Re: [www-p3p-policy] <none> from Lorrie Cranor on 2001-10-10 (www-p3p-policy@w3.org from October 2001)

From: Lorrie Cranor <lorrie@research.att.com>
Date: Wed, 10 Oct 2001 08:35:27 -0400
To: <www-p3p-policy@w3.org>
Cc: "Ken Martin" <ken@kpmartin.com>
Message-ID: <012601c15188$2e271580$3e06cf87@research.att.com>

> If you only have a few pages to do, it might be sufficient to have this
meta
> tag in your head:
>
> <meta http-equiv="P3P" content='CP="YOUR_CP" policyref="YOUR_REF_URI"'>
>
> I haven't seen this in the deployment docs, so maybe there's a problem
with
> this method, but it does put the P3P into the header in my testing.

This is not recommended. Not all user agents support http-equiv, and
those that do support it may not see the CP until after they evaluate
the cookie if you do this. The whole point of the CP is to allow
user agents to get a snap shot of the policy early so they can make
quick decisions about cookies.

Lorrie

Received on Wednesday, 10 October 2001 08:36:21 UTC