If you care about privacy and security it should be a whitelist, not blacklist.