Yes Erik,
SourceForge did not do anything. But what is even more "funny"
is that changing keys over web interface does not change
~/.ssh/authorized_keys. So even if you are aware of
this problem and change keys in interface which should do it, it
does not work. I just realized this today when I read your post and
wanted to check whether this file is really world readable...