Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“why doesn’t it work with my main mail.com email address?”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2683258276

Proof data

Record hash (SHA-256)

0fbbcc3a9b5654794c1b3a7ea07038d912c18d249a2083425bd4250a528e2d36

Signature (Ed25519, base64)

oidk7495r93cI4FWGJlqgHFEh3LgXYESb5cauxRKo0QTmmubjBDacgTI+d5bt3gt9vwMaioIl9T8diVaJ6huCA==

Merkle root

1b4480a4fbb367e76fd34ca26880b5c46171f974cf3a94f9b036b42e01723c56

Merkle path

["0fbb44352f408feebf88c601917c8d61823dccc9fef32850316bd0ffed85667b","7c3e2f5d802ed907e015b22348a41a807a5ae632bd8f71c3b9762a5b71c178f4","84cee798d7e29a18772ec1f2cdb2da2bf946569ac36502d39406c3eff73a5345","ad4b384559250166cc1c4d51dc06cbf8b70f056685d361b9256da8117c839b56","c74167b1aae9d8b599c47a687863cc5ab9ac0fd53351022426700f40011234d9","ba7e3961a2548510265d38b2da6a4c5cdf3d3fee00c63384ab48b39ce22a8fd1","42962e4a1fcb6ee1bba736d824d9b44e3c880b13a56779e88ceb22288388e949","9dd2989c99081f3f2f0bac3e9a9661a15aa9c417acdcc6dc879e92f66676c5e1","d8a044650011bcc48143d7c37255ee23ab2664e2c1a6a9622c15af719567b095","71c055f36440b8bddf14630168e6e74207f3cf580b7938cc56a94c438a2f6cf7","04aa849b4520797fcf995c39b1d89cb59e40fde751bb15dcdf28a28b657641c2","e87d3f640108f36247b0815e0b898eeec6b0102410dfc0c66c6f5f34b114e4e9","9bb9face21b64dc4548596d6f0fe4cf67321749c83227ee93ed882f3aa170652","e7218144e850bd19a6bceecc50f33cdd16123e2542b211b07ffe285b3602d2d5","26c4d515b1da79ddf02519980ecbc6a7fec0326ec612e5f075735f461991082a"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2683258276 · entry 108e9186e8c5677a44df…

Expected log hash

eeb02f3fc88cc5ba2c672023b294d6863b311c6353fa3c9c8dfe9c0b1e584208 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788322016973","kind":"published-quote","locale":"en","page":"product:infomaniak/swisstransfer/en","quote":"why doesn’t it work with my main mail.com email address?","rating":1,"review_date":"2025-10-21","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id6737686335?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b4480a4fbb3…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.