Re: IE6, p3p, cookies
"Curtis Lacy" <[email protected]> Wed, 14 Jan 2004 16:35:55 -0800
| Newsgroups | gmane.comp.web.p3p.devel |
|---|---|
| Message-ID | <000601c3daff$8ca6e790$e3e84b43@cel> |
This is a multi-part message in MIME format.
------=_NextPart_000_0003_01C3DABC.7B5FD250
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
There is a workaround for the IE6.0 P3P/cookie problem stated in my =
earlier note. [I had a policy built by the IBM P3P editor, put the =
reference file in the well-known location, had it checked by the =
validator, which said the policy was satisfactory for all levels of =
IE6.0 privacy, cookies wouldn't set. Tried sending the compact policy =
as an HTTP header with the page which set the cookies; still no luck.]
The workaround is to send a 'bogus' compact policy which will satisfy IE =
6.0, i.e., in PHP you can do
header('P3P: CP=3D"NOI ADM DEV PSAi COM NAV OUR OTRo STP IND DEM"');=20
This is not a satisfactory solution, since it may or may not bear any =
relation to your actual policy. As it happens, our policy is to use =
info we collect strictly for tending to business on our website, and it =
goes no further.
Here's the compact policy generated by the editor, which said the policy =
was good for all privacy levels:
header('CP=3D"NON DSP COR CUR ADMa DEVa OUR IND PHY ONL UNI FIN DEM"');
If anyone understands why IE 6.0 doesn't like this one, I'd be glad to =
learn about it.
Curtis Lacy
[email protected]
------=_NextPart_000_0003_01C3DABC.7B5FD250
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1276" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT face=3DArial size=3D2>There is a workaround for the IE6.0 =
P3P/cookie=20
problem stated in my earlier note. [I had a policy built by the =
IBM P3P=20
editor, put the reference file in the well-known location, had it =
checked by the=20
validator, which said the policy was satisfactory for all levels of =
IE6.0=20
privacy, cookies wouldn't set. Tried sending the compact policy as =
an HTTP=20
header with the page which set the cookies; still no luck.]</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>The workaround is to send a 'bogus' =
compact policy=20
which will satisfy IE 6.0, i.e., in PHP you can do</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>header('P3P: CP=3D"NOI ADM DEV PSAi COM =
NAV OUR OTRo=20
STP IND DEM"'); </FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>This is not a satisfactory solution, =
since it may=20
or may not bear any relation to your actual policy. As it happens, =
our=20
policy is to use info we collect strictly for tending to business on our =
website, and it goes no further.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Here's the compact policy generated by =
the editor,=20
which said the policy was good for all privacy levels:</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>header('CP=3D"NON DSP COR CUR ADMa DEVa =
OUR IND PHY=20
ONL UNI FIN DEM"');</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>If anyone understands why IE 6.0 =
doesn't like this=20
one, I'd be glad to learn about it.</FONT></DIV>
<DIV><FONT face=3DArial size=3D2></FONT> </DIV>
<DIV><FONT face=3DArial size=3D2>Curtis Lacy</FONT></DIV>
<DIV><FONT face=3DArial size=3D2><A=20
href=3D"mailto:[email protected]">cel1</FONT><FONT face=3DArial=20
size=3D2>@ix.netcom.com</A></FONT></DIV>
<DIV> </DIV></BODY></HTML>
------=_NextPart_000_0003_01C3DABC.7B5FD250--