But won't somebody think of the poor businesses who'll surely be driven to ruin if they can't track my every step?
These people keep shitting in the well, and yelling at us for buying bottled water.
These people keep shitting in the well, and yelling at us for buying bottled water.
Even when that means losing all the third-party goodness (CDNs, analytics, cloud providers...) that we've come to depend on. Yep, they save an uncountable amount of time and effort - but at the cost of tracking users' every step... We can't have one without the other!
Cloudflare's CDNJS sets, by default, crossorigin=anonymous and subresource integrity. Add a "Referrer-Policy: no-referrer" header, and all the CDN sees is either a) nothing, because the client has the resource cached or b) a request for a certain version of jQuery without knowing where it came from.
If you think this is a good idea because it enables technical enforcement, do you also want to ban static.example.com? Because if you don't, you'll soon have pointstothirdpartyadserver.example.com. If you do, you'll have https://example.com/proxytothirdpartyadserver/ instead...
This is not a problem that can be completely solved on a technical level. Enforce the hell out of GDPR and see the problem shrink.
What are the difficulties for a browser to provide such a feature by default?
There is already a system for all of that. It's called the browser cache.
If this is where we push the industry, it will be a huge win for users.
<?PHP echo(file_get_contents("http://google.com/nefarious_crap.html")); ?>I could not give less of a shit about justification of bad behavior by invoking market demand, if it leads to me finding a turd in my drinking water.
Unless, of course, it leads to the dawning of understanding that maybe the Econ-101 understanding of supply-and-demand is a spherical-cow level of analogy that rapidly breaks down when it encounters the real world, and that regulation isn't a toxin.