Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Easy to use on PC, Mac, and iPhone”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
497c7adaeb9dc5981af4b6f7323a10014d04ccee51ab57dd55b68fa77d5b5cb1
Signature (Ed25519, base64)
W8xje5IdtRmrnCC6qJGzyGDQPx8L3ez7gPDAwxrGSeJnBBqNm9UKx8RmdOXZKlpnRRRNlg1gS16pCoxqcrK1Aw==
Merkle root
92de3fc6370869ec6c1d0482494ff1816d45e719fbf27ec8d8d02933c2b7c658
Merkle path
["4980a55e92625d2f498c2f731b4fdfda3d2a71022f05228a49559e41b315b342","49d23ec8fd95295b2423f35e73b4485f1ecb13f8739543c55f3e965dc2469bf7","7d0561f0ebcb40f6992eec61f105fec9fd245b5d1a682b7aa0e3b0952324a7ea","30e96b682b2d45c25191b5015ddd7d72d1051122a918f94a2e4b81e88c0066e6","bf214daa24eb6df8d91efaf81b052ef1e152f6fa8fdb947d8669c1b18f3ab74a","faec37a035c2cedc2a746cb2e81f30aada0355bc22ce535ac442849a0b47a8b5","c22674f72d9899189399f81b3137bc002a9fce4a676e4bfd0904514ed90ae84d","587b3736cbbf0c43659ac12a7c980df86561d9e9b49a59663f8a5a72a3ccb3a3","3d8ffa2edda304ed7529c5d2acc35d90a836b6c6f1eb4c6fa388c929becdb0d6","f14327ae239e3894ee78c58bf1be8490a657398c3f57bc54c8d520e795c70908","cca0352ebc7d1b4bb6e8ec9e0343410ade4117b1e3765801b87324134a8e05e6","f5d259741f203720e985e48d0a630724656018606cb625007cf097f32a75e0e7","a509e8f4d2cb543c440130ca624f7c471ea935c47688fc6a0e46ce109d6bda79","4e60c8870052117ad280950bee2be0f8a355cdc9c18fd48de6f1a997eb38ac39","a501be5c1ab88f300525e7c01289a28bce17334eb0d8acf270b9e649519761c4"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3102753131 · entry 108e9186e8c5677a9761…
Expected log hash
5cca28352ab3a467a358005e8b17999e96a5be0f2e71c2152bf575d4cd8c238a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791264491480","kind":"published-quote","locale":"en","page":"brand:dashlane","quote":"Easy to use on PC, Mac, and iPhone","rating":5,"review_date":"2026-09-01","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (92de3fc63708…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.