Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“there should be more explicit easily accessible information regarding P2P connections not going through the VPN”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0b8a7008d661aa5f478d53c2ac71f90fcdd8f7edb664e939b3e568cc775743d3
Signature (Ed25519, base64)
IXYU8x3WYK2LdnYbEn4irHyE6T7C9zca+sv/nQF7eV8PXyo2aSzjEXKk9UfNpQGkNtTzIsl89Nx2F8Xm8yQAAA==
Merkle root
91ac4838fb4692cf2c714cf22417014bde85e9d7b2ac488478d7f5ddac3886a3
Merkle path
["0b834c2f5fbc062782f3d40ecbfb1897b6b6fd90f9418eac9f3da53417889ccc","136af4b96fdad9247c2fc1fec138f09e70a531a665818c0eb4d42226f673a438","dc7dc8ff72ccfd25e09bd4abcad98cedc63bc7160b7f8cbd5c594d0f94d5838b","5b11b91b9bd3a67d719d439096bdb2ef2d569e2ad448c713b9b82757e3c1fc74","5dad08e3c977a06a87968972ddeca4af599e7938971c1311821d0af51a71a81e","0bc750e90f2f21475bee9f99b1db24295651030ecfd77fbe480ca2eac55c3496","326ed797bbc48f260124f998116750be845bdf0dc0b885dd57964c2853f95a5d","8fd4b7b47210da652dda24c4416690bc1f6a49adf94c042d58ffb77e9bba95ec","f5d36b0630dd2c730a61d83c989708ef359b90707939c6c875fab4f7a1f35c7a","5cdf0aa8e9b506bf83b8f83348f8021aacb660ce17f54bb5687d994ab4aa24bf","1651d8e3c486d3c452bdd71e953107d9b464d56bf3b709848f8dc1d78473aaed","d8b72c6653070b1f720e67e6522640ee452ce3cd37e767054e3f4480f6132364","c3025b7778a1a77d581203e23f18baf3b8e43309007afd7c7abd033cbca39cbf"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3668758047 · entry 108e9186e8c5677ad50f…
Expected log hash
69940c768d826da6bb4ba0910028f48fdd278e42d608b1f11b1cf4d36c54ba55 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793706887256","kind":"published-quote","locale":"en","page":"brand:proton","quote":"there should be more explicit easily accessible information regarding P2P connections not going through the VPN","rating":1,"review_date":"2026-07-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (91ac4838fb46…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.