Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“How am I supposed to remember which 15 digit, 3 capital letter, 4 symbol mangled password you had me set on my pc 6 months ago.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0d659722898f35dfb8ed41a1908a1e604f04bf8588e9e7dd22c7c1ff157b30ba
Signature (Ed25519, base64)
NCno1aNzpxn7uGaUVzyzNZbiRu6hm3iXusoZjflkgizJgts/cT3I5dJUUtut1/DQypzmrrohM9RzyxN8QEJ2AQ==
Merkle root
d414e521fef9d6d099989fa0d693684c20b42a89a12033fe1adae5ceadc28160
Merkle path
["0d65c1e5e5424d77cd31f49b40a21907f679d7aa1eb733c31c5cdb7cd24373f1","ccce25fa9e68fdaf4690732dbeadc4253763c184cc48cebb1db3430f508c1418","68fb534f14321933cecc158fc6f51aeb909ca95c2acaaa139f2dfec463fba787","94f5ba871d5dbf59eac67d7bf6e82246bc3e4bbab1d7889ed0ab87f430cbee6e","bc4415b93c69030c1566fe76ae091aa2df28ed3bddc51584ac0467cf01a366c1","7cba5b79fa1a5fff522e3dcb454b80d34964b263f5ae1d9933dbc4dfa42d75b7","86693bc28d0d2615e3ba6bb29034b677c88ce827ab222341d605beeb9128f012","1a311bfa6e62e023607873231b27f06733d47c57e10cfceba956343b35688a5f","f1b38f9cf084f7d16f549cd146489fcf90002cf0e5bd5894d105a30005508cea","b23fd586fdd159138198a55270912204916496844eeecd6ddaa5a2e115d95fc8","42e7f0dee6bf395a8b5dc7e30b49ab5e3f2abe6507684358ff96452a664444e8","8fae7514a4924bfe0cf5e60743f69291a922a54a6ba19c537fba85dd4397db12","f77efd58ae82cd437163ba9ab021e9fb524c058feb0d1f3bc5d429c056be2720","dd85a03194c1b09d93a4be119d3146825d20c9e375d143636eff256904ff3e25","d9bed3bb20fbc734967be09c1cd24ec9d5bb72fd1e4fdf84e6057ce858f8bc78"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2594412582 · entry 108e9186e8c5677aea33…
Expected log hash
b1897d255cf944fc063c3044a4546ab02c40327197d891ce843dc1c45c2dff03 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787713855428","kind":"published-quote","locale":"en","page":"subtheme:proton/ordering/account-login/en","quote":"How am I supposed to remember which 15 digit, 3 capital letter, 4 symbol mangled password you had me set on my pc 6 months ago.","rating":3,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d414e521fef9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.