- From: Roy Fielding via cvs-syncmail <cvsmail@w3.org>
- Date: Tue, 07 Aug 2012 01:58:20 +0000
- To: public-tracking-commit@w3.org
Update of /w3ccvs/WWW/2011/tracking-protection/drafts
In directory hutz:/tmp/cvs-serv30595
Modified Files:
tracking-dnt.html
Log Message:
ISSUE-128: Use 409 status code for tracking required
Index: tracking-dnt.html
===================================================================
RCS file: /w3ccvs/WWW/2011/tracking-protection/drafts/tracking-dnt.html,v
retrieving revision 1.139
retrieving revision 1.140
diff -u -d -r1.139 -r1.140
--- tracking-dnt.html 7 Aug 2012 01:27:25 -0000 1.139
+++ tracking-dnt.html 7 Aug 2012 01:58:18 -0000 1.140
@@ -1104,12 +1104,23 @@
<h3>Status Code for Tracking Required</h3>
<p>
- An HTTP error response status code might be useful for indicating
- that the site refuses service unless the user either logs into a
- subscription account or agrees to an exception to DNT for this
- site and its contracted third-party sites.
+ If an origin server receives a request with <code>DNT:1</code>,
+ does not have out-of-band consent for tracking this user, and
+ wishes to deny access to the requested resource until the user
+ provides some form of user-granted exception or consent for tracking,
+ then the origin server SHOULD send an HTTP error response with a
+ status code of 409 (Conflict) and a message body that describes
+ why the request has been refused and how one might supply the
+ required consent or exception to avoid this conflict [[!HTTP11]].
+ </p>
+ <p>
+ The 409 response SHOULD include a user authentication mechanism in
+ the header fields and/or message body if user login is one of the
+ ways through which access is granted.
+ </p>
+ <p class='issue'><a href="http://www.w3.org/2011/tracking-protection/track/issues/128">ISSUE-128</a>: HTTP error status code to signal that tracking is required?<br />
+ <b>[PENDING REVIEW]</b> As defined by this section.
</p>
- <p class='issue'><a href="http://www.w3.org/2011/tracking-protection/track/issues/128">ISSUE-128</a>: HTTP error status code to signal that tracking is required?</p>
</section>
<section id='using-tracking-status'>
Received on Tuesday, 7 August 2012 01:58:21 UTC