W3C home > Mailing lists > Public > public-tracking@w3.org > November 2012

Re: action-307, issue-119, absolutely not tracking

From: David Wainberg <david@networkadvertising.org>
Date: Thu, 08 Nov 2012 09:11:56 -0500
Message-ID: <509BBDAC.30701@networkadvertising.org>
To: David Singer <singer@apple.com>
CC: "public-tracking@w3.org WG" <public-tracking@w3.org>
Hi David,

I realize you've proposed non-normative. Consider this largely directed 
at the issue in general.

<broken record>
We have not defined tracking. So how then are we to identify sites that 
perform no tracking? At best we might allow sites to say that they 
believe they are not subject to any requirements of the standard. But 
why wouldn't they be unless they are collecting and using no data at 
all? Is that what this is for? But surely these sites collect server 
logs and such that contain information about users' activity across 
unaffiliated websites, and is therefore subject to the same risks or 
harms group members have ascribed to the same data in the hands of third 
party advertising companies.
</broken record>

-David


On 11/7/12 12:35 PM, David Singer wrote:
> (The issue asks for normative text, the action for non-normative, this is non-normative).  We need to tell sites that basically are not in the tracking business what they need to do…
>
>
>
>
> There are circumstances in which sites will appear in as third parties in a transaction, but those sites perform little or no tracking. Such sites might include those providing libraries of resources, such as scripts, style-sheets, or images, or sites providing content intended to be 'mashed up' into other sites. Unfortunately, it is not possible to distinguish, among the sites that do not implement Do Not Track, those that track but do not (yet) implement DNT, and sites that do not track.
>
> For this reason, it is recommended that these non-tracking sites implement a static well-known resource and/or a static DNT response header, indicating their status. The recommended status is '3' (fully third-party compliant, with no qualifiers and no permissions claimed) or '3s' (third party, claiming only the short-term logging permission).  If logging is performed, then complying with the requirements for short-term logging may be necessary, to be compliant under these specifications.
>
>
> David Singer
> Multimedia and Software Standards, Apple Inc.
>
>
Received on Thursday, 8 November 2012 14:12:35 UTC

This archive was generated by hypermail 2.3.1 : Friday, 21 June 2013 10:11:38 UTC