At this point the server has a chance to 'opt-out' of this transaction. Currently, when a user goes to a web site, they must agree to the privacy policy of that web site. This can result in massive, but unfortunately legal, privacy violations. If a company files for bankruptcy it has little incentive to preserve your privacy. It might choose to maximize its worth by selling its customer database.
Companies often keep credit card information within an internal database.
If this system is cracked these numbers can be stolen. The mechanism is very simple, adding one additional HTTP header prior to an HTTP request being transferred. You will not give my information out to others and you understand that I maintain copyright on all original information and its compilation. In order to be able to opt-out a web site must have a reliable mechanism to determine what policies are encoded here. Try to get this incorporated into Mozilla 1.0.