As soon as there's a list of trusted origins, the requested origin is validated against this list.