Scaling Systems of Trust for Software | Dan Lorenc

The Steps We Missed Between CD-ROMs, and our Modern K8s Distributed World The World Wide Web, with its billions of users, traversing billions of domains, is of humankind's miraculous feats--a durable model for scaling trust across the most massively distributed system imaginable. So why is it that software--which predated the Internet by decades, with major overlap of many of the very same players from industry, government and academia--suffers such deep struggles in scaling trust? Why is it that despite all the miracles that Open Source has performed in the hands of the world's millions of developers, the security of these software artifacts has been such a variable? At Kubernetes Community Days UK, Chainguard CEO and co-founder Dan Lorenc (co-creator of Sigstore and SLSA) will trace the origins of software security--from the early days of disc installations, to modern Helm installs--and highlight the specific reasons why we find ourselves where we are today, with the provenance of software artifacts such a grave concern that it has become of the of the most expensive problems to solve in the tech industry, and one of the highest priority national security concerns of the world's largest economies. In his talk, Dan will draw correlations between systems of trust on the Internet, compared to systems of trust in software consumption, and the innovation that is being built on top of Kubernetes to bring the same degree of durable trust to software artifacts, that exists on the World Wide Web today.