The question really is quality vs quantity.

Blacklist = quantity
Whitelist = quality (though that depends on how you evaluate whitelist requests)

Personally I'd say stay with a whitelist. Its a better choice in the long run I think.