W3C home > Mailing lists > Public > www-p3p-dev@w3.org > March 2002

Re: no cookies at 3rd party

From: Lorrie Cranor <lorrie@research.att.com>
Date: Wed, 20 Mar 2002 22:52:28 -0500
Message-ID: <00ab01c1d08b$fc4b2820$3e06cf87@research.att.com>
To: "marKo" <beheer@willywortel.nl>, <www-p3p-dev@w3.org>
In order to prevent IE6 from blocking third-party cookies you
must have a "satisfactory" P3P compact policy in the
same HTTP response that contains the set-cookie headers.
See
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/dnpriv/html
/ie6privacyfeature.asp

----- Original Message -----
From: "marKo" <beheer@willywortel.nl>
To: <www-p3p-dev@w3.org>
Sent: Wednesday, March 20, 2002 9:33 AM
Subject: no cookies at 3rd party


> Hi all,
>
> The problem I've encountered is about the same as the one posted
> previously by Miles Sampson.
> I'm having a domain hosted at one server and all database
> stuff on an other. Both have different IP numbers. Now there's
> an index file with a framesetting on the first server that loads a page
from the second
> server. Any cookies set at the second server will be treated by
> IE6 as thirdparty cookies because the parent domain is different from
> the domain the cookies are set from.
>
> Right? Right.
>
> All third partycookies are blocked in most security settings so people
> using IE 6 cannot log in at server number 2.
> So when I was informed of this problem I set up all p3p stuff and a
> guideline for my IE 6 users to workaround this problem. I tell them
> to check "Always allow this site to use cookies" and press the OK
> button.
>
> When all is set & done IE6 still won't allow cookies from my second
server.
>
> I'm getting a bit annoyed by now because this site needs this cookie. If
> there's a clever workaround please let me know.
>
>
> Regards,
>
> Marko.
>
> beheer@willywortel.nl
>
>
>
>
Received on Wednesday, 20 March 2002 22:55:04 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 18 June 2010 00:12:47 GMT