index.docker.io was serving an expired certificate

Re:index.docker.io was serving an expired certificate by heavenlyhash on Saturday March 21, 2015 @02:49AM (#9242045)

SSL is the wrong security mechanism to be relying on here.

If you want immutable deploys, what you actually want is a hash over the content.

When you embed a hash over the content in your deploy script, you guarantee true immutable deploys: everything will be exactly what you ask for, forever. You're not beholden to SSL for security; you're not beholden to anyone maintaining the servers to "be a good citizen". You just have guarantees.

Use a hash over your content.

[ Parent | on HN ]

Re:index.docker.io was serving an expired certificate by jsprogrammer on Saturday March 21, 2015 @02:54AM (#9242051)

I'm not sure what this has to do with, for example, being able to query the docker hub search API?

[ Parent | on HN ]

Re:index.docker.io was serving an expired certificate by heavenlyhash on Saturday March 21, 2015 @04:51AM (#9242202)

Very little.

It has everything, however, to do with all of the images served from that domain which people use to execute software on their machines.

[ Parent | on HN ]