Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Du kannst nicht auswählen, welchen Server du verbindest”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0fa256e4550a4b8f4c85abeec095d897fd79600fb97a99d253384b92677be5e3
Signature (Ed25519, base64)
iLgDR1goCLuReKEOQV6AxlR8dKckMFCBOf17dB8Ui9+5zJsl5TrgOcJVBmJm9riguxNeH7vIq/epHtY0hxCyCQ==
Merkle root
6471d9991f0d0aacdf442d5cfa660f2886071005e4c3d26a992a3bf38f0a7695
Merkle path
["0fa23bc17f9ecd6928efd6c88b934542a53704ba5e55cd0e69e4e058eaca30da","c2c79e02008d12e581602e82f6a4f72fd7093f7f2a5023acd06c15ac6ab7f7da","48a0dc7bca7a139180650feddfb18300fd24bec48a4ac0aea1bc014fc8ced65e","f0d5074c2cf0b3df218d854a17ed74c6dabb61397676c3db9315737f93ef24c2","059edd71243e0d714becdc56e400676ca979701b7eec441495c0e3c9756c7339","10ae8bf8fc36a149127008625b446ce4a0a25e2785d0b88898b00a55b69b3703","e84c29a478ff719d29cf3ec0b2af06863f5a1b46ca3f81cc886548193204c430","9c4ef1cfc05fe07e164bbe26361fd28d6ee84b18f52c9d2bf631ff22e9a31dd8","10bbf2af209eeff20f82e4f7be604b498fd0e1aa669794ce82832a52ad2f71d2","8b7cc0ffcf297235fa870efd9e62b7ec69d44eb9e65d691c54305e63a1150887","39611481640730b1b5b18beb7cf86e0d44eadb01d20ae3ae4c61e20a199593ee","3b30f3c4384c8f930b0902f0837c734e0f4d8aafe820711619a733e25c756cca","f3f4254b899098b98c7590d670f5fc0f992a4df0218d6bbab4ffa5ea42255835","930b7277e2ba0f1d182f8e7d0daf885f1526e50b29d8791024858ea5581e285b","a2fa997090d23b1f352d383369eee4da3a6661cb0956969a3a99ec5f82390d95"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621523249 · entry 108e9186e8c5677ad576…
Expected log hash
644ce1c7a13e9edd388468f8e29bb74f49a15185930851951709e16eaf23744b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787888369667","kind":"published-quote","locale":"de","page":"subtheme:proton/service/serverstandorte-verfuegbarkeit/de","quote":"Du kannst nicht auswählen, welchen Server du verbindest","rating":1,"review_date":"2026-06-10","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id1437005085?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6471d9991f0d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.