W3C home > Mailing lists > Public > public-tracking@w3.org > March 2012

Re: Logged-In Exception (ISSUE-65)

From: Jonathan Robert Mayer <jmayer@stanford.edu>
Date: Thu, 15 Mar 2012 19:10:26 -0700 (PDT)
Message-Id: <E35FABFB-1BAF-4521-AE56-BC1FC1DA0EE9@stanford.edu>
To: Sid Stamm <sid@mozilla.com>
Cc: JC Cannon <jccannon@microsoft.com>, Rigo Wenning <rigo@w3.org>, "public-tracking@w3.org" <public-tracking@w3.org>
I would add that we could specify new browser functionality to facilitate cookie-free DNT decision making. For example, we might specify a well-known location that never gets cookies sent. Or we might specify a new attribute (e.g. "no-cookies") that causes cookies to not get sent when a resource loads.

Jonathan

On Mar 15, 2012, at 6:45 PM, Jonathan Mayer <jmayer@stanford.edu> wrote:

> Sid -  I'm not sure how my proposal maps to your thinking.  Let me give a quick sketch of how the Facebook like button might work under my preferred approach.
> 
> 1) Facebook tests whether Do Not Track is enabled for facebook.com without receiving an account ID cookie.  (One possible design: load a cached resource that redirects based on DNT status.)
> 
> 2) If Do Not Track is not enabled, the like button loads as usual.  If Do Not Track is enabled, an unpersonalized like button loads, again without Facebook receiving an account ID cookie.  (Serving the button from the Facebook CDN, fbcdn.net, would be one implementation option.)
> 
> Jonathan
> 
> On Mar 15, 2012, at 6:22 PM, Sid Stamm wrote:
> 
>> So I guess it's not that black and white.  Let me clarify a bit...
>> 
>> On 3/15/2012 5:02 PM, Sid Stamm wrote:
>>> I can get behind this. Function without tracking when logged in.  
>> 
>> By this I mean "Function without recording my activity when logged-in."
>> 
>> 
>>> I wonder, are there cases where function is exactly tracking (when logged 
>>> in)?
>> 
>> And by this I mean "Are there cases where the function provided
>> absolutely requires and is only recording my activity before I interact
>> with the third party (for sites where I'm logged in)?  I'm talking about
>> function that immediately benefits the user in the context of the first
>> party."
>> 
>> -Sid
>> 
>>> 
>>> -Sid
>>> 
>>> On 3/15/2012 4:46 PM, JC Cannon wrote:
>>>> Now we just need to get the others to agree. :)
>>>> 
>>>> JC
>>>> 
>>>> -----Original Message-----
>>>> From: Rigo Wenning [mailto:rigo@w3.org] 
>>>> Sent: Thursday, March 15, 2012 2:39 AM
>>>> To: public-tracking@w3.org
>>>> Cc: JC Cannon
>>>> Subject: Re: Logged-In Exception (ISSUE-65)
>>>> 
>>>> JC, 
>>>> 
>>>> On Wednesday 14 March 2012 16:28:27 JC Cannon wrote:
>>>>> Specific scenario: User logs into FB and navigates to CNN.com to read an
>>>>> article. The user is able to see the FB friends that liked the article.
>>>>> However, FB should not log the fact that the user has viewed the article or
>>>>> even gone to CNN unless the user clicks on the FB Like button.
>>>>> 
>>>>> If feel this type of behavior would be expected and I personally like this
>>>>> type of feature.
>>>> 
>>>> This was the point I was trying to make in my earlier email (and use case). 
>>>> How come we agree on things? :)
>>>> 
>>>> Rigo
>>>> 
>>>> 
>>>> 
>>> 
>> 
> 
> 
Received on Friday, 16 March 2012 02:10:56 UTC

This archive was generated by hypermail 2.3.1 : Friday, 21 June 2013 10:11:26 UTC