[lemieux]

> No cross-site loading of any kind; all source material MUST come from the domain you are on. This would seriously break some sites but it would close large gaps in security and tracking.

This would probably break almost everything. Who doesn't use some sort of a CDN nowadays?

[Zikes]

A better alternative would be to promote the use of Content-Security-Policy, perhaps by requiring it be used in order to load source material from an alternate domain.

[ChikkaChiChi]

You can still use a CDN through your own domain. It wouldn't be perfect, but it would be something.