&gt; Just allowing the TLD and any obvious CDNs covers about 95% of all websites.<p>I know about the options NoScript provides, but I see this statement itself as part of the problem. If we just whitelist sites that we use and see (to have them work), we&#x27;re not really stopping tracking, are we? We&#x27;re just guarding against unknown sites. Most people visit perhaps 10 major sites on a regular basis everyday, and all the popular ones that people would whitelist use trackers.<p>I&#x27;m not denying the benefit of being protected from unknown, obscure and malicious sites that we may land in once in a while and things like XSS protection, but that alone is not enough in this context.<p>What we need is either a trusted block-list for NoScript that&#x27;s updated periodically, similar to block-lists that exist for ad-blockers, or some other mechanism that can curb the tracking potential of scripts (I don&#x27;t know the answer for the latter).