Also you can add exceptions, so if you have e.g. a HTTP-only server on your local network, you can whitelist it manually.