Docker hub and encrypted traffic

Docker Hub
1

When I run a docker {push,pull,login}, is the traffic encrypted to docker hub?

I suspect that the login process and the push/pull traffic for private
images is encrypted, but I have not been able to find anything that states
so explicitly.

Of course, the traffic to/from the website is encrypted using HTTPS[1].
But is that also true of the docker commands for docker hub, i.e. login,
push, pull[2]?

Thanks in advance for pointers in the right direction.

[1] https://hub.docker.com/
[2] https://docs.docker.com/docker-hub/overview/

Regards,

  • Robert
2

Docker enforces TLS encryption for all push/pull operations. The official registry is only available over TLS.

The images themselves, however, are stored in S3 unencrypted. It is only transport that is encrypted.