That's going to go terribly awry with today's mention of ISPs that inject their own code into HTTP responses. I mean, aside from the "inspecting the barrel of a loaded gun" factor.