why exporting private key without passphrase
Janusz A. Urbanowicz
alex at bofh.net.pl
Fri Jul 6 15:50:15 CEST 2007
On Wed, Jul 04, 2007 at 12:18:16PM -0300, jesus martinez wrote:
> i noticed that using GnuPG anyone who has access to
> a machina where its installed, can export any private
> key without being asked the correct passphrase.
> isnt it a security issue ? what is a computer is
> a public one ?
the keys can be copied without running gpg anyway (they are kept in a
plain file), so there is no point in protecting export process
don't keep secret keys on a public computer
JID: alex at hell.pl
od zwracania uwagi na detale są lekarze, adwokaci, programiści i zegarmistrze
More information about the Gnupg-devel