Re: IE6, cookies & P3P

I can't make a statement on Microsoft's policy on implementing
P3P. I hope, that they will implement full P3P as the compact
policies have a bunch of disadvantages. 

If you serve your cookies from your site, than IE6 considers them
"third party cookies". "Third party cookies" without P3P compact
policies are blocked by any preference other than Low, if they
have no privacy policy. Be sure to send the compact header
already with the set-cookie. 

On the long run, you should think about an overall strategy of
privacy with your partners and include full P3P Policies into
this strategy...

Best, 

Rigo

On Wed, Oct 10, 2001 at 11:56:52PM +0200, jeanmichel.depasse@mindshare.be wrote:
> 
> Dear Rigo,
> 
> Thanks a lot for giving an answer so quikly.
> 
> My problem comes to the fact we are producing cookies for a network of
> sites. I don't know if the best way, according to our servers and regarding
> to the technique used by the P3P and IE6 to check the compliant policy, for
> me is to provide our policy from partners sites of my network or from my
> side. I'm afraid to se my traffic growing so fast my servers could explode
> ;-). In an other side, I think to put the policy on the partners sites
> could delay the cookie process and the procedure of my work.
> 
> Do you think P3P policy could evolve quikly or are we going to wait IE7
> before next upgrate?
> 
> Best
> 
> Jean-Michel Depasse
> mdigital Manager
> mdigital Belgium
> 00.32.2.678.25.45
> 
> 
> 
> 
> Rigo Wenning <rigo@w3.org>@w3.org> on 10/10/2001 09:07:55
> 
> To:   jeanmichel.depasse@mindshare.be
> cc:   www-p3p-policy@w3.org
> Subject:  IE6, cookies & P3P
> 
> 
> Dear Jean-Michel,
> 
> I think, if you don't collect any personal information, you could
> express that in P3P and your method would work again. IE6 is only
> rejecting third party cookies, that have no P3P-Policy. But IE6
> only looks into compact-policies, which have a very reduced
> expression-power.
> 
> I suggest therefor, that you consider implementing P3P on your
> site. I also suggest to implement full policies for the
> user-agents to come. You can even contact your data-commissioner,
> who might help you implementing.
> 
> For further discussion, you can subscribe to
> www-p3p-policy@w3.org mailing-list by sending a mail to
> www-p3p-policy-request@w3.org with "subscribe" in the subject.
> Posting is restricted to subscribers for reasons of
> SPAM-prevention.
> 
> Best,
> 
> 
> Rigo Wenning            W3C/INRIA
> Policy Analyst          Privacy Activity Lead
> mail:rigo@w3.org        2004, Routes des Lucioles
> +33 (0)6 73 84 87 31    F-06902 Sophia Antipolis
> http://www.w3.org/
> 
> ----- Forwarded message from jeanmichel.depasse@mindshare.be -----
> 
> From: jeanmichel.depasse@mindshare.be
> To: www-p3p-policy@w3.org
> Date: Mon, 8 Oct 2001 15:04:15 -0400 (EDT)
> Subject: [Moderator Action] IE6, cookies & P3P
> >From rigo  Tue Oct  9 11:43:36 2001
> Envelope-to: rigo@localhost
> Delivery-date: Tue, 09 Oct 2001 11:43:36 +0200
> Old-Date: Mon, 8 Oct 2001 21:02:29 +0200
> 
> Hi,
> 
> Is their a way IE6 can allow cookies from third party without looking at
> privacy preferences from the users? I m working in the media field and to
> mesure sites traffic we need to work with cookies. IE 6 will not allow it.
> How can we do if we want to continue our work? The objetcive is not to work
> on profiles but on sites traffic. I don't see the problem with privacy at a
> user level. Sites are working with us but we wan't be able to put cookies
> anymore.
> 
> Thanks in advance for you help.
> 
> Best regards
> Jean-Michel Depasse
> Digital Manager
> mdigital Belgium
> MindShare Belgium
> 00.32.2.678.25.45
> 
> 
> ----- End forwarded message -----
> 
> 
> 
>

Received on Wednesday, 31 October 2001 11:28:13 UTC