Yes you can. But having non-technical people verbalize the need to whitelist a domain is incredibly painful.