Re: Invalid Namespace Issue

Rigo Wenning <[email protected]> Thu, 30 Sep 2004 23:31:56 +0200
Newsgroups gmane.comp.web.p3p.policy
Organization W3C
Message-ID <[email protected]>
--nextPart1515153.mnCXpWKzFb
Content-Type: text/plain;
  charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline

Dear William,=20

Your file looks like this:

<?xml version=3D"1.0" ?>=20
<META xmlns=3D"http://www.w3.org/2002/01/P3Pv1">
 <POLICY-REFERENCES>
    <POLICY-REF about=3D"http://www.qtrnote.com/w3c/policy.xml">
       <INCLUDE>\*</INCLUDE>
       <COOKIE-INCLUDE name=3D"*" value=3D"*" domain=3D"*" path=3D"*"/>
    </POLICY-REF>
 </POLICY-REFERENCES>
</META>

1/ the <?xml version=3D"1.0" ?> directs the validator to the pure=20
XML namespace, not to P3P ;)
Remove <?xml version=3D"1.0" ?>

2/ in the about=3D, you don't need a full path, as the policy=20
is on the same machine

3/ The notion of path in P3P is according to RFC 2396. This=20
means don't use \, but use / instead

4/ your cookie include is kind of dangerous, as it would apply=20
your policy on everything the cookie is replayed to. You should=20
really limit this at least with the domain.

According to this, your p3p.xml should look like this:
<META xmlns=3D"http://www.w3.org/2002/01/P3Pv1">
 <POLICY-REFERENCES>
    <POLICY-REF about=3D"/w3c/policy.xml">
       <INCLUDE>/*</INCLUDE>
       <COOKIE-INCLUDE name=3D"*" value=3D"*" domain=3D"*.qtrnote.com" path=
=3D"*"/>
    </POLICY-REF>
 </POLICY-REFERENCES>
</META>

Now the validator should be happy..

Best,=20
=2D-=20
Rigo Wenning            W3C/ERCIM
Staff Counsel           Privacy Activity Lead
mail:[email protected]        2004, Routes des Lucioles
http://www.w3.org/      F-06902 Sophia Antipolis


Am Thursday 30 September 2004 17:56 verlautbarte William C Hesselbein Jr :
> When I use the validator for http://www.qtrnote.com I get the
> following:
>
>
>     /w3c/p3p.xml has invalid namespace
> http://www.w3.org/2000/12/p3pv1.
>
>
>     Validator could not find P3P policy file. Validation aborted.
>
>
>  I dont understand what I have done wrong. All of the sites on the
>  compliant list do the same thing. Using IE6, I cannot login to my
> site, which does Cookies. Can anyone help??
>
>
>  Thanks,
>
>
>  Bill Hesselbein

--nextPart1515153.mnCXpWKzFb
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFBXHtNCRlGO2Cxp/0RAoq8AJ9DHM+YqxN/uZLuIpEXCK15hs6UEQCfU8Be
yPBsdmwMtjQngWiVRgXUltQ=
=aq6v
-----END PGP SIGNATURE-----

--nextPart1515153.mnCXpWKzFb--