Hmm, that could be a possibility. Thanks for the idea.

Seconded, I'd much rather add applications as needed. Also, the growl notification is a good idea.

And my own small idea: what if I want an application to check for updates? Can I say "allow application to connect for this application session"? Then when the app quits, it won't be allowed to connect out again, unless it's whitelisted.

I think Little Snitch has that feature, but it might go against RS’s design: http://news.ycombinator.com/item?id=2886679

seconded. and an opt-in growl notification for applications that are trying to outbound connect.

I would like to see whitelist as well. Looks nice. Good luck.