search

trezor / trezord-go

:smiling_imp: Trezor Communication Daemon (written in Go)
GNU Lesser General Public License v3.0
244 stars 146 forks source link

Trezor Bridge or Trezor Suite, GPG Verification #230

Closed Pitocoin closed 3 years ago

Pitocoin commented 3 years ago

I'd like the Trezor support to official provide SHA256 for the exe files of both Trezor Bridge and Trezor Suite. I'm not a IT professional, but according to my recent studies about it, it is strongly recommended to check if SHA256 of the executable files matches what is provided by the official site, and as far as I know I have not founded this information at trezor.io.

Additionally at trezor-bridge-2.0.27-win32-install file I could find Pavol Rusnak signature but at Trezor-Suite-21.4.1-win file it doesn't.

Could you help me out? I'm stuck on that GPG verification. I want to have 100% sure I can download either Trezor Bridge or Trezor Suite and finally start using my product.

prusnak commented 3 years ago

Use Trezor Suite downloaded from https://suite.trezor.io - the signature and the link to the signing key is located under the download button. Don't install trezor-bridge separately as it is bundled within the Suite installer.

The Suite GPG signature signs the whole binary, so you don't need to compare hash of the file.

Pitocoin commented 3 years ago

Prusnak, I did as you mentioned but it didn't work. After downloaded Trezor Suite did recognize my trezor, it asked me to install firmware, I did it but afterwards Trezor Suite kept asking me to connect my Trezor on the USB. I connected but Trezor Suite didn't recognize anymore... The Trezor itself turn on but asks me to access trezor.io. When I do it the website claims that I don't have Trezor Bridge. Considering that you told me not to download both Trezor Suite and Trezor Bridge what should I do?

prusnak commented 3 years ago

Contact our support at http://trezor.io/support/ - they will troubleshoot the issue