How It Works
The BNS operates as a push service. That means it connects to each site running the blocklist add-on rather than waiting for connections from.
The first step is a request to collect the site’s attack data from the blocklist REST endpoint.