Explanation
= Docker Content Trust (DCT) is a feature that allows users to verify the integrity and publisher of container images they pull or deploy from a registry server, signed on a Notary server12. DCT does not enable mutual TLS between the Docker client and server, which is a different security mechanism that ensures encrypted and authenticated communication between the client and the server3. DCT is based on digital signatures and The Update Framework (TUF) to provide trust over arbitrary collections of data1. References:
* Content trust in Docker | Docker Docs
* Docker Content Trust: What It Is and How It Secures Container Images
* Protect the Docker daemon socket | Docker Docs