Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“La meilleure messagerie pour la confidentialité”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
10fa855c4b530889233a3b27151370932d811b8c6732162b7018bb729b44ca89
Signature (Ed25519, base64)
8mJRO0Bgby4O0t7ni+KfNF2pFuYLUEZfsSSYBYkm/uBacrWgdV3cWYU1TFSdPPMjDbARmQR4xkgZEz75UqIKAw==
Merkle root
a5d88709ba617fe812c94d00606cf582d21e964e3014eeed21e24c3822682a40
Merkle path
["10fbad4a2773f26368cdf13e4bf9e1d3c7d23cd1b68479d3f807600637a5c273","7b25919a9292f4e3c47e55aef9fd212c8f3e53c21af653546d2710719a026754","5cd1e9eab9b145ddb0b4bb47a30634b52b900888f04a8e8493b076150e4e6f51","27514f346ebf03c36b3952c7a641a30aade5885eca5376fc027523a26d2e57f2","03908c52e451493dd6fd3b792503095280936b4f6452dd521ecba5c610a425fb","4d5cc5c0d7fe7085409c7f4f067e2d16aa3d736366fbb26a223ec23532fe8e95","7a3c5a60465d8c1e16f0fd37bedaf3b72d639479a2bde9c34e65f1951dd31ca3","2380de9306115d2023dd9c3fc0c42374926375c93dfcd6d5bb7ad479f8f7f1cb","b067d8b72ad7aa16c431053fecb0d8fd63c02c18c3f0a447151f97a22d9d0ff2","45f48f6b244f5d465f2df62bea2624d0fd019a64e195c4f10a69203afd1db9d9","200c7787f32e5dd039286b94cfb5979a5fe407268ecf32cd8828d14429fb7d14","0d90287140c688b078bbed5856c891d1e5d8314dfae0b71eb7981526e520adc5","7b48dcfd125d0832bd7f5a9c76821165d9d78970ff8029ee47dac7ef938d86a3","aa514b327a9841f1a8b8f1ee34db42dc890d9a3d820327c14f52ced1df128a39","33e990fa14b58c6037d59a973c8935635ce911b2e7d4249f5e781ce19fe14ee6"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2633155673 · entry 108e9186e8c5677ac961…
Expected log hash
59d0143474a5e64649e00814367477c4772bdc0867286cdc45867421d3d54959 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787979141339","kind":"published-quote","locale":"fr","page":"product:infomaniak/domain-privacy/fr","quote":"La meilleure messagerie pour la confidentialité","rating":5,"review_date":"2026-02-01","source":"Apple App Store","source_url":"https://apps.apple.com/id/app/id1622596573?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a5d88709ba61…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.