Enforce sauteed onion criteria strictly
The current log follower stores all certs with a SAN that contains "onion"
. What we show on api.sauteed-onions.org
should be stricter, i.e., a match requires www.example.org
AND <addr>onion.www.example.org
.
Possible places to do more filtering:
- Log follower
- Job that populates database index
- (Other?)
There's some rough sketching on how we want to filter in branch criteria
.