Provide link to GPG signature on download page.
As now, in the section "Binary packages" of GHC download page, you can read:
SHA-256 hashes for all the binary distributions are available here.
with a link to the hashes' file. It would be great to provide a link to the signature of this file too, i.e.:
SHA-256 hashes for all the binary distributions are available here[link] (GPG signature available here[link], signed with key <keyID>).
Hashes and Signatures are advertised in the mailing list release post, but I guess it would be nice for clarity's sake having them on the download page too.