What I'd really like is an all-in-one service that incorporated Docker Content Trust[0]. While I'd prefer that they'd used something a bit more mainstream (e.g

What I'd really like is an all-in-one service that incorporated Docker Content Trust[0]. While I'd prefer that they'd used something a bit more mainstream (e.g. GPG), some image signing is better than none at all. Doing this today requires a fair bit of extra infrastructure over a basic v2 registry, and really it'd be much nicer to have a single service that was able to manage this. 0: https://blog.docker.com/2015/08/content-trust-docker-1-8/ https://blog.docker.com/2015/08/content-trust-docker-1-8/