Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I think of Dashlane every time I see news story about people’s accounts being hacked because of password issues.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
88d09ff32baa4a5cdef3e9077dd65030aa464e04935a564d06f8c1bd9bbe90f5
Signature (Ed25519, base64)
X5Yx10vRRhIwmT+sCbb6T6/9XhYIh+y81V1NBjdPu8sHcMP+R+0bVKZFFkc4Fbva/8Ge55FL3Bz1q+ETW6b9Aw==
Merkle root
61203b6d05350adaaef087cbce75d25fa5ac2036c1a66344255fc73a224d39c3
Merkle path
["88d1000dbbf5a4e90c757594ab66bf9ad2a1471bb45709c76411990961a73a4e","5d7ad538ebc3ee6e19ec17acd8344d6a1b51d4b183d5c91fdc650b0c67f736e2","71de09d9970f4bb01353eb73649f7f0c6ea357c95f4c67fe78f30b0aab885ef0","547cb61e2931d25f44b6d630e84f354d947647e87416a91b0eadb2da22c0bf5a","fca7b0642ab3ca7e06bbc458c79af416b28672b39ee1606a5b80c64ee7e2ce71","f0db235d3050f194f5bc0031228dae19f2d1da106a841ff64a4e3f786b68acae","04d9fc3949184f8de4698ccacb705c2923acb19fa00393c14bc746349c540c76","1a3edd2f9f4842717f29298b5da1469ee0614736603fcfbe3e2426e5aab99e6d","c16f594a459c5c781a022e4d76b445022dfd5736a4cbbbc649f5e3821595445e","fe5d2e2db973d5994d5c91c6e6b9886828caf013a5a1da3abfbcac318f13be4b","f0609fbd7dc9088b3c09d3afae43a848968b097feccf85c8f1d9fe856a421ea8","3313db6049e25cabd426521acb59d4b355dcb9f4ad2c34f15c749809d16ee4ca","90adef19352455ddb1e70037a18d38e4a92a2d5b71963605de61bac446a255ff","8623ef0c7509529f19128084f674283d15fc3b4b9165c3273da961b1c9f411fa","d35a1781f2fb2fc9cd66aa22e2ed6cd805ebe75af0ac2c167c3e4444a0a6f362"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3100032352 · entry 108e9186e8c5677abe62…
Expected log hash
0a0ca7b748f6c99c5a75a761289092bb11c807eeee08be8ec366fad5b0bfd2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791253605372","kind":"published-quote","locale":"en","page":"theme:dashlane/quality/en","quote":"I think of Dashlane every time I see news story about people’s accounts being hacked because of password issues.","rating":5,"review_date":"2026-09-01","source":"Apple App Store","source_url":"https://apps.apple.com/au/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (61203b6d0535…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.