If you're coming to ApacheCon, see http://wiki.apache.org/apachecon/PgpKeySigning and join the "party" - this is especially important for people who are cutting releases.
Sander has additional background info at http://www.temme.net/sander/2007/04/23/apachecon-eu-2007-keysigning/ -Bertrand
