- From: Nicholas Doty <npdoty@w3.org>
- Date: Mon, 22 Oct 2012 20:50:07 -0700
- To: Tracking Protection Working Group <public-tracking@w3.org>
- Cc: "Roy T. Fielding" <fielding@gbiv.com>, David Singer <singer@apple.com>, Adrian Bateman <adrianba@microsoft.com>
- Message-Id: <EAE1FE46-6425-4F40-AD06-1464C86097E6@w3.org>
The diff included below (also attached) would update the draft to move the JS doNotTrack property to window (from navigator) and remove the requestDNTStatus( ) method (which would now be redundant). This builds on my proposal in ACTION-241, with the changes suggested by Roy [0] and with apparent support at the Amsterdam f2f. I remain concerned about possible different interpretations about the granularity of the expressed preference.
Editors, I haven't applied this change yet because I want to double-check that this is what you and the group have in mind.
Thanks,
Nick
[0] http://www.w3.org/mid/87153944-7250-4152-8832-27F86CC191CA@gbiv.com
Index: drafts/tracking-dnt.html
===================================================================
RCS file: /w3ccvs/WWW/2011/tracking-protection/drafts/tracking-dnt.html,v
retrieving revision 1.171
diff -r1.171 tracking-dnt.html
420,421c420,421
< A <a>doNotTrack</a> attribute on the <code>Navigator</code>
< interface [[!NAVIGATOR]] (e.g., the <code>window.navigator</code>
---
> A <a>doNotTrack</a> attribute on the <code>Window</code>
> interface [[!WINDOW]] (e.g., the <code>window</code>
423,425c423,425
< general tracking preference to scripts running within a top-level
< page. A user agent MUST provide a <code>doNotTrack</code> attribute
< on the <code>Navigator</code> interface for each top-level page.
---
> tracking preference to scripts running within a browsing context. A
> user agent MUST provide a <code>doNotTrack</code> attribute
> on the <code>Window</code> interface for each page.
427c427
< <dl class="idl" title='partial interface Navigator {
---
> <dl class="idl" title='partial interface Window {
436,440c436,439
< class="sectionRef"></a>) to an origin server that does not have
< any corresponding user-granted exceptions.
< When a tracking preference is <a>not enabled</a>, the
< <code>doNotTrack</code> attribute for each top-level page MUST
< have a value of <code>null</code>.
---
> class="sectionRef"></a>) to the origin server for the
> corresponding window. When a tracking preference is <a>not
> enabled</a>, the <code>doNotTrack</code> attribute for each page
> MUST have a value of <code>null</code>.
444,449c443,447
< The <code>doNotTrack</code> attribute only provides the user's
< general tracking preference, independent of any user-granted
< exceptions or out-of-band consent. A script wishing to determine
< the specific tracking preference for a given document origin is
< expected to use the API in <a href="#exceptions-enquiry"
< class="sectionRef"></a>.
---
> The <code>doNotTrack</code> attribute provides the user's tracking
> preference for the window's origin, including any user-granted
> exceptions. A script wishing to determine the specific tracking
> preference for a different document origin is expected to use the
> API in <a href="#exceptions-enquiry" class="sectionRef"></a>.
463a462,473
> <p class="issue" data-number="160" title="Do we need an exception-query API?">
> <b>[PENDING REVIEW]</b> It might be useful, and 'complete the
> model', if we had a JS API that told a host what its current
> exception status is in a given context. See proposal here.<br />
> <b>Proposal</b>: The window-level <code>doNotTrack</code>
> attribute returns the DNT header would be sent to the window's
> document origin, including whether that origin has a user-granted
> exception. This obviates the need for a non-parameterized query
> method. In general the group has not supported a separate
> parameterized method that would let a script determine the
> exception status for some other origin.
> </p>
1709,1731c1719
< </section>
<
< <section id="exceptions-enquiry" >
< <h2>Querying a host's exception status</h2>
< <p class="issue" data-number="160" title="Do we need an exception-query API?"><b>[PENDING REVIEW]</b>
< It might be useful, and 'complete the model', if we had a JS API that told a host what its current exception status is in a given context. See proposal here.<br />
< <b>Proposal</b>: Specifically, an API QueryExceptionStatus() which examines the <b>document origin</b> of the script, the current <b>top-level domain</b> and returns an empty string if no DNT header would be sent to that document origin, or the exact DNT header (DNT:1 or DNT:0) that would be sent otherwise.
< </p>
< <dl class="idl" title='[NoInterfaceObject] interface NavigatorDoNotTrack'>
< <dt>DOMString requestDNTStatus( )</dt>
< <dd>
< Returns the same string value that would be sent in a
< <a>DNT-field-value</a> (<a href="#dnt-header-field"
< class="sectionRef"></a>) to a <strong>target</strong> that is the
< document-origin of the request, in the
< context of the current <strong>top-level domain</strong>. If no DNT
< header would be sent (e.g. because a tracking preference is
< <a>not enabled</a>) the return value is <code>null</code>.
< </dd>
< </dl>
<
< </section>
<
---
> </section>
Attachments
- application/octet-stream attachment: action-318.diff
Received on Tuesday, 23 October 2012 03:50:17 UTC