I have now added code so that new ctm files on the ftp sites also contain detached signatures made with gpg. These can be verified with the usual key at http://lists.freebsd.org/mailman/listinfo/ctm-cvs-cur