The SHA1SUM files in the Fedora 8 DVD torrents that I downloaded aren't PGP signed. Fortunately the versions provided by FTP are signed (at least on the first mirror I looked at). So for those who want to verify the signature, like I do, you can download the torrent and then just fetch the SHA1SUM file by FTP. No, I don't think I'm going to download another 7.6 GB just to check before I post this if perchance the torrents have been corrected. Björn Persson