Re: [Moderator Action] scope of compact policy tokens

Please note that the Specification also says:
The policy specified in a P3P compact policy applies to data stored
within all cookies set in the same HTTP response as the compact policy,
all cookies set by scripts associated with that HTTP response, and also
to data linked to the cookies.

This means, that if the cookie is replayed (collected) together with the
login-page, you have to state that in your CP. The best way to solve the
issue is to translate your full policy into a compact policy.

Please read carefully the section 4.5 Transforming a P3P Policy to a
Compact Policy of the P3P Specification[1]
  1. http://www.w3.org/TR/P3P/#full_into_compact

Best, 
-- 
Rigo Wenning            W3C/INRIA
Policy Analyst          Privacy Activity Lead
mail:rigo@w3.org        2004, Routes des Lucioles
http://www.w3.org/      F-06902 Sophia Antipolis

On Wed, Feb 06, 2002 at 05:11:25PM -0500, bettys letter wrote:
> The P3P spec states:
> "In P3Pv1, compact policies contain policy information related to cookies 
> (cf. [COOKIES] and [STATE]) only."
> 
> I take this to mean that the only information being described by compact 
> elements and tokens, then, is information collected by or contained in 
> cookies.
> 
> As such would this then mean that these tokens are not intended to describe 
> other information collected on the site through active mechanisms such as 
> registration and opt-in unless such information is collected by or 
> contained in a cookie?
> 
> 
> 
> 
> 
> 
> 
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.

Received on Thursday, 7 February 2002 18:52:13 UTC