* Nico Schottelius [18/10/2024 20:39] :
>
>                                  In the best case scenario you get one
> hit with a lot of favorites/stars/whatever and an indication that the
> image is official. That means as a user it is trustworthy and you can
> run your workload with it.

The fact that CVE-2019-5021 exists suggests this is less true than
you seem to think it is.

> Actually in the last two cases the only thing you can effectively do is
> build your own and maybe publish the same and join the untrustworthy
> image list. This is basically what happens if we add
> yet-another-unofficial image out there.

I'm cool with this (not that my opinion matters).

Emmanuel
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to