Glossary
Blocklist
A blocklist explicitly names specific identifiers — an IP address, a device fingerprint, an account — that are denied, checked before or alongside a system's ordinary policy evaluation. This is a different mechanism from a general default-deny posture: a blocklist doesn't change what's allowed by default, it carves out specific, targeted exceptions on top of whatever the normal rules already permit, usually in response to a known, identified bad actor rather than as the system's general access-control logic.
A blocklist is only as good as how quickly and reliably new entries actually reach it, and it says nothing about anyone not yet identified as a problem — it's a targeted, reactive tool for known bad actors specifically, not a substitute for the broader policy that governs everyone else.