I'd go a bit farther (further, fuhrer, father) and pop up a warning whenever the user (customer) clicks on a website that doesn't say "I WILL NOT TRACK YOU". If the customer (since that's what we are nowadays) wants, they can disable the TRACK notification globally or per site.
Just like we can negotiate protocols while exchanging those getting-to-know-you handshakes, perhaps we should require the site to supply a token that indicates that tracking is not performed. If the site is found cheating, public stoning and blacklists would be appropriate.
Biting the hand that feeds IT
