This is in part feedback on the SCA release candidate that ant posted, but doesn't require a respin, so I won't muddy the vote thread for this.
If I try to verify an archive in the release candidate with "gpg --verify <archivename>" it tells me it cant find the public key. I had this issue before and resolved it by lodging my key with http://pgp.mit.edu/ (see [1]) Kelvin. [1] http://mail-archives.apache.org/mod_mbox/incubator-general/200611.mbox/[EMAIL PROTECTED]