CDNs are already broken unfortunately. Both Firefox and Chrome use per-site caches [0]. But many sites serve their own resources via a CDN for performance and

CDNs are already broken unfortunately. Both Firefox and Chrome use per-site caches [0]. But many sites serve their own resources via a CDN for performance and resilience reasons. The major CDNs have the capability to record a lot of history about where systems reachable at a certain IP address have been visiting online. And of course it's impossible for a site that works that way to ask your permission before doing so because it has no way to communicate with you first. The same is true for other services like DNS. That's reasonable, and the GDPR doens't stop you from doing that, but it does mean that you must tell the user that you're loading it from a third party, ask permission to do so, and list the data that you're sharing with that party in exchange for them providing those resources. Which is the problem. The logical end result would be like the "cookie consent" junk but much worse. Do we really want a WWW where every service someone encounters needs explicit permission to do its job even if that job is simply to send some generic information to the IP address that requested it? Are we all going to have to download the DNS records for the entire Internet to our local systems every few minutes as well? What about other things we do online that necessarily involving remote servers, like sending an email? Does every system involved in forwarding a message I send to a dozen friends now have to contact me (how?!) and obtain my permission before forwarding the message to the next link in the chain? There ought to be some reasonable limits to protect privacy. I don't think a website for a medical facility should automatically use Google Maps to show a route from a patient's home address to their facility. But in that case the information request on the user's behalf is much more specific. It's not just the user at 127.0.0.1 visiting some (unknown) site that uses a popular web font for its text and the user's browser then fetches the relevant data from Google Fonts without asking first.