I watched yesterday Dan Kaminsky's surprisingly related DEF CON 23 talk [0], where he presents a approach to UI security such that one can embed a paypal iframe

I watched yesterday Dan Kaminsky's surprisingly related DEF CON 23 talk [0], where he presents a approach to UI security such that one can embed a paypal iframe without the ability of the website to hijack it. In that context, I view the proposal as a way to combat ad stuffing. A site could give guarantees that the ad neither clogs up the browser and could guarantee that the ad is visible. Plus, the same mechanism could be used to keep the browser responsive, simply by only allowing a tab 95% of the available resources instead of all resources. (And if it is done right, a site could also forbid something like unmuted autoplay videos, by just not giving the ressources to an ad at first.) I really like the suggestion. It is only an improvement on the 95% of all sites which try to play nice, but an improved experience on most websites is a overall win. [0] https://www.youtube.com/watch?v=9wx2TnaRSGs https://www.youtube.com/watch?v=9wx2TnaRSGs