In addition, there are some domains confirmed by Microsoft that need to be whitelisted, namely clientconfig.passport.net
clientconfig.passport.net