W3C home > Mailing lists > Public > public-p3p-spec@w3.org > August 2003

Comments on UA TF translations

From: Rigo Wenning <rigo@w3.org>
Date: Thu, 14 Aug 2003 16:35:34 +0200
To: Lorrie Cranor <lorrie@research.att.com>
Cc: public-p3p-spec@w3.org
Message-ID: <20030814143534.GU547@rigo.w3.org>


Lorrie, late but hopefully not too late: my 2 cents after re-reading the
draft.
=======================================================================
On Element opturi (attribute of POLICY element)

It currently says: Find out how to opt-out at [with link to opturi]

But the opturi can also be a uri to opt-in. By standardizing the text
above, we prevent the expression of opturi as opt-in

=======================================================================
<ACCESS><all />

It says: We give you access to all of our information that identifies
you

I'm a bit reluctant with my pigeon-english to comment here, but there
might be data attached to a record of a natural person that does not
identify this person but just enhances the profile. What about:

We give you access to all of our information about you

Hmm.. reading further in ACCESS, there is a mixture of "identifies you"
and "information about you". This could be canonicalized for better
understanding.
=======================================================================

<DISPUTES>

it says often "[display long description and short description, if
provided, with hyperlink to service URI]"

shouldn't we provide a default in the absence of such a description?

This could resolve some of the concerns of David Stampley, as we might
say: If other dispute resolutions have failed, you could ultimately go
to court with your case (which is always true ;) This makes more sense
for <law />. Your rights are ultimately protected by law.

=======================================================================

<REMEDIES> 

I agree with the concerns of David Stampley concerning the <law />
element.

=======================================================================

<NON-IDENTIFIABLE>

it says:

"We do not keep any information that could be used to identify you
personally"

But in fact, this is a question of retention. Non-identifiable means:

We do not collect any information that could be used to identify you
personally

=======================================================================

The rest is okay. I did not find any further thing that would merit a
comment. So I consider this already very good.

Rigo



On Wed, Jul 30, 2003 at 12:15:28PM -0400, Lorrie Cranor wrote:
> Lorrie posted a revised matrix and has invited public comments by 13 
> August. This will allow us to make another pass at revisions by the end 
> of August so they can be incorporated in the next browser releases.
Received on Thursday, 14 August 2003 10:35:47 EDT

This archive was generated by hypermail pre-2.1.9 : Wednesday, 17 March 2004 17:46:27 EST