Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Very comfortable, trustworthy, and secure”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
c182766292cb5ae152fe4fd041fa9cf1faba8e7a28e11ac87cb798f96166e7d2
Signature (Ed25519, base64)
wW1SECfb/aNFUbZCHq76XXZGDf0zmmtITS5xejoeckv9gTQKKlaA7eXORsYNkqecniwiYSRNw33USesNuTQiAA==
Merkle root
00eb1252356f6576712ea4fb614a5236163b3b1821e2db4cf332fa9ac5a6c4e3
Merkle path
["c1811ad2673c8e2847a9e193b7b07d2a3d00e631d78c06920ec7a1e5ab1dee87","5fe37360c8e665adbe5bba542d1d0a0723eefaccbe7f25a2b1a2b72f813965a8","20bc44bb874d3f8d97ffaceaed01db4e8a970896abe28c987035afd5f8885416","c09bfaab807a6706c7dd9ca2d78fc64b502ed93f964eea14289a3c3630750318","05cae09429c5007633b13973803150a8957eb8f12fb4ee08c7abbc9a0452cedd","dc64b4ee23c99efce4172f73f9d743160f61230ec8d46092e7ddadd4b8c62d64","6486733d8af46830162ece0c8bd56e5bf2371fa137ffc52865d5e7e7e39683fa","3e583213ba6deaad2284d8c6b811fa985e8569c1989483f640ea58ca17db1d0b","c4e893646e84b9291494c25a78c5f10793bae6a98b8ccd111536a38e89cc38ce","4da0625545aafb4acb3c826d1fdfaf17fecb3ba6f50093f50e929ccba4a8aa1b","7ad22cc2e41e69310daad991a94132ffad2f8b0f4ab04b4e04453397925d86a4","bdf3d3290cda23c5f6bb6c9c0678ce41af6a4a36708372007ce299c366cafbf3","8396c6db792aff923951a24a36e34c7bde1076d0ba7dd513fc1fc21a92246adf","2a16edabd04e899fb9e203b73feafe767e97ceab00dd96c47649f5269a3b0707"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3199819547 · entry 108e9186e8c5677a0b40…
Expected log hash
54bf23963e2d2d167d69cc8eefdd91558bbc8835be34c5469b6e0b1af30e4d15 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791691808362","kind":"published-quote","locale":"en","page":"brand:dashlane","quote":"Very comfortable, trustworthy, and secure","rating":5,"review_date":"2026-08-31","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (00eb1252356f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.