From 40e5b7d3105e2d54171c3c890ee8e6d695b5551b Mon Sep 17 00:00:00 2001
From: Dan Finlay <542863+danfinlay@users.noreply.github.com>
Date: Wed, 26 Feb 2020 09:55:05 -0800
Subject: [PATCH] Create block policy

We never had a block policy documented before. I am adding the beginnings of one now.
---
 README.md | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/README.md b/README.md
index b8ba0a7..39adc72 100644
--- a/README.md
+++ b/README.md
@@ -6,6 +6,14 @@ Utility for detecting phishing domains targeting Ethereum users.
 
 For checking why a given domain was blocked, try our interactive page [here](https://metamask.github.io/eth-phishing-detect)
 
+## Blocking Policy
+
+We are constantly evolving the ideal policy that guides this list, but a few clearly defined rules have emerged. We will be quick and decisive to block websites that:
+- Impersonate other known and established sites.
+- Use their interfaces to collect user signing keys (especially cryptocurrency keys) and send them back to home servers.
+
+There are other grounds for blocking, and we will ultimately do our best to keep our users safe.
+
 ### basic usage
 
 ```js