Introduction to Notary
Talkat KubeCon + CloudNativeCon North America 2019 · on Thursday, 2019-11-21· at 16:25· Room 32AB - San Diego Convention Center, Upper Level·
summary
Notary implements TUF for container images and is already used by Docker Hub, Azure Container Registry and Harbor; it separates a metadata server and an offloaded signer, typically backed by MySQL and replicated signers, and integrates with Docker Content Trust (set DOCKER_CONTENT_TRUST=1) and admission controllers like Portieris. The design prioritizes compromise resilience via threshold signatures and easy revocation, uses root targets snapshot keys for role separation, supports offline root key storage, and Notary v2 promises improved usability and key management.
AI-written summary · about
chapters (11)
- 0:00Start
- 3:20Easy?
- 7:14Enter TUF!
- 10:43TUF Design Principles
- 15:30Standardized / Used
- 16:34Impact of a compromise
- 18:13Standardization process (TAPS)
- 19:34Notary production architecture
- 20:35A look at notary's future
- 21:11Notary: Demo!
- 28:49Find out more or
related talks
32mNotary v2: Redesigning the Secure Supply Chain for Containers
36mTUF / Notary Project Intro
39mIntro: TUF / Notary
34mSecuring your Kubernetes Delivery Pipelines with Notary and TUF
30mNotary v2: Supply Chain Security for Containers
18mBeyond signatures: Using TUF and Notary to Secure Software Distribution
40mNotary v2: Deep Dive and Open Issues
41mDeep Dive: TUF / Notary