W3C home > Mailing lists > Public > public-tracking@w3.org > May 2012

ACTION-169 ISSUE-61 same-party relations

From: Rigo Wenning <rigo@w3.org>
Date: Fri, 04 May 2012 10:37:03 +0200
To: public-tracking@w3.org
Message-ID: <1661836.K2dYj2aTVz@hegel.sophia.w3.org>
Hi all, 

at our Washington F2F meeting, I was tasked to write up text describing "if 
your privacy policies don't match, don't claim an associated domain". This 
was subsequent to a discussion on 12 April:
http://www.w3.org/2012/04/12-dnt-minutes
saying:
Rigo: If we allow for lists where somebody can say "a,b,c,d,e belong to me 
and are the same" and A responds that they honor DNT, and the rest don't, 
and A says 'not my business', then you go into a problem saying that if you 
state that others belong to you, you have to take responsibility for that

This addresses Section 5.2.2 Representation of the Tracking Preference 
Expression Specification:
http://www.w3.org/2011/tracking-protection/drafts/tracking-dnt.html#status-
representation

I suggest to add the following text: after the paragraph starting with 
"An optional member named same-party may"
If a legal entity responsible for the orgin-server making such declarations 
of additional domains in the <code>same-party</code> field is responsible 
for the correctness of the statements made about those <code>same-
party</code> sites in the file on the origin-server as if it would be a 
representation about the origin-server itself. 

I encourage all to look at 
http://www.w3.org/TR/P3P11/#oho
Where P3P 1.1 solved the same issue.

Best, 

Rigo
Received on Friday, 4 May 2012 08:37:28 UTC

This archive was generated by hypermail 2.3.1 : Friday, 21 June 2013 10:11:28 UTC