Categories: CloudVirtualisation

Docker Buffs Container Security With Yubico Partnership

Container giant Docker has partnered with an online identity protection provider to beef up security of containers.

The deal with Yubico was announced this morning at DockerCon 2015, held in Barcelona, and is related to Yubico’s Yubikey touch-to-sign feature.

The Yubikey 4 is Yubico’s new flagship product, and features a revamped hardware and software stack, allowing Docker to integrate seamlessly provide the best security for Docker image signing.

Simple touch

“Our collaboration with Yubico adds to our growing portfolio of container security capabilities, enabling developers to sign their code with a simple touch,” said Scott Johnston, SVP of Product Management, Docker.

“Our ability to ensure security while maintaining a consistent developer experience is paramount, and this solution helps us and our users achieve both.”

California-based Yubico said that the capability that comes with the Yubikey technology is the first hardware signing key to provide content integrity for containers that are part of Docker Content Trust, and it enables secure software lifecycle development for Docker developers, sysadmins, and third-party ISVs.

“We think it’s slick, and cool, and the future of hardware-backed keys,” said Yubico.

“This is an important milestone for Yubico and our community as we move beyond authentication to address another area in which the YubiKey shines, using our hardware to perform cryptographic sign operations,” said Jerrod Chong, VP, Solutions Engineering, Yubico.

“Having root keys stored in the secure element of the YubiKey means attackers cannot duplicate the keys and forge sign operations; insecure storage of keys in software modules is often the root cause for many of the vulnerabilities found in software packages.”

Technical information on how YubiKey 4 can be implemented can be found on Docker’s blog post here.

Take our data breaches of 2015 quiz here!

Ben Sullivan

Ben covers web and technology giants such as Google, Amazon, and Microsoft and their impact on the cloud computing industry, whilst also writing about data centre players and their increasing importance in Europe. He also covers future technologies such as drones, aerospace, science, and the effect of technology on the environment.

Recent Posts

UK’s CMA Readies Cloud Sector “Behavioural” Remedies – Report

Targetting AWS, Microsoft? British competition regulator soon to announce “behavioural” remedies for cloud sector

11 hours ago

Former Policy Boss At X Nick Pickles, Joins Sam Altman Venture

Move to Elon Musk rival. Former senior executive at X joins Sam Altman's venture formerly…

13 hours ago

Bitcoin Rises Above $96,000 Amid Trump Optimism

Bitcoin price rises towards $100,000, amid investor optimism of friendlier US regulatory landscape under Donald…

15 hours ago

FTX Co-Founder Gary Wang Spared Prison

Judge Kaplan praises former FTX CTO Gary Wang for his co-operation against Sam Bankman-Fried during…

16 hours ago