Suggestions: Use an ascii sig (gpg -ba) Put the sig files on the website directly, they're too small to justify putting in the Files section. Put your key id on the download page - that way people can more easily fetch it from the keyservers.