Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Just trying to paste an email address or write a new message is a nightmare.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
08733b9d8f68c16feedbe2742444beec6418fdaefaf7fc4b29e840dd63f7c6f3
Signature (Ed25519, base64)
GOi/qVCwqJA/dqBdomJtueNvGYtFLazb+QlLAqw6Q8mYz+Ci2pUAA82DxyU+1IErBSEyMNDlDKsZqmKjrx33BA==
Merkle root
1e61eced4e661484bfe5b6f5b2703dd6b75b86bad22e189b3c366c9d28063790
Merkle path
["0871fb58391049a4a58c837ce92447fd398ebd20ada69f8d8656b3412c66f4c9","ee8cf795a9623e02ee976df07e1c4edf5dc784d2206a4ce965c3785e4997b320","25fd07ccdcf12c4904b61ed4d0c90eae95b0e63caed38ca16aa26a973dc7700c","e857ae69f1a449c4e4ba95753ba7de61978581997067954835850ff62b48db47","5257d328fbfccb2abc643792ef5dc63862a49c99ec7d44cd0d6bc5f7b89104f2","0b9189b6b1ff4ab8e1285ba961b8c4314f95d3411059a6468f3f60890ac8cb83","9a8365c1a3476c9df6ea55bee12b84a7ed626d54a6d9002c0824b30ed50c5a9c","8e01cdd3f3f8fda6d630fa662b63357ee2a3b61868ef6f60d7af6f7207a81ede","23b6ecfbc2d29292e194bbfcabaee1540bbceb9ba1d75f0a3a968f65daeaa935","59a35b25874067aef025b294b435fe423bc4cb061dd5bd6eb60691ccc96543d5","e0326e92aed2f4cc2b9adaee2a3ab654df83596341ce84c8e7783967b90e11f9","371290f68d43e2599f9d4bca2e3c746a8a26675cce0b2600398e73cd3967be3d","54ee0bc4a4c2b45767c35fcfd5bb7920c8fd190b1fed30964e0a25b96be9cb33","bf1bcad2903dfb9abf4b8f024fe3c81bcae7bbc24b20f79dfeb4175ee7010ee6","c6abe42054f9c95975c60fb1ff77d61160b6c8ce936c4b4f55df686a320e02d9"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684045120 · entry 108e9186e8c5677a1eab…
Expected log hash
991cca42189213cf0723c834ba6ddec4f1bf618d506ffae30f68dbb14dfac402 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788333005708","kind":"published-quote","locale":"en","page":"theme:infomaniak/ordering/en","quote":"Just trying to paste an email address or write a new message is a nightmare.","rating":1,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1e61eced4e66…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.