There are various reasons why no one has chosen to implement that standard. My personal discomfort is that it basically punts on the security portion and leaves most of the scary stuff entirely at the discretion of the implementor. For that reason alone I personally think the spec is a non-starter.

Opera implemented it.