Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Push-Benachrichtigungen sind ineffektiv und/oder ineffizient”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2582597535

Proof data

Record hash (SHA-256)

0506135785bc63a3145cfd9d6d290b23d1c94acbb926ce5ae22870d1cedad84f

Signature (Ed25519, base64)

ORMmjdfVRnr20O2iMfq2eCDVdXcLJzSG2za5cFDo3UAG9R5vQbl3b2HRTvjCQKPFihhkGUy3vfLKVKmzbTjeAw==

Merkle root

568de27ef784d24fced1ff6a77db7dd17bf4275bd5784f7795efbde800264945

Merkle path

["05061bf1fca06c7f274e99c1a283d2c774b1314665f9c5f15d647245b7013af4","767235554f123b9e8ed4cd6001fcec6bb570039ff0cfdcf8190dd4c015ade763","cb213a9970cde08dd908e033cc4f8c38328eb3ea65b1a248aac230088c535439","8d7fa753e27bd22dc9382a0a5af45804ee9f1f4c6e78a71fefb3ee3b8f3ee65c","be23049241bec00ef5a4dcf336142da907388db1c2a69b9a0378522f130251f7","e0bbf7bedc0232c0a4fed0e52dfc1418c88052f8d29f5081fe6ae2f11f5e73de","812dd721fecf37d7f5285f02aa843daf5629b2973c6cfa47908aaa60a6c053b3","52ad58ebca1d0a450a027b9b0ca648f9c0ba9679a61c787985495303577a1de2","73c2f0461d69a7e2a6febd20e3fdd127a2be817cd97163e8d524661cfff121b6","07bcda6d3a2168b8375cd7dd6d13391de44dbf752494117fa04f83b01e73eb61","901306f7c89d1458dace38a44733df0079e9f6bcd2d43da3c0160df51eac2c33","e0a30bae2c840156322dae52a02b08e3566a5cd586b033b2074977fe1c676705","b00deb9332470bdcb2bedfb8410150cfab1cc2f7a3ba959be220a4ee71e29732","3940a42145b26dbcc3a80df28cfd69a39fb071ca190610add4dbece01cccc9c7","b986cf6ce32ac8a848b3f8f187759eaad7c0ad1b455850f1924427e953c31abe"]

Anchored

2026-08-25

Public log entry

search.sigstore.dev, log index 2582597535 · entry 108e9186e8c5677a8508…

Expected log hash

20488e7687dc1a73ce99efebf3d47aaaffeefc76737db7dc492f239bf4ef26dc The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787625364142","kind":"published-quote","locale":"de","page":"brand:infomaniak","quote":"Push-Benachrichtigungen sind ineffektiv und/oder ineffizient","rating":1,"review_date":"2025-03-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (568de27ef784…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.