Re: tracking-ISSUE-272: first- and third-party interactions [TCS Last Call]

Multiple commenters referred to this issue and it seemed like the group had many comments in response. The editor doesn't draft/collect all of those responses here, but it seemed likely that there has been some confusion about what first-party and third-party to a given user action actually means or how it's used in the document.

In particular, there are requirements on first-party compliance, as noted in Section 3.2 First Party Compliance. And see resolutions of issue-219 and issue-221.

Regarding the subdomain alternative suggested by EFF:
Implementation for a particular domain or sub-domain doesn't seem to actually capture the practices of sites that, for example, have some content available for embedding, or have some content that users intentionally interact with and some content that is invisibly embedded in other contexts. The group has preferred to use those user-centric definitions. It seems that the EFF policy still relies heavily on definitions of first- and third-party in its end-user explanation (https://www.eff.org/pages/understanding-effs-do-not-track-policy-universal-opt-out-tracking), perhaps because the distinction has a user-relevant privacy difference.

Proposal: no change. Group can contribute longer comment responses as need be. If anyone has suggestions on how to make it even more clear that the specification's first-/third-party distinction is just in terms of how a party is interacting with a user rather than a distinction between companies, the editor is all ears.

—npd

> On Nov 5, 2015, at 10:38 PM, Tracking Protection Working Group Issue Tracker <sysbot+tracker@w3.org> wrote:
> 
> tracking-ISSUE-272: first- and third-party interactions [TCS Last Call]
> 
> http://www.w3.org/2011/tracking-protection/track/issues/272
> 
> Raised by: Nick Doty
> On product: TCS Last Call
> 
> Multiple commenters raise questions about the application of DNT Compliance in first- as well as third-party interactions.
> 
> Article 29: https://lists.w3.org/Archives/Public/public-tracking-comments/2015Oct/att-0003/20151001_Ares_2015_4048580_W3C_compliance.pdf
> Senator Markey: https://lists.w3.org/Archives/Public/public-tracking-comments/2015Oct/0004.html
> Turn Inc: https://lists.w3.org/Archives/Public/public-tracking-comments/2015Oct/0006.html
> EFF: https://lists.w3.org/Archives/Public/public-tracking-comments/2015Oct/0009.html
> 
> The EFF comment specifically provides an alternative regarding subdomains.
> 
> 
>