Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the privacy is way better than any US based version”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0f898c2aa0769c9e5c5860e9163e77ff5882d4c0817589f49f2ea8a5dc5e561b
Signature (Ed25519, base64)
jQAEN2SZYEQcu6A5JU3sE3kVYzUbYsDIGULJIXOIpsVeYzO+8VS6HwvhKhnZWPQNFGxbDO66tc1KzoT3BucNAw==
Merkle root
c57f63ca7667642311efdded526d861b51ffbf52d1c426da305b845951427701
Merkle path
["0f81523b7c4b177e5277e9bdda3276637ef9d399f920578178167fb50fdacdd8","dd07cfc3f002f169bb68594e30226277889a9544e4b571838b39a8c23f533a62","50c68acd75b54a12a80105ae1668a48247d838e2e4254b7e650ab7393c450460","aa42c675b596449da9050d281413eeabac29d6c9ea9ccba725d27a0cd45a283b","7cbf143f2a342b51bdb2e031727186dfc7d90b0819fa3e6f317116bc3d3a289f","9ada597e5af6f5d55ba37942a4ac74a921a4000816d13b6d6f42a7d1e47d5c04","d9487968592bfc20d40acb2d746420ff3ea211aa87092880902219016e440f9a","32334ec371ef380a12d98656a5ab06ec9b3ee1f0a2e2b6432e6ec6efbb86a4d9","94b7dbf033670ff2272cd8ad6cabb10afc7213be557514828728420d7f1a4671","92242a58b534b4b8d6122f4539f23059cf2c2597ba1889c80e013e92e711536e","f839f8c1857277e93e78f62ae755c976a30c4acf9c7d18d3c2725b482a06c5cd","fd9d831d6b0e79fd5f1b463b102736cfcb9ac132f081a7c28a6b3ddec8813c69","61391210b3f831a04fd8f72b9d70a0dec0597c4f0f223cfa9b9200919500887f","fb82e5449a31f87d138969592f779e1e85f8796145db30c2755c726c8fac6410"]
Anchored
2026-08-14
Public log entry
search.sigstore.dev, log index 2460366749 · entry 108e9186e8c5677a1509…
Expected log hash
00b1dcdbbd19f66d225c3906dee55743ddc8b55c3879f3a1d4cebd98457c90d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786677999476","kind":"published-quote","locale":"en","page":"product:infomaniak/ksuite-pro/en","quote":"the privacy is way better than any US based version","rating":5,"review_date":"2026-03-17","source":"Apple App Store","source_url":"https://apps.apple.com/nl/app/id6754152858?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c57f63ca7667…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.