W3C home > Mailing lists > Public > www-p3p-policy@w3.org > July 2002

RE: P3P editor

From: Rachel McEneaney <rmce@Softchoice.com>
Date: Fri, 12 Jul 2002 09:24:27 -0400
Message-ID: <9775B40AA87F7543A8538BAF206E0F3522AD52@TORMAIL01.softchoice.com>
To: "Lorrie Cranor" <lorrie@research.att.com>, <www-p3p-policy@w3.org>

Thanks for the clarification Lorrie - Much appreciated!

Rachel :D

-----Original Message-----
From: Lorrie Cranor [mailto:lorrie@research.att.com] 
Sent: Friday, July 12, 2002 9:08 AM
To: Rachel McEneaney; www-p3p-policy@w3.org
Subject: Re: P3P editor


There is only one well-known location and no conflicting information in
any of the documents you cited. The well-known location is at
/w3c/p3p.xml

Sites have the option of placing that file at another location and
referencing it in their P3P headers (as in example 2.1). Unless you have
a good reason to do this, you should just use the well-known location.

Lorrie


----- Original Message ----- 
From: "Rachel McEneaney" <rmce@Softchoice.com>
To: <www-p3p-policy@w3.org>
Sent: Friday, July 12, 2002 8:39 AM
Subject: RE: P3P editor


I'm in the process of setting up a P3P policy.  Does anyone know what is
currently the best practice or standard "Well-known location" for
policies are? I've come across conflicting guidelines for locating the
policy reference file (some finds are listed below).

Please and thanks,
Rachel

  _____  

Main Resource Guidelines for locating policy reference files state:

1. According to The platform for privacy preferences 1.0 (P3P1.0)
Specification. W3C Recommendation 16 April 2002.
(http://www.w3.org/TR/P3P/ <http://www.w3.org/TR/P3P/> )

Section 2.2.1 Well-Known Location
"...well-known" location a policy reference file would be made available
on the site at the path /w3c/p3p.xml."


2. According to The platform for privacy preferences 1.0 (P3P1.0)
Specification. W3C Recommendation 16 April 2002.
(http://www.w3.org/TR/P3P/ <http://www.w3.org/TR/P3P/> )

Example 2.1
2. Server returns content and the P3P header pointing to the policy of
the resource. HTTP/1.1 200 OK
P3P: policyref="http://catalog.example.com/P3P/PolicyReferences.xml"
Content-Type: text/html
Content-Length: 7413
Server: CC-Galaxy/1.3.18



3. 
According to The platform for privacy preferences 1.0 (P3P1.0)
Specification. W3C Recommendation 16 April 2002.
(http://www.w3.org/TR/P3P/ <http://www.w3.org/TR/P3P/> )






2.3.1 Example Policy Reference File

1. P3P policy /P3P/Policies.xml#first applies to the entire site, except
resources whose paths begin with /catalog, /cgi-bin, or /servlet. 
2. P3P policy /P3P/Policies.xml#second applies to all
resources whose paths begin with /catalog. 
3. P3P policy /P3P/Policies.xml#third applies to all
resources whose paths begin with /cgi-bin or /servlet, except for
/servlet/unknown. 


4. According to The P3P Implementation Guide By Laurel Jamtgaard* and
the Internet Education Foundation  (http://www.p3ptoolbox.org/guide/
<http://www.p3ptoolbox.org/guide/> )    

Section IV: 
P3P Policy Reference File (p3p.xml)     

"Location: The file should be placed in the /w3c directory on the server
(called the Well-known location) and named .p3p.xml"


5. According to The Platform for Privacy Preferences 1.0 Deployment
Guide [W3C Note 11 February 2002]
(http://www.w3.org/TR/p3pdeployment#Locating_PRF
<http://www.w3.org/TR/p3pdeployment#Locating_PRF>  ). 

2.3 Locating The Policy Reference File 
"...Place the a policy reference file in the "well-known location" (at
the location /w3c/p3p.xml on the site) "

 
 
Received on Friday, 12 July 2002 09:24:34 UTC

This archive was generated by hypermail 2.4.0 : Friday, 17 January 2020 22:42:54 UTC