What should they be doing?

They are using digital signatures(Chong Yidong's). The following files are both available from the same places as the tarballs:

emacs-23.2.tar.gz.sig emacs-23.2.tar.bz2.sig