W3C home > Mailing lists > Public > public-tracking@w3.org > November 2011

RE: Issue-17, Issue-51 First party obligations

From: Shane Wiley <wileys@yahoo-inc.com>
Date: Wed, 30 Nov 2011 15:20:02 -0800
To: John Simpson <john@consumerwatchdog.org>
CC: Karl Dubost <karld@opera.com>, JC Cannon <jccannon@microsoft.com>, "<public-tracking@w3.org> (public-tracking@w3.org)" <public-tracking@w3.org>
Message-ID: <63294A1959410048A33AEE161379C8023D04DC020F@SP2-EX07VS02.ds.corp.yahoo.com>
John,

The concept of leveraging one account to authentic into another's service is called "OpenAuth" and is what we were referring to earlier in the thread.  It's my suggestion that leveraging OpenAuth does NOT allow the authentication party to become a 1st party on a 3rd party site and would still be subject to DNT.  The 3rd party authentication service should be allowed to record the actual authentication event for operational and security purposes, but no further data collection should occur from that point forward.

- Shane

From: John Simpson [mailto:john@consumerwatchdog.org]
Sent: Wednesday, November 30, 2011 3:41 PM
To: John Simpson
Cc: Shane Wiley; Karl Dubost; JC Cannon; <public-tracking@w3.org> (public-tracking@w3.org)
Subject: Re: Issue-17, Issue-51 First party obligations

Shane,

Apologies.

I finally visited the Flickr site and confess my failure to understand that it was associated with Yahoo! stems from my abstract and vague knowledge that Flickr is a site that offers the ability to share photos. I had not realized it was acquired by Yahoo!  Once there, it is clearly sponsored by Yahoo!  I was asked to sign in with my Yahoo account or create one.

But I also had the option to sign in with either a Facebook or Google account.  If I chose to sign in using either of those two accounts, what happens?  Are they now 1st party sites as well?

Thanks,
John


On Nov 30, 2011, at 11:51 AM, John Simpson wrote:


Shane and Karl,

I certainly agree that user studies are key.  I hope Shane can find a way to share some of his information.

Best,
John

On Nov 30, 2011, at 9:04 AM, Shane Wiley wrote:


Karl,

I have internal data in this area (user focus groups, community forums, feedback channels from users directly, etc.) but nothing I can share publically.  I agree more research in this area generally will be helpful but for the specific Yahoo! use case I'm confident users understand that Flickr is part of Yahoo!.  Let me look into what I can share externally...

- Shane

-----Original Message-----
From: Karl Dubost [mailto:karld@opera.com]
Sent: Wednesday, November 30, 2011 11:58 AM
To: Shane Wiley
Cc: John Simpson; JC Cannon; <public-tracking@w3.org<mailto:public-tracking@w3.org>> (public-tracking@w3.org<mailto:public-tracking@w3.org>)
Subject: Re: Issue-17, Issue-51 First party obligations


Le 30 nov. 2011 à 11:55, Shane Wiley a écrit :

And you base this belief on.?

please. this kind of statement goes both ways. :)
We need user studies to assess that. I said it previously in the thread.

--
Karl Dubost - http://dev.opera.com/
Developer Relations & Tools, Opera Software

----------
John M. Simpson
Consumer Advocate
Consumer Watchdog
1750 Ocean Park Blvd. ,Suite 200
Santa Monica, CA,90405
Tel: 310-392-7041
Cell: 310-292-1902
www.ConsumerWatchdog.org<http://www.ConsumerWatchdog.org/>
john@consumerwatchdog.org<mailto:john@consumerwatchdog.org>


----------
John M. Simpson
Consumer Advocate
Consumer Watchdog
1750 Ocean Park Blvd. ,Suite 200
Santa Monica, CA,90405
Tel: 310-392-7041
Cell: 310-292-1902
www.ConsumerWatchdog.org<http://www.ConsumerWatchdog.org>
john@consumerwatchdog.org<mailto:john@consumerwatchdog.org>
Received on Wednesday, 30 November 2011 23:21:34 UTC

This archive was generated by hypermail 2.3.1 : Friday, 21 June 2013 10:11:22 UTC