Re: [comment] P3P 1.1 Well Known Location

Karl Dubost <[email protected]> Mon, 3 Apr 2006 09:57:25 +0900
Newsgroups gmane.comp.web.p3p.devel
Message-ID <[email protected]>

Le 06-03-31 =E0 12:17, Karl Dubost a =E9crit :

> [[[
> 2.2.1 Well-Known Location
>
> Web sites using P3P MAY (and, are strongly encouraged to) place a =20
> policy reference file in a "well-known" location. To do this, a =20
> policy reference file would be made available on the site at the =20
> path /w3c/p3p.xml
> ]]]
>
> -- The Platform for Privacy Preferences 1.1 (P3P1.1) Specification
> http://www.w3.org/TR/2006/WD-P3P11-20060210/#Well_Known_Location
> Mon, 13 Feb 2006 15:51:33 GMT

After discussion with Rigo, I remove my formal objections but I still =20=

maintain my issue about this chapter.

1. I would first remove (and, are strongly encouraged to).
    We are trying to teach people and specifically companies that =20
it's not good to create a specific URI for a specific feature. Many =20
people have always excellent reasons to do so, but I really think =20
that we should not encourage this.

2. We should first give all the possible methods to achieve the =20
feature and as the last choice (if no other possible choices) to rely =20=

on the WKL.

3. the P3P specification mentions it too. A Website is not a domain =20
name. It can be a subpart of a domain or even a collection of URIs on =20=

different domains. I would encourage you to review and cross-check =20
your specification with
    http://www.w3.org/2001/tag/doc/mime-respect-20060307
    See also the message of Mark Nottingham about it
    http://lists.w3.org/Archives/Public/www-tag/2006Mar/0049

Best Regards

--=20
Karl Dubost - http://www.w3.org/People/karl/
W3C Conformance Manager, QA Activity Lead
   QA Weblog - http://www.w3.org/QA/
      *** Be Strict To Be Cool ***