W3C home > Mailing lists > Public > www-p3p-policy@w3.org > August 2002

Re: Policy for an Internet registry

From: Lorrie Cranor <lorrie@research.att.com>
Date: Tue, 13 Aug 2002 13:04:19 -0400
Message-ID: <00ae01c242eb$76b311f0$9816cf87@barbaloot>
To: "Stephane Bortzmeyer" <bortzmeyer@nic.fr>, <www-p3p-policy@w3.org>

I don't know if any of the domain registries have implemented
P3P. You can certainly try visiting some of their web sites
with a P3P user agent such as Privacy Bird (http://privacybird.com/)
and see if any of them are P3P-enabled.

As for the question about optional phone number publishing...
It sounds to me like you are collecting the phone number
from everyone, so the phone number itself is not optional.
There is a choice about how the phone number will be shared.
The recipients for phone number might be <ours/> (or whatever
is appropriate based on your practices) or they might be
<public/>. What you would need to do is group the data
you collect into two data groups  (or possibly more) -- one
for the data that users have a choice about
publishing and one for data which there is no choice.
In the data group where there is a choice you would
 <RECIPIENTS><ours/><public required="opt-out"/></RECIPIENTS>
or something like that.


Lorrie Cranor

----- Original Message -----
From: "Stephane Bortzmeyer" <bortzmeyer@nic.fr>
To: <www-p3p-policy@w3.org>
Sent: Tuesday, August 13, 2002 12:19 PM
Subject: Policy for an Internet registry

> I'm a lazy beginner in P3P and I would like to know if there is an
> already existing policy file for an Internet domain
> registry. Registries are the entities which keep the databases of
> domains for a given Top Level Domain like .fr *and* which keep the
> "social" information, individual names, addresses, etc, which are
> reachable by whois and similar services.
> Not that I want to use it out-of-the-box which would defeat the
> purpose of P3P. But I want to use it as a way to learn P3P and as a
> check list of things I could otherwise forget about.
> For instance, we plan to let contacts decide if they want their phone
> number published or not. I do not really see how to say it in P3P. The
> "required" attribute seems the solution but it is an attribute of
> PURPOSE's child, not of the DATA elements? I wanted to write:
> <DATA ref="#user.home-info.online.telecom.telephone" required="opt-out"/>
> But it seems illegal.

Lorrie Faith Cranor - http://lorrie.cranor.org/
P3P Specification Working Group Chair - http://www.w3.org/p3p/
New book: Web Privacy with P3P - http://p3pbook.com/
Received on Tuesday, 13 August 2002 13:13:01 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 20:01:08 UTC