3 ms·

aka: "if you aren't doing anything wrong, what've you got to hide"

• bd 17y ago
  Not necessarily "wrong". For example, you could have an internal company wiki which would include links to competitor's site.
• mustpax 17y ago
  Unfortunately, public protocols like HTTP need to manage communication between parties that do not trust each other. This is not a legal matter, so there is no necessity to establish motives or plausibility. A secure protocol is charged with limiting the damage any malicious party using the protocol might do. This addition to the spec is contrary to that fact. Allowing a site to scrub its outgoing connections assumes a certain level of trust, which on the web ought not exist by default.