irt.org FAQ Knowledge Base Q1276
michel on June 18, 2001 at 02:02:52:
The reason that the files (including the frameset html) must come from the same server is a security/privacy issue.
If not, it would be possible to fake the frameset, load f.ex. e-trade into one frame and have a password grabber in a hidden frame