For a web-fetch tool, allowlisting domains is preferred over open f…

Question

For a web-fetch tool, allowlisting domains is preferred over open fetch because:

Accepted Answer

Allowlists reduce SSRF and data exfil risk to unexpected destinations — Allowlists beat open fetch for SSRF and surprise exfil destinations.

Answer

Open fetch is always safer

Answer

Allowlists reduce performance

Answer

Domain allowlists ban HTTPS

For a web-fetch tool, allowlisting domains is preferred over open fetch because: