Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Issuing monkeysphere subkey-to-shh-agent GPG warns me:

gpg: about to export an unprotected subkey

then it asks for the passphrase and everything works fine.

What's the meaning of "export an unprotected subkey"? What are the security issues related to this warning?

share|improve this question

migrated from Mar 23 '13 at 20:21

This question came from our site for system and network administrators.

up vote 2 down vote accepted

Looks like it's an issue with monkeysphere and ASCII armoring in gpg:

Chatted with dkg on irc, turns out monkeysphere just doesn't like "armor" in one's ~/.gnupg/gpg.conf - dkg seemed to think this was a bug that wouldn't be that hard to fix.

ASCII Armoring is just a term for binary to text encoding. Wikipedia article on binary to text encoding

GPG is just complaining that the exported key lacks this encoding, which the comment from the mailing list backs up if the author isn't using it elsewhere.

share|improve this answer
I think this explanation is wrong. That thread is not about the "gpg: about to export an unprotected subkey" warning, but about the "This is not an OpenPGP packet" error (mentionned in the title). – YoungFrog Oct 17 '15 at 18:38

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.