W3C home > Mailing lists > Public > www-p3p-dev@w3.org > August 2001

Fw: Change to safe zone to include client-side certificates

From: Lorrie Cranor <lorrie@research.att.com>
Date: Tue, 14 Aug 2001 16:49:42 -0400
Message-ID: <03c901c12502$a4e64040$3a06cf87@research.att.com>
To: <www-p3p-dev@w3.org>
The P3P Specification working group adopted the following
clarifications to section 2.4.3 of the spec:

----- Original Message -----
From: "Martin Presler-Marshall" <mpresler@us.ibm.com>
To: <w3c-p3p-specification@w3.org>; <lorrie@research.att.com>
Sent: Wednesday, August 08, 2001 10:04 AM
Subject: Change to safe zone to include client-side certificates


>      I have updated section 2.4.3 of the spec to include mention that
> servers SHOULD NOT require a digital certificate from the client to handle
> safe zone requests. At the same time, I reorganized the text to make it
> easier to see the client and server requirements. I also made it clear
that
> the safe zone applies to policy and PRF requests (that was implied, and I
> believe intended, but not made 100% clear). Finally, I removed an obsolete
> paragraph about how clients MUST ignore any P3P headers which are returned
> on safe-zone requests.
>
>      Here is the new version:
> (See attached file: Section-243.html)
>
>      -- Martin
>
> Martin Presler-Marshall - Program Manager, Privacy Technology
> E-mail: mpresler@us.ibm.com     AIM: jhreingold
> Phone: (919) 254-7819 (tie-line 444-7819) Fax: (919) 254-6430 (tie-line
> 444-6430)


Received on Tuesday, 14 August 2001 17:03:55 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 18 June 2010 00:12:47 GMT