Re: cookies and the evidence for APPEL

Dear Sebastian,

according to section 5.1 "The Rule Evaluator in a Nutshell" in the latest
APPEL spec:

	"in case multiple P3P policies are available, the user agent SHOULD
	call the rule evaluator repeatedly and feed it each policy
	separately (in any order)."

It is up to the user agent to decide what to do with the resulting
information. In the case of a page with multiple cookies, the decisions on
cookie blocking may be made on a per-cookie basis if each cookie has its
own policy. 

> From: "Sebastian Kamp" <kamp@ti.informatik.uni-kiel.de>
> To: <www-p3p-dev@w3.org>
> Cc: <www-p3p-policy@w3.org>
> Sent: Monday, May 21, 2001 5:39 AM
> Subject: cookies and the evidence for APPEL
>
> does anybody know what happens to the evidence of an appel rule 
> evaluator if there are multiple policies for a single request?
>
> Paragraph 2.1 of the APPEL specification states: "Evidence [input for an
> appel rule evaluator] includes the URI of the service and a single P3P
> policy from the service if present".  In the case of cookies send (back)
> with a request, however, a P3P agent might end up with multiple policies
> (one for the URL itself and one for each cookie) that have to be fetched
> and of course evaluated for that single request.
>
> regards
> Sebastian Kamp


Regards,

Marc
-- 
Marc Langheinrich <langhein@inf.ethz.ch>
Dep. of Computer Science, ETH Zentrum IFW D48.2, 8092 Zurich, Switzerland
fon: +41-1-632-0688, fax: +41-1-632-1659, web: www.inf.ethz.ch/~langhein/

Received on Sunday, 29 July 2001 06:24:35 UTC