Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Easy to use on PC, Mac, and iPhone”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
422931f87dc18f4d5f4d7d8e2565252735b290f8941ec4e2b67ec1212d55d9ef
Signature (Ed25519, base64)
Cns29oXF0bXJ2iqaGICz/otaFIoPGxWWvLrT3sA5PXN9OjtAL5v4MQa5jAVl4W+5FGOrAKZbdDIMK1VFOHbTAA==
Merkle root
a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c
Merkle path
["422985888381ca9d9980412c196236ccb658f6eee7fe8e833818c373e6fa1cbc","ef81cf96e5668286148a7a12b2244ac5e431f547a5ea1823250893789a847bab","ac2afca11ea29c66869b5c8d43ef0dade35564f0598395838255cb6fee489631","f2eb9a3fa6f4ba2ddec44f51deb27f381613978c09864dd13de7bcbcd63ebc65","2ed8438fdfd49d72bedf37ae5ae3c80f42f62da71ccde621221059b71db8e7aa","620003c3546a81658e1f71a03f44f8adc1a178b7478c99a48d0ffa0aa2c93e43","3a528f75291074e7a07c1ff107ead511af8cf42ad0f5e72c6414285ccaf79645","ccfb9318cc90bea6229fe0b95f8f3c494e995de22cf077e974052a60378ddddf","897656ccbb15d6f0f3ad025d59444759dd35d38358fbe905d27aceb6a34e5589","021a165a869f4e219d4972a8f7f3bf834f36fbe8f066a0577b39359e264cd23c","87ce158a45ac1c351ddb37490b58e4f190546396217560442df58265b751aa3c","4f59f4aaf0240f47bf6b7b597482d7f0ce33f9965169e550832697b23b630fed","34d17d8fbe0805298b779dccbf4c1befbc8fd33e42aa34df809cfe1ae000a274","71601cbc06cc18d15a7af93021ee7957212de37616a4dedb4252c015daf6350d","5153df72155ae00831ba1e4416296382c39280ea82c989972042c066f445006a"]
Anchored
2026-09-18
Public log entry
search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…
Expected log hash
5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789619628558","kind":"published-quote","locale":"en","page":"brand:dashlane","quote":"Easy to use on PC, Mac, and iPhone","rating":5,"review_date":"2026-09-01","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.