Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Fastmail is a master class in interface design, and makes Gmail look like a trash heap and HEY look like a toy.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3220562278

Proof data

Record hash (SHA-256)

52758306cf63da0646bf37fb901f389a8a40f6677e167cf61204042246706a75

Signature (Ed25519, base64)

BBbaMXbEmMjerl1yApguBHJLyaj5Rn6IYPpnTs1W9pmXtkkxIpxnVtI302d4k7fJaQNzBdXHZS94eGwpJ6ISDA==

Merkle root

2d214bb14438515f4bedf5edd9b00a6a5113a016ba9b9fe8160d41d7e6046722

Merkle path

["527f135c9e2ec787bf88ac3ec67215604140ba1fe77cc96c5d5aa0697976cbd3","de757eda606720d40eda2abae313aded533f017f5173a78b329150a7adc0a362","4f0a5a1fbca9d3b040d4ac2bccd6b10c63c0751740b973b5f0620b56f538c4d5","7c033a38f08f7f6ebc3eb3feca2135de40138bdcdd87fbbd5c1c614d17790544","989cd12c5f7e3ec9a6639f5ec3ae8aeb6437de2fd7cd2c53625e2074387e2aaf","a07a038e89aa057b7e2cb38c4fddae1b5519c2d03f605586b9810e2ba87854a4","107eb83271bdd1f2ffc4c91795abc607959371fe53c8e1542f88d4c4c2be98b6","b73142656336a715652543d4b31d11a487f09d61a5fce380b4a07d6d52163656","a0aabc2a413997a3df0a8f071aa546d7ec1c0c0e00674b90008e3d9fe310439a","5a7e4e1a963dbccd6dd1255a198cef96d5695bc0e8e7231eff36c8b88b0ff339","99018faa5ad0d28664cdf895a0d291f9e9325e68283ffe73dba89bb27fc962ba","23123a46a6d30e0fa59a691fbe1dcdcf32ad32c111bb8e37438ac91b1152017e","184cc1e2f93da59337f7837161587a67303bd364329773d15b922bec0848e3b3","35ea2df06612b261a549235c4e62b3e1ad1789f05da56f9ca671421e5071b72b"]

Anchored

2026-10-12

Public log entry

search.sigstore.dev, log index 3220562278 · entry 108e9186e8c5677a2753…

Expected log hash

13907aa3d3da271016c4b5e75946c4440692c6b4e1684187b965dbb983b157f7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791777669660","kind":"published-quote","locale":"en","page":"brand:fastmail","quote":"Fastmail is a master class in interface design, and makes Gmail look like a trash heap and HEY look like a toy.","rating":5,"review_date":"2026-09-29","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6abb071eb7feb58620359c1d","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2d214bb14438…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.