News for hackers. Stuff that matters.

A comment on Tailscale Kubernetes Operator. Parent comment

Re:Tailscale Kubernetes Operator by samcat116 on Friday September 22, 2023 @11:08AM (#37613058)
You could say this about any service serving software artifacts?
[ Parent | on HN ]
Re:Tailscale Kubernetes Operator by sneak on Friday September 22, 2023 @11:51AM (#37613597)
Unsigned ones, yes.
[ Parent | on HN ]
Re:Tailscale Kubernetes Operator by pkage on Friday September 22, 2023 @12:14PM (#37613901)
That just moves the trust requirement up the chain, and assumes that the image wasn’t compromised pre-signing (either intentionally or unintentionally)
[ Parent | on HN ]
Re:Tailscale Kubernetes Operator by jabradoodle on Saturday September 23, 2023 @09:35AM (#37623081)
It doesn't, it removes/reduces one step, and leaves another one that is there regardless.
[ Parent | on HN ]