We've made some improvements to signature verification logic since the time that news article was published (2013). You can find information on GPG signature files on the following URL:
Also, note that security news updates now include a link to the PGP-signed message. For example, here's the most recent security news article we published: