Maybe the best would be to build a whitelist of WoSign certs then, scrap it from the publicly available websites and allow people to submit their own. Then some

Maybe the best would be to build a whitelist of WoSign certs then, scrap it from the publicly available websites and allow people to submit their own. Then some kind of bloom filter could do the trick I guess.