Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“That is simply not good enough; you can find such a code with two clicks on Google.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
05525772243c76b636211c4029304da4863999d871a0a7df5b0193ab0117a7b2
Signature (Ed25519, base64)
xc0uoouZA1oTzsL6CovIjFqyiGHIJ3WFdQoxQgIJSkiignSl9Z626YKoTp5PnqcY9h4HiTFGHQHCjb5/IWhECQ==
Merkle root
8552de27836d9c1d73f2670cf2bc11df6459e7443d47ace4674278484e3a6d8e
Merkle path
["0534d84c90fda0b6668168a323bab246626a69bdf417c43b4a421e614d814bdc","90b37a30fa4df32241af08f5506466a957ab5ec6867a04e77882fde9d3b7c9fc","9dc32e088fba0c2e82191b9a8ec336d00deca3fc5254afb0e728cf816c67c375","ec04d71eec0d67424aa01c2094a7ddba6e0433c0630478e8e7782c8d9742e70d","5f8f02dbcca5c14a1af147bbd4d72624dcabac00ec5de50045516ce04b09228b","59f854b4582ee8b2fd97ed6e4d51374d1f6f200ed8638ff06ec622a89c913db5","6f18d9e280a960c71117f1833bb169a1f300eebf5c5f3f7fc17ea8aa41b1c8ca","f9f1e27e94b9d3dff8d4c6654793298f0fed8fd2008ac47a7c9b35568011246f","05a0133faae5b41888fa08b9ab118800c7ee3f00b79ac5bcfc95749160affae3","7835ca71fdfea746279b7644da599f2720670e215fe623045002700f11ed5642","4f17a7ed38c98f7a470320811cda3089cdb974f325cd6f8590ff2ad504addacf","521a2de35e4b98beb07bc39254cf192902ab2b5298a659e0538f167d5630eb48","06f625e80da47a14c2d3e7027b88f7f89c63e459e05ddda58b98e60b36bc2518"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3668793196 · entry 108e9186e8c5677a8c91…
Expected log hash
f099839a063ebfd0b66050d615b9645cca5be77075ecec449f1aa0148fdcbfea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793706932685","kind":"published-quote","locale":"en","page":"brand:cewe","quote":"That is simply not good enough; you can find such a code with two clicks on Google.","rating":2,"review_date":"2026-07-30","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8552de27836d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.