The content is referenced by its cryptographic hash. It is like every piece of data has its own digital “fingerprint”. By combining public keys of users and content-addresses one can sign content and prove that a user created it. Such authenticated data enables trust to reside in the data itself, not in where you found it. This creates “user-generated authority”.