Notary
An open source service and client for signing content and verifying signatures, used by Docker Content Trust.
In more detail
Each repository had an offline root key, a targets key and delegation keys for signers, while the server held the timestamp key. Signatures applied to tags, not to whole repositories.
Related terms
- Docker Content Trust — A Docker client feature that signed image tags on push and refused unsigned tags on pull, built on Notary.
Taught in
- Four Questions From The Auditor: Swarm Security, Autolock And Content Trust — Docker Certified Associate (DCA) Exam Prep