Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“they activate permissions, especially for contacts”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0a26f303471a00c2ef2f39218a599f60b126ff67b4b15e78cf2ba23375e2558c
Signature (Ed25519, base64)
6p3HNmGUebUEuePYxo9KpFWeXLNxP2Fs+VB/R0Y7K2piHT6me+y5PeUiBBkbiQ2/+O50KRe3i47/ZIkJNKr5Dg==
Merkle root
9f3bf01edb9d597e26c01d8c9281f8ebd9083c8348fa27bf99e2d3d27a8b9c8c
Merkle path
["0a1b7f8b2a4745033fc0e4cfc8ecee28b5c99bff67e734343ddd204a2e58e5fc","2bda25e3fb1b8717867e1c2d68de0703ec0141c2fadc5b9f66f098c1189ee6e4","272db70b0008fd078c03f252f34d6da57530ecc3475c47a50ccb9c2decb396dc","9f78ce86993b85bab0ac29afc6fc5da0f58fc84750f52292cf5c07f3193756d6","188255f663b147c358e50329c4d7b20848d831901291ce88b8b75cf18d2b0c6f","be47af7105a420d6c1587d5fe8264941ca1e2cd7414e3a2f99643ce69de9a96e","f424a4859235ec65674ec83e756c3545e0a5a2bcd67011871ffd69d12e8fb380","2e39a6ee42e8d53c3917105773830d81b7baef3f7b43340c620bc7b36e6d4c96","e91cb716916741d03e8e6d615900297bdb620e5690ac90ae02dd04a66fe0dcaf","388b59bb542c5d1291ec5d697d7ef6304cd13cfcd1f0caf6d7e383bb57159262","6d0b678821033ea2f2a00b8fb5d6ada599be1308b9e29bcdc09d5578b3ab5cb2","9311e5bb0d47db2583c7dbd405f5122ce8db6d1193bd1174bd29dda5341d2dab","ccd3f6a502c459e3bafdbecf5a4380782b0a6666d918776f3c595a5cb05f3e9d"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3666748782 · entry 108e9186e8c5677aefa5…
Expected log hash
5b49e28274358602b99f52ab121ad302428fe63b23ca19ecf9d795208846c99b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793702050700","kind":"published-quote","locale":"de","page":"brand:proton","quote":"they activate permissions, especially for contacts","rating":3,"review_date":"2026-08-06","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id979659905?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9f3bf01edb9d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.