there are no .sig files here: http://www.netgull.com/gcc/releases/gcc-4.8.2/
i assumed that gcc didn't use gpg for releases, and became very discouraged about the idea of building gcc from source. then i noticed that there are .sig files at ftp.gnu.org and became very happy. :) i've only checked the above mirrors, but it would be nice if that mirror, and others, (automatically?) distributed .sig files too. thanks, -andrew