Docker Image Insecurity
I wish the author had not omitted this crucial paragraph in the announcement he quotes:<p><pre><code>    Note that this feature is still work in progress:
    for now, if an official image is corrupted or tampered with,
    Docker will issue a warning but will not prevent it from
    running. And non-official images are not verified either.
    This will change in future versions as we harden the code
    and iron out the inevitable usability quirks. Until then,
    please don’t rely on this feature for serious security, just yet.
</code></pre>
So, we've made it pretty clear from the start that we're <i>working</i> on ways to make image distribution more secure, but are not <i>claiming</i> that it's more secure yet.