Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Issuing monkeysphere subkey-to-shh-agent GPG warns me:

gpg: about to export an unprotected subkey

then it asks for the passphrase and everything works fine.

What's the meaning of "export an unprotected subkey"? What are the security issues related to this warning?

share|improve this question

migrated from serverfault.com Mar 23 '13 at 20:21

This question came from our site for professional system and network administrators.

1 Answer 1

up vote 2 down vote accepted

Looks like it's an issue with monkeysphere and ASCII armoring in gpg:

http://permalink.gmane.org/gmane.comp.security.monkeysphere/401

Chatted with dkg on irc, turns out monkeysphere just doesn't like "armor" in one's ~/.gnupg/gpg.conf - dkg seemed to think this was a bug that wouldn't be that hard to fix.

ASCII Armoring is just a term for binary to text encoding. Wikipedia article on binary to text encoding

GPG is just complaining that the exported key lacks this encoding, which the comment from the mailing list backs up if the author isn't using it elsewhere.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.