Re: Using the --verify option on cpanm

--Sig_/GDa7ZiZuABh1aatV5O/unH7
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

> where it fetches the public key from?

=46rom the configured
[SKS](http://enwp.org/Key_server_%28cryptographic%29#External_links):

    $ ack ^keyserver ~/.gnupg/gpg.conf
    keyserver hkp://keys.gnupg.net
    keyserver-options auto-key-retrieve verbose no-include-revoked

It does not really matter. The servers sync their databases regularly.
The hostname keys.gnupg.net is a DNS round-robin pool.

> key server supports secured key requests over TLS?

No, that's pointless.

--Sig_/GDa7ZiZuABh1aatV5O/unH7
Content-Type: application/pgp-signature; name=signature.asc
Content-Disposition: attachment; filename=signature.asc

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
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=1ncZ
-----END PGP SIGNATURE-----

--Sig_/GDa7ZiZuABh1aatV5O/unH7--