Fw: Change to safe zone to include client-side certificates

The P3P Specification working group adopted the following
clarifications to section 2.4.3 of the spec:

----- Original Message -----
From: "Martin Presler-Marshall" <mpresler@us.ibm.com>
To: <w3c-p3p-specification@w3.org>; <lorrie@research.att.com>
Sent: Wednesday, August 08, 2001 10:04 AM
Subject: Change to safe zone to include client-side certificates


>      I have updated section 2.4.3 of the spec to include mention that
> servers SHOULD NOT require a digital certificate from the client to handle
> safe zone requests. At the same time, I reorganized the text to make it
> easier to see the client and server requirements. I also made it clear
that
> the safe zone applies to policy and PRF requests (that was implied, and I
> believe intended, but not made 100% clear). Finally, I removed an obsolete
> paragraph about how clients MUST ignore any P3P headers which are returned
> on safe-zone requests.
>
>      Here is the new version:
> (See attached file: Section-243.html)
>
>      -- Martin
>
> Martin Presler-Marshall - Program Manager, Privacy Technology
> E-mail: mpresler@us.ibm.com     AIM: jhreingold
> Phone: (919) 254-7819 (tie-line 444-7819) Fax: (919) 254-6430 (tie-line
> 444-6430)

Received on Tuesday, 14 August 2001 17:03:55 UTC