. This is one of the most notable examples of this.
Can you tell me a bit more about this? Who are the major providers?