Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Il semble que la sécurité y soit même en version gratuite.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2612584084

Proof data

Record hash (SHA-256)

0e38dc3e6d61b30c029488e5226fd4dc809bc0c012745370a759e18c7f1776b4

Signature (Ed25519, base64)

Sy6pHvb1tm6tjjliRLUa7xghr1JORekr72hwDGRYZ9JYpAYAJkqHkCuy1xmOjz/0jJjvguR4Xem24nlYT4JGAA==

Merkle root

11760913b24394c3efea903b5693403de67f30c73517589265e62147ce6d7db9

Merkle path

["0e36e778e82eb5f79e7d3f1151596f8067ca38965899ad4a6e22cf730e512188","f0fb2bc9bd447a93142ba966e098e6855d31d6714659796d86fc1c5c46477887","978b2455295f4da7db1d7cab210234a0aac8fafaabf68e47da146d6bf6ff7ed4","e80a9467c410f147650c7c1b113bda347d1e8960ea226f25f58798640542d246","23c58d5dc5d757a8d85a973562c47b219a9a4dde8614eb0864062d05e1a0ab26","d19ee4ef151efb6287a0bf491e464a260c4756ab535ca32afa6c44ec5b703b04","1fd3cbd67e79f0ef40569ba135788fb2ebe4dd429b31c175267d9c622ce473af","ea15d2487f622b63221435cbab931beff21c5a84b7341c653fc63bd60e207328","f96d7601c72ee8acaaf0a767f7351c455e6b04aa7d7be20ff2b8d4cef7287a66","f09bc3c3ad670fc91c35d1c72ec29511b7ae94a366743d99b706a9d9816d9eea","bd07487b691762e95594ec81baf11cee57d318acb845571e5b299701c18b29d1","4e02c6a47369138d0eacb837d8bed87707d8edf6573bf9a07b0288ec7a1a3832","bd8f0b0faf9d3ad7c16d60f7a01c003de274172458ab1f670d78e9cc1dffd585","4d94d9a9168f14be08d81b3238e6d7999acaf99b1233bada5f6c2802401f1b45","8cba8822ab29049afd67fa646ac9379523fc6be8932688ce4f3067f563511db4"]

Anchored

2026-08-27

Public log entry

search.sigstore.dev, log index 2612584084 · entry 108e9186e8c5677ac6bf…

Expected log hash

0a57a1a3ef828bcabfde2971260e46ab649b0f8c2c96e231d49bb83e51a8ab3d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787801559681","kind":"published-quote","locale":"fr","page":"product:infomaniak/ksuite-pro/fr","quote":"Il semble que la sécurité y soit même en version gratuite.","rating":5,"review_date":"2026-02-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (11760913b243…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.