Re: [fwd] IE 6.0 and P3P Policies Problems with Cookies

Dear Smart Folks,

I am currently involved with a P3P "audit" and repair recommendation for
some exceedlingly large sites...

That being said, in the commercial world IMHO the driving force is going
to be to make sites IE6 compliant, and not P3P per se. That is how it
looks from here, since the introduction of IE6 is forcing the issue.

I have read with great interest your discussion on the requirement by IE6
to have compact policies associated with 3rd party cookies. One of the
applications ("ABC Ad Banner") I am working on potentially does not have
the ability to issue compact headers when laying an ad on a page of a
first party site.

Am I correct to assume this is a Large Problem? Additionally, is anyone
else aware of IE6 specific issues in implementing P3P?? And lastly, is it
known fact that IE6 does not read the XML policy of third parties.

Thank you very much, you all are providing a great service in discussing
these issues...

-janice

On Mon, 22 Oct 2001, Lorrie Cranor wrote:

> I don't know of any web servers that scan policies to
> generate compact policies. Typically you would use
> software such as the IBM P3P Policy Editor to
> read your full policy and generate a compact policy.
> You would then have to configure your server to
> add the compact policy header.
> 
> But note that compact policies are optional. If you
> are setting third party cookies you are advised to use
> them, or you may find your cookies blocked by IE6.
> 
> Lorrie
> 
> ----- Original Message -----
> From: "Rigo Wenning" <rigo@w3.org>
> To: <www-p3p-policy@w3.org>
> Sent: Sunday, October 21, 2001 11:46 PM
> Subject: [fwd] IE 6.0 and P3P Policies Problems with Cookies
> 
> 
> > ----- Forwarded message from "Reddy, Ramesh" <reddyr@agedwards.com> -----
> >
> > From: "Reddy, Ramesh" <reddyr@agedwards.com>
> > To: "'www-p3p-policy@w3.org'" <www-p3p-policy@w3.org>
> > Date: Thu, 18 Oct 2001 17:50:10 -0400 (EDT)
> > Subject: [Moderator Action] IE 6.0 and P3P Policies Problems with Cookies
> > >From rigo  Fri Oct 19 06:31:04 2001
> > Envelope-to: rigo@localhost
> > Delivery-date: Fri, 19 Oct 2001 06:31:04 +0200
> > Old-Date: Thu, 18 Oct 2001 16:48:18 -0500
> > X-Mailer: Internet Mail Service (5.5.2650.21)
> >
> > Hi,
> >
> > Is it sufficient  to provide the full P3P policy file for the cookies,
> > without supplying the Compact Policy? I have read in the specification
> that
> > Compact Policies are optional. However, it also mentioned that the Web
> > Servers are supposed to scan through the full p3p policy files and
> generate
> > the Compact Policies for the cookies. If our web server not yet compatible
> > with P3P policies(tomcat 3.2), doesn't this mean I have no option but
> > provide the compact policy in the http header even though I have the full
> > policy in place?
> >
> > Thanks in advance for any reply.
> >
> > Ramesh..
> >
> >
> >
> ****************************************************************************
> ***********
> > WARNING:  All e-mail sent to and from this address will be received or
> > otherwise recorded by the A.G. Edwards corporate e-mail system and is
> > subject to archival, monitoring or review by, and/or disclosure to,
> > someone other than the recipient.
> >
> ****************************************************************************
> ***********
> >
> > ----- End forwarded message -----
> >
> >
> 
>

Received on Monday, 22 October 2001 13:28:21 UTC