Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“sehr schlechter Datenschutz, Übergriff auf Privatsphäre sensible Daten”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2657480792

Proof data

Record hash (SHA-256)

0f9a058f75940bac41a1493a6cb6c082a442743df350a9233468d3fe1cd354dd

Signature (Ed25519, base64)

7AXqPZoy6GzYJ3hjozpIcrl5TJANyoeVTWp62Vig6kwhTXxRK6Uw0IyDx0f7SMy9s7/3EXR38Dw5wfgc0TgsBw==

Merkle root

1b8bd208913fadeacc13aee96871dc2c1b9dc61e733c3f3400ab6ee0e7324443

Merkle path

["0f9a7438a224c51d4c749e0b589fe610e860ea20aa37f360cd0196c0d16767cb","08d44621cb022a8678487c471e9712aa438987f65fd7ab069a6b587589b0f6a4","7cf6d728898cb9e9ad47bb6be0035accfca7cc183abaa6fd3d539bbd57c5b247","298efd08f40f5c8d87228f6bdba7e642ddcdc8973067d4959b22a66709e3cf82","d65d7f1e68e8ca21b84c1a88cdafc122cc3c0b8a53b236c7287b1367fbb74829","72b5320cd7683e6d20fc6fd14a564f77e222b8f76d7da8f7755084893d671d4c","afc4ebf8aab0d4b5c2a458bb58fa73d25bc11a7cff96499aa07960fc671e3f60","c71032fc96be009e4ea0a374985c620f31775547e9d1425f3228164df873c5b2","42c2285ac81502c6ae61c60bbff9777c5543c91d6cb4854f1306dc0f240d25cc","90f9a32b47370c999df0e8f9294fc084f37665e929cd7041733e19c343f7a410","ff008534f234e9e61b8f65e3f4da87ea8db4d0fbe3beb07b0251da81ed528158","ce46eefa0e0d5c2b65c519776432d35a82d07b0bd2abd92776ca37317bcc8f74","acf52e9a767b254023e37fc92bc6a0d81f036d70fec8df47db9f5728533e3c9e","8a5060efafa29fbc64db755e49cfde82194cf6467c7dda5949ed7b058f0a3650","ce07c6a4f0a9b6bd8c624cf5ab7198d339b314b8dcd9468f4437006e846aa076"]

Anchored

2026-08-31

Public log entry

search.sigstore.dev, log index 2657480792 · entry 108e9186e8c5677ae7be…

Expected log hash

ad55c089e6140369414933a3be64660b3e37350199a02055154c25d6001c76a5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788145962339","kind":"published-quote","locale":"de","page":"theme:infomaniak/billing/de","quote":"sehr schlechter Datenschutz, Übergriff auf Privatsphäre sensible Daten","rating":1,"review_date":"2026-03-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b8bd208913f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.