(sorry to break threading but I'm getting this from multiple lists)

> that IE 6 (beta at the time) considered my cookies to be third party
> because I used frame-based domain redirection and by default would not
> accept them.

You need to include a P3P header in your HTTP header that contains a
Compact Policy (CP) - a geek code of what your P3P xml privacy document
contains.  See http://www.w3c.org/P3P/.

Some research I did seems to indicate that current implementations of IE6
 will accept cookies no matter what CP you use (rather than checking it
against your security settings and deciding if the CP represents a
privacy policy that violates your chosen level of disclosure.)  I'd really
appreciate it other people could check this and confirm that IE6 is not
offering any actual privacy level protection and is just discriminated
against people that don't have P3P headers.

My (Profero's) module for automagically converting a P3P document (the 
xml) into a CP (the geek-code version of that xml document) is in beta
here:

http://twoshortplanks.com/temp/P3P-ToCP-0.02.tar.gz

Please test, break and get back to me when it doesn't work.  It just 
follows the spec and uses XML::XPath to pull the stuff out.

Later

Mark.

-- 
s''  Mark Fowler                                     London.pm   Bath.pm
     http://www.twoshortplanks.com/              [EMAIL PROTECTED]
';use Term'Cap;$t=Tgetent Term'Cap{};print$t->Tputs(cl);for$w(split/  +/
){for(0..30){$|=print$t->Tgoto(cm,$_,$y)." $w";select$k,$k,$k,.03}$y+=2}

Reply via email to