Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They should find a way to create exclusions for certain traffic or apps to avoid this.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
18bf251c3621a315f16067ef5e8b5c7191bcbf9bebbf4751ad2cce9deeace551
Signature (Ed25519, base64)
ON7CzFNBUieNlxUbimRQ3ZI+Fw+eowaWoqqn6dbAjiFMqjxbW5i1ju+a3/AU7vWQf6kTG0GAzQK9m868Is0jCA==
Merkle root
dae11b7f399fa27d7e91aa4463415971ac3f4413815a3c608e4b798805e78c60
Merkle path
["18c40c104b00dca94dc7ba602419e03eca96186be76d356f9bae94758b35a597","6962d80b306f0ce8abe361c711c533ef7d9905c0c9de078b8a7b4e9323344979","2d14498d332ede9b16453890d51102b5a04140f32a1b65d39ac125bcda0f0e92","bcce23adc7b3ba9e181785d648e32957f4028143e86f6b95014eee0498a1113c","5457a7ec32d2f86d694c217f5c75c92483455a1a0847e4169882e60fb1d9d07a","81203d51734c7b22c471896bcd0ee957d97ba5f2933aaecddda841237d406a30","614b844d078e867ad4163ca9e1bad30361a67967469f162717befe961d699e02","c375ae741fe05cd2836cdcedc4794dfef6592b2369713d1d82642415b18c97f5","f29dbdc0a770114705106a77ce2f7032a238d991e7327d2ec648dc27d9875e72","4992c214b96245475d52b0b52bf4273fa4b229697db8c2635e5c92b3420da42c","efef525a0b969ad7a97adcca114fe0da3a571380499ff29a7360ee2f6421799c","0716d20b2d336af648f125e1c2c654fd2223c3dde403611772680fb1b6a17314","14af96598cf9d6cb016b0fed730fb6c3e41450ab1c3ebbb7f845ad928e8a42fb","29fee1ee29171f2526142193c918f4d151680a806133c34179179c2fe722d806","6771b856bc54b9b41031b35ff7640ad54c5be8f800e1967d73d242437a9508b8"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3161668256 · entry 108e9186e8c5677a744e…
Expected log hash
dbaeb9745833827bd692133822ce98bad4dbbf6d52d00fcfdadfb4c533d214a6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791537031439","kind":"published-quote","locale":"en","page":"brand:nordvpn","quote":"They should find a way to create exclusions for certain traffic or apps to avoid this.","rating":3,"review_date":"2026-05-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.nordvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dae11b7f399f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.