Implementing p3p
"Hamblin, Shelia" <[email protected]> Tue, 24 Feb 2004 13:09:25 -0500
| Newsgroups | gmane.comp.web.p3p.policy |
|---|---|
| Message-ID | <[email protected]> |
This message is in MIME format. Since your mail reader does not understand this format, some or all of this message may not be legible. ------_=_NextPart_001_01C3FB01.5631CEA2 Content-Type: text/plain; charset="iso-8859-1" Hello, I am trying to implement p3p on our federal website, but I am not sure how best to do it. We collect the usual web logs and we set session cookies, but we also have pages that allow people to join listservs. The question I have is should I combine all of these into one policy, or separate them? If I combine them, then I have to choose (in the <ACCESS> field) whether we collect personally identifiable information or not, which for the most part we don't. If I create a separate policy for the listservs, then this policy does not discuss the web logs or cookies on our site. Other federal agencies seem to be using only one policy, but I'm not sure if this is correct. Any help is great appreciated. Thanks, Shelia Hamblin US Department of Education OCIO/Development Services Group (202) 205-2140 ------_=_NextPart_001_01C3FB01.5631CEA2 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN"> <HTML> <HEAD> <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; = charset=3Diso-8859-1"> <META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version = 5.5.2655.35"> <TITLE>Implementing p3p</TITLE> </HEAD> <BODY> <P><FONT SIZE=3D2 FACE=3D"Arial">Hello,</FONT> </P> <P><FONT SIZE=3D2 FACE=3D"Arial">I am trying to implement p3p on our = federal website, but I am not sure how best to do it. We collect = the usual web logs and we set session cookies, but we also have pages = that allow people to join listservs. The question I have is = should I combine all of these into one policy, or separate them? = If I combine them, then I have to choose (in the <ACCESS> field) = whether we collect personally identifiable information or not, which = for the most part we don't. If I create a separate policy for the = listservs, then this policy does not discuss the web logs or cookies on = our site. Other federal agencies seem to be using only one = policy, but I'm not sure if this is correct. Any help is great = appreciated.</FONT></P> <P><FONT SIZE=3D2 FACE=3D"Arial">Thanks,</FONT> <BR><FONT SIZE=3D2 FACE=3D"Arial">Shelia Hamblin</FONT> <BR><FONT SIZE=3D2 FACE=3D"Arial">US Department of Education</FONT> <BR><FONT SIZE=3D2 FACE=3D"Arial">OCIO/Development Services = Group</FONT> <BR><FONT SIZE=3D2 FACE=3D"Arial">(202) 205-2140</FONT> </P> </BODY> </HTML> ------_=_NextPart_001_01C3FB01.5631CEA2--