Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“making you log in with a password which it conveniently disables from your saved password vault”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0af2c2d63485b5391fa3f03c297c74e7c252f0393e143f68489410018a055b7d
Signature (Ed25519, base64)
8iL4uWz4dcojPrErRN9yvYvkvSHxo35a2wj/VtyeOlRr/PcRtKZ7YdybTFd8elyggaxo/NzhJO1dXSzA9SxyCw==
Merkle root
9382c1a596eefa9080976eb096c7ed03e3fe40171de1af5069e398372fbaee91
Merkle path
["0af66fbba450b6be46cc661f7c2ecb2699c27a933ea49bd864ac45a7b91bb9b1","0724e90bae54bca3b5bf67594ab144ad63283ea9c1c0ea53a146a8cd642bb4b0","fbe69a41984d760c23aa1002fcb5b6f54162c99bea8860ca4261dfbe89d911ec","a15893ec76f3698162f893b866109f769f2344e710ea1e9f74ae6521a1d90f68","aac67c28c8e3e49bb92a4a4e272519788410d6b63177071ac14738a7f2d49484","8b7aa51e22bf6b76b78d71e1a874ae09af97c993f19620423fe7e8bc0b0e4e8a","be2ceac81c71d5f413cc5186c617e8fc4c10f747c836c49f9f46ffc467ba6816","299be4a12ead5b54107de723b9d5266728723c4d39db54f587016c4f32867598","fc1e687c5257f869fec948a35fd5d3c5961b66c42d1c0bcd6f9bdf44132d500f","acaab235debbe7fefe89ef593aa9eaa915bf1ef1dbbbc0ae5e16d9190a360e0c","f70f3530cf9a799b6c3d182f6592508c9908db6de0592fb1ca3c33213bcde2b8","0a07710233488e1fe8d12ec235b26dc0410861fa09aecc26cfa3ae1dcc2c0d25","2db853ba4d74f44e7ad8b84720eb1d88f96579e198edf95d3962426d6520c5ea","f74e15aa83c33952f4e6c535b62250bc4daaa372e773c33036d3c89566985355"]
Anchored
2026-08-14
Public log entry
search.sigstore.dev, log index 2459591146 · entry 108e9186e8c5677afe3c…
Expected log hash
33cb528ea0ab769452be5b094c6325f654c10573b40ca2781cfa86fd95fbf7a5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786655683008","kind":"published-quote","locale":"en","page":"subtheme:proton/ordering/account-login/en","quote":"making you log in with a password which it conveniently disables from your saved password vault","rating":1,"review_date":"2026-07-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9382c1a596ee…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.