Verify

Check the fingerprints yourself. Your browser does the work.

Every post and note here publishes two things: its markdown source, and a SHA-256 fingerprint of that source.

If the fingerprint matches the source, the text has not changed since it was built. If it does not, something has.

You do not have to take my word for either. Press the button and your browser will fetch every page’s source, hash it, and compare. Nothing is uploaded. There is no server involved beyond serving the files.

You can also do it by hand, which I would rather you did, because then you are trusting sha256sum instead of trusting my JavaScript:

curl -s https://denniseirorere.com/notes/what-entity-resolution-actually-is/source.txt | sha256sum

Compare the result with the fingerprint shown at the foot of that page, or with the entry in fingerprints.json.

What this proves and what it does not is set out on provenance. Short version: it shows the text is unchanged. It does not show who wrote it. That needs a signature, and that is not built yet.

Check every page

This fetches each page's markdown source, hashes it in your browser, and compares it with the published fingerprint. Nothing is sent anywhere. Your browser does the maths.