Re: P3P and IE 6.0

On 1/14/03 10:02 AM, "[email protected]"
<[email protected]> wrote:

> 
> Hello Folks,
> 
> Just a few clarifications on Internet Explorer 6.0's Policy  & P3P.
> 
> 1) Viewing Policy file with Proxy
> 
>    During an implementation of P3P, I came across a problem where I was
>    not able to view my sites P3P Policy using IE6.0 if I connected
> through a proxy.
> 
>    The scenario was, when I try to view the sites policy through IE
>    the IE sends a GET /w3c/p3p.xml which is rejected by the proxy server
> ( Microsoft ISA).
>    The proxy server rejects the request for authentication.
> 
>    However, for a normal rejected http request ( i.e when retrieving a
> html page)
>    IE seems to send the GET request second time with the authentication
>    information.
> 
>    But this kind of *repeat try* pattern is not followed when retreving
> the
>    Policy file by the IE6 policy window.
> 
>    I was clueless of this issue until I ran a packet sniffer.
>    After this I tried a direct connection and things worked.
> 
>    Is this a known issue ?
>

Yes this is a known issue.



> 2) P3P HTML Link Tag
>    This is regarding the policy reference link tag (present in the html)
> with IE6.
> 
>    The issue I had was I had created a customized directory where I
> placed the
>    policy reference file. However IE always tried to pick it up from the
> /w3c/p3p.xml.
> 
>    Any idea why IE doesnt look in the customised policy reference
> location ?

IE6 (and all P3P user agents) should first check /w3c/p3p.xml -- if they
don't find a policy reference file there they will then look for a P3P
header and/or a link tag.

Lorrie


--
Lorrie Faith Cranor - http://lorrie.cranor.org/
P3P Specification Working Group Chair - http://www.w3.org/p3p/
New book: Web Privacy with P3P - http://p3pbook.com/