- From: \\mike O'Neill <michael.oneill@baycloud.com>
- Date: Wed, 19 Sep 2012 07:08:30 +0200
- To: "'David Singer'" <singer@apple.com>, "'Nicholas Doty'" <npdoty@w3.org>
- Cc: "'Rigo Wenning'" <rigo@w3.org>, <public-tracking@w3.org>
We could have an optional (defaults to false) parameter to call for the UA to ask to set the general preference NavigatorDoNotTrack.requestSiteSpecificTrackingException(callBack, siteName, explanationString, detailURI, promptForGeneralPreference) If promptForGeneralPreference is true the UA triggers the general preference request dialog. One problem, if the exception API is used by a site when DNT is unset they would receive DNT:0 in subsequent requests and would then have no way to tell if that user/device had the general preference set (unless they used a cookie!) Mike -----Original Message----- From: David Singer [mailto:singer@apple.com] Sent: 19 September 2012 01:57 To: Nicholas Doty Cc: Rigo Wenning; public-tracking@w3.org; Mike O'Neill Subject: Re: DNT:0 and API On Sep 18, 2012, at 16:49 , Nicholas Doty <npdoty@w3.org> wrote: > On Sep 17, 2012, at 2:07 PM, David Singer <singer@apple.com> wrote: >> I think this is possible today, though it's the first I recall thinking about it. The site would detect a visit with no DNT header, and asks you for an exception (and then the usual exception processing goes on). >> >> I guess if a site wants to do this, it should work, and we should make sure nothing has been written that implies the converse. Unless there is a snag I ain't seeing. >> >>> On Thursday 13 September 2012 12:07:19 Mike O'Neill wrote: >>>> The exception API could be amended slightly to make the UA pop up a >>>> UI if DNT is unset. In jurisdictions needing explicit consent (like >>>> EU), publishers could be required by regulators to use that form of >>>> the API (i.e. if DNT is unset then ask the user how they want to >>>> handle it, e.g. leave it unset or specify 1 or 0). > > http://www.w3.org/2011/tracking-protection/drafts/tracking-dnt.html#ex > ceptions-when-not-enabled > > Section 6.9, "Exceptions without a DNT header", in the current draft was written in part to enable just this functionality. User agents may expose the JS exception API methods to a site even if DNT is unset, and then use those preferences to subsequently send a DNT:0 header. > > (I wrote this section, at the suggestion of Shane, I believe.) > and I forgot it, my apologies > Thanks, > Nick David Singer Multimedia and Software Standards, Apple Inc.
Received on Wednesday, 19 September 2012 05:08:59 UTC