> People have always been very clear that docker is not a security boundary, at least not with its default configuration. I’ve also used it since the beginning

> People have always been very clear that docker is not a security boundary, at least not with its default configuration. I’ve also used it since the beginning and that’s some mighty strong revisionism. Docker was compared to VMs — with a tiny asterisk of fine print that it’s not actually configured to employ security features it’s built with.