If you're coming to ApacheCon, see http://wiki.apache.org/apachecon/PgpKeySigning and join the "party"!
This is especially important for people who are cutting releases, but everybody's welcome to join and help grow the ASF's web of trust. Sander has additional background info at http://www.temme.net/sander/2007/04/23/apachecon-eu-2007-keysigning/ -Bertrand