Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“but to do so, I have to log in to the classic website”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
17b50ce31412bdd638599ac1660e8d18e4ae26f4168837260034382927e89214
Signature (Ed25519, base64)
KueIDHNvWqx0XBl+JXVM04E7CRA/pGDrwtx6Rj+471rU+7uhk/MzsXp8I9oqVkrx+TWwO07WB2p9y4mgH7r5Bw==
Merkle root
d019a962265fd99700bb41421c12bf721bc431ce9725f4e9d547011775ab56ec
Merkle path
["17b50e580f7a993311a1ad41f3a9e4511987967da29f4eaeba5e5ea4430345ea","47250fc35db6ec8ecba9e144f913d87f6ecddba0b3816094509a0ede83a0f6bb","9a6ae355150462f47bdbb3a74c94cba4b8f1f46eb2db5473d22c2d9ad458fc0f","a7262f55ee2a2eb9c54c442f3ec576ac73082abfc060dd6352534bbbb367fa21","519beddc902e6da39e50c2a3a848bbe197a0cf6c69999306a7408a4920c892aa","d7a83f33f849925060c0f34e3af642572b1238e20b00e3bcd373ecb299e58e13","8a28d1060b0f3818428cff2eac82661844836f453052f89f49168cea8a119d2e","a5533eb14aad6feae09f9e6451db6bb023edf322dd7fbd3be1d47e26d950f615","45a80dbc8e51789156f56037e94eab4139a1a0700c580d4e938374cd05c7c1d1","b6dfc20d2c956a4df8ec329b2dbd97ac24ec56fd1c371835b0100fa91a1993cd","765163a9321f7764417f55a1d6a057daa70bba7587e0182c9b010f87d053bd92","1c76b0e02374e061611fe4207c81f2bbf4fd66b45969bb833d49268157862be7","8d7f9bb84a33c413af9063341c8f5160bc8725a67ef59bd2d044580fb9f3155b","65b176b4a433b701cea4a24b83deb2fa9ed09be9f26f9fdaada87e8434a57f00","a28f44db157d986c9333d9e3edce8ce71060ce7f7d8f4bff70f57fc26d48546f"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657725656 · entry 108e9186e8c5677adf65…
Expected log hash
b4666dc064e94c6d0ca3a2e9a0c5f9ff5cb70ce3ce9e0a74343a10c712c15a62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788147462663","kind":"published-quote","locale":"en","page":"product:infomaniak/site-creator/en","quote":"but to do so, I have to log in to the classic website","rating":4,"review_date":"2026-06-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d019a962265f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.