W3C home > Mailing lists > Public > www-p3p-policy@w3.org > October 2000

Re: embedded include

From: Lorrie Cranor <lorrie@research.att.com>
Date: Mon, 2 Oct 2000 20:01:39 -0400
Message-ID: <002501c02ccd$26538720$3a06cf87@research.att.com>
To: "Fiona Walsh" <Fiona.Walsh@avenuea.com>, <w3c-p3p-specification@w3.org>
Cc: <www-p3p-policy@w3.org>
Note, I'm CCing this to www-p3p-policy, as the questions raised
here are the sorts of things we would like to have discussed on this

I don't know exactly how AvenueA works. If you have contracts
directly with content publishers to put embedded images
in their content to point to ads on your servers, then it would
be appropriate for you to ask those content publishers to post
a P3P policy reference file that uses embedded includes and
points to a privacy policy on the AvenueA web site. You 
could also have your own policy reference file in addition to this
(which might be useful if not all your content publishers are
ready to use P3P just yet). 

If you are supplying ads to DoubleClick and they are the ones 
who actually serve the ads and have the contracts with the
content publishers, then it would be up to DoubleClick to
take care of posting a policy reference file and/or asking content
publishers to use embedded includes. Depending on what your
arrangement is with DoubleClick, whose privacy policy would
be in effect here might vary. I could imagine scenarios where
the appropriate privacy policy is one belonging to AvenueA,
DoubleClick, or the content publisher. 


----- Original Message ----- 
From: Fiona Walsh <Fiona.Walsh@avenuea.com>
To: <w3c-p3p-specification@w3.org>
Sent: Monday, October 02, 2000 6:07 PM
Subject: Re: embedded include

> Thanks for your responses.
> I've aggregated all your input and here's the conclusion.
> Use embedded includes if;
> 1 you have a complex url layout, so it would be impractical to have one
> valid PRF on the server itself, 
> 2 the PRF file at a well know location is going to be too large or have a
> high rate of change or
> 3 you want performance optimization by eliminating the round trip.
> A 3rd party ad server like AvenueA serves ads a) direct into a publishers
> site or b) into an ad network like DoubleClick.
> Question: should a 3rd party ad server like AvenueA use "embedded includes"?
> Mark Nottingham, Akamai stated that "embedded includes" are not intended to
> address situations where there were multiple levels of embedding, like ad
> services.
> However in the P3P spec., scenario 7 in section 2.5 states that the
> publisher (Bigsearch) can use a embedded include to point to the ad servers
> P3P policy. 
> Thoughts?
> Cheers
Received on Monday, 2 October 2000 20:05:51 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 22:42:53 UTC