Re: [www-p3p-policy] <none>

on 10/1/01 3:45 PM, Clifford Lyon at Clifford.Lyon@cnet.com wrote:

> Q: The W3C states that a compact policy header is optional, but cookies do not
> seem to work without it. Is a compact policy header required?
> 
> Answer: Although compact policies are optional for P3P compliance, they are
> required by Microsoft Internet Explorer to determine the Web site's privacy
> practices concerning cookies.
> 
> Also, Apache supplies a facility for setting additional headers - mod_header.

If you only have a few pages to do, it might be sufficient to have this meta
tag in your head:

<meta http-equiv="P3P" content='CP="YOUR_CP" policyref="YOUR_REF_URI"'>

I haven't seen this in the deployment docs, so maybe there's a problem with
this method, but it does put the P3P into the header in my testing.

HTH

Ken Martin