Synechist and XC team, please, for the love of god, do not push any more releases without a PGP key signing off on them from atcsecure, as well as corresponding checksums. This is a community of generally tech-savvy individuals, and that kind of release scheme is never going to pass muster for people really into the technology.
Who thought it was a good idea to push an executable file for the big launch, on an obscure IP address? (well, obscure to anyone randomly looking -- although it appears to be the old web server for xc official)