Re: P3P and https

Good point... I don't think that bug has been fixed yet.
Well the other way to verify that the CP is being sent is
to use a utility that fetches a resourse from a URL and
displays the headers -- for example gnu wget or
cURL.

Lorrie

----- Original Message -----
From: "Carter St.Clair" <[email protected]>
To: <[email protected]>
Sent: Wednesday, November 13, 2002 12:00 AM
Subject: Re: P3P and https


>
> But doesn't the validator choke on SSL?
>
> -Carter St.Clair
>  http://codeinfusion.com
>  http://p3pedit.com
>  ICQ: 164437506
>
>
> ----- Original Message -----
> From: "Lorrie Cranor" <[email protected]>
> To: "Mahesh Kuriakose" <[email protected]>;
<[email protected]>
> Sent: Tuesday, November 12, 2002 11:54 PM
> Subject: Re: P3P and https
>
>
> >
> > Have you verified that your server is actually sending the
> > CP when you use https? You can use the W3C P3P validator
> > to check this.
> >
> > Lorrie
> >
> >
> > ----- Original Message -----
> > From: "Mahesh Kuriakose" <[email protected]>
> > To: <[email protected]>
> > Sent: Tuesday, November 12, 2002 7:02 AM
> > Subject: P3P and https
> >
> >
> > >
> > > Hi,
> > > We are having a site which works entirely in https. We
> > > are trying to incorporate the p3p into this site. The
> > > problem we are facing is, the user agent is not
> > > evaluating the policy which is coming through the
> > > header info "P3P CP= .....". If i use an http
> > > instance, the policies are getting evaluated. Kindly
> > > let me know, why?
> > >
> > > Regards,
> > > Mahesh
> > >
> > >
> > > __________________________________________________
> > > Do you Yahoo!?
> > > U2 on LAUNCH - Exclusive greatest hits videos
> > > http://launch.yahoo.com/u2
> > >
> > >
>
>