| Subject: | Importing PAUSE public key into your GnuPG keychain... |
Consider this when installing the CPAN bundle:
Importing PAUSE public key into your GnuPG keychain... gpg: WARNING:
using insecure memory!
gpg: please see http://www.gnupg.org/faq.html for more information
done!
(You may wish to trust it locally with 'gpg --lsign-key 450F89EC')
Checking if your kit is complete...
Looks good
Writing Makefile for CPAN
SUGGESTION
Not all people use one monolithing GPG keyring, so any automatic
"imports" beyond user control is bad. Please don't automatically import
any keys, but sugest the KEYID or present a gpg key fetch command to use.
Here is an example of the typical use of multiple keyrings to separate
keys according to their use:
$ cat ~/.gnupg/gpg.conf
keyring pubring-remailer.pgp
keyring pubring-sw-development.pgp
In this case the CPAN key would have been put into
pubring-sw-development.pgp, but the CPAN installer script couldn't have
known that.