RE: P3P editor

I'm in the process of setting up a P3P policy.  Does anyone know what is
currently the best practice or standard "Well-known location" for
policies are? I've come across conflicting guidelines for locating the
policy reference file (some finds are listed below).

Please and thanks,
Rachel

  _____  

Main Resource Guidelines for locating policy reference files state:

1.	According to The platform for privacy preferences 1.0 (P3P1.0)
Specification. W3C Recommendation 16 April 2002.
(http://www.w3.org/TR/P3P/ <http://www.w3.org/TR/P3P/> )
	
	Section 2.2.1 Well-Known Location
	"...well-known" location a policy reference file would be made
available on the site at the path /w3c/p3p.xml."
	
	
2.	According to The platform for privacy preferences 1.0 (P3P1.0)
Specification. W3C Recommendation 16 April 2002.
(http://www.w3.org/TR/P3P/ <http://www.w3.org/TR/P3P/> )
	
	Example 2.1
	2. Server returns content and the P3P header pointing to the
policy of the resource.
	HTTP/1.1 200 OK
	P3P:
policyref="http://catalog.example.com/P3P/PolicyReferences.xml"
	Content-Type: text/html
	Content-Length: 7413
	Server: CC-Galaxy/1.3.18
	
	
	
3.	
	According to The platform for privacy preferences 1.0 (P3P1.0)
Specification. W3C Recommendation 16 April 2002.
(http://www.w3.org/TR/P3P/ <http://www.w3.org/TR/P3P/> )
	
	
	
	
	
	
	2.3.1 Example Policy Reference File

	1.	P3P policy /P3P/Policies.xml#first applies to the entire
site, except resources whose paths begin with /catalog, /cgi-bin, or
/servlet. 
	2.	P3P policy /P3P/Policies.xml#second applies to all
resources whose paths begin with /catalog. 
	3.	P3P policy /P3P/Policies.xml#third applies to all
resources whose paths begin with /cgi-bin or /servlet, except for
/servlet/unknown. 
		

4.	According to The P3P Implementation Guide By Laurel Jamtgaard*
and the Internet Education Foundation  (http://www.p3ptoolbox.org/guide/
<http://www.p3ptoolbox.org/guide/> )    
	
	Section IV: 
	P3P Policy Reference File (p3p.xml)     
	
	"Location: The file should be placed in the /w3c directory on
the server (called the Well-known location) and named .p3p.xml"
	
	
5.	According to The Platform for Privacy Preferences 1.0 Deployment
Guide [W3C Note 11 February 2002]
(http://www.w3.org/TR/p3pdeployment#Locating_PRF
<http://www.w3.org/TR/p3pdeployment#Locating_PRF>  ). 
	
	2.3 Locating The Policy Reference File 
	"...Place the a policy reference file in the "well-known
location" (at the location /w3c/p3p.xml on the site) "

 
 

Received on Friday, 12 July 2002 08:40:21 UTC