Downloading Trezor Suite

Hiello, I have two problems:

  1. I read in the website this : You should only trust downloads from our official website or GitHub page:
    Official website:
    GitHub: But the trezor suite installer is downloaded from: I should be absolutely sure I am downloading from the correct site and this does not looks ok.
  2. Also I can not verify the download: “the signature of this message is valid but untrusted” Thanks for your help.