W3C home > Mailing lists > Public > public-tracking@w3.org > September 2012

RE: DNT:0 and API

From: \\mike O'Neill <michael.oneill@baycloud.com>
Date: Wed, 19 Sep 2012 07:08:30 +0200
To: "'David Singer'" <singer@apple.com>, "'Nicholas Doty'" <npdoty@w3.org>
Cc: "'Rigo Wenning'" <rigo@w3.org>, <public-tracking@w3.org>
Message-ID: <005401cd9624$cfb1af90$6f150eb0$@baycloud.com>

We could have  an optional (defaults to false) parameter to call for the UA
to ask to set the general preference

NavigatorDoNotTrack.requestSiteSpecificTrackingException(callBack, siteName,
explanationString, detailURI, promptForGeneralPreference)

If promptForGeneralPreference is true the UA triggers the general preference
request dialog.

One problem, if the exception API is used by a site when DNT is unset they
would receive DNT:0 in subsequent requests and would then have no way to
tell if that user/device had the general preference set (unless they used a
cookie!)

Mike



-----Original Message-----
From: David Singer [mailto:singer@apple.com] 
Sent: 19 September 2012 01:57
To: Nicholas Doty
Cc: Rigo Wenning; public-tracking@w3.org; Mike O'Neill
Subject: Re: DNT:0 and API


On Sep 18, 2012, at 16:49 , Nicholas Doty <npdoty@w3.org> wrote:

> On Sep 17, 2012, at 2:07 PM, David Singer <singer@apple.com> wrote:
>> I think this is possible today, though it's the first I recall thinking
about it.  The site would detect a visit with no DNT header, and asks you
for an exception (and then the usual exception processing goes on).
>> 
>> I guess if a site wants to do this, it should work, and we should make
sure nothing has been written that implies the converse.  Unless there is a
snag I ain't seeing.
>> 
>>> On Thursday 13 September 2012 12:07:19 Mike O'Neill wrote:
>>>> The exception API could be amended slightly to make the UA pop up a 
>>>> UI if DNT is unset. In jurisdictions needing explicit consent (like 
>>>> EU), publishers could be required by regulators to use that form of 
>>>> the API (i.e. if DNT is unset then ask the user how they want to 
>>>> handle it, e.g. leave it unset or specify 1 or 0).
> 
> http://www.w3.org/2011/tracking-protection/drafts/tracking-dnt.html#ex
> ceptions-when-not-enabled
> 
> Section 6.9, "Exceptions without a DNT header", in the current draft was
written in part to enable just this functionality. User agents may expose
the JS exception API methods to a site even if DNT is unset, and then use
those preferences to subsequently send a DNT:0 header.
> 
> (I wrote this section, at the suggestion of Shane, I believe.)
> 

and I forgot it, my apologies

> Thanks,
> Nick

David Singer
Multimedia and Software Standards, Apple Inc.
Received on Wednesday, 19 September 2012 05:08:59 UTC

This archive was generated by hypermail 2.3.1 : Friday, 21 June 2013 10:11:34 UTC