[gfodor]

Your idea would likely break any site on the internet that uses authentication and subdomins, isn't it clear why this isn't being considered?

[zaroth]

Or sites could opt-in to this with a header?

EDIT: homakov says the same thing down thread.

[hrjet]

Yes, it is backwards incompatible. Perhaps it could be enforced in HTTP 2?