HTTPS whitelisting