Re: Invalid Namespace Issue
Rigo Wenning <[email protected]> Thu, 30 Sep 2004 23:31:56 +0200
| Newsgroups | gmane.comp.web.p3p.policy |
|---|---|
| Organization | W3C |
| Message-ID | <[email protected]> |
--nextPart1515153.mnCXpWKzFb
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Dear William,=20
Your file looks like this:
<?xml version=3D"1.0" ?>=20
<META xmlns=3D"http://www.w3.org/2002/01/P3Pv1">
<POLICY-REFERENCES>
<POLICY-REF about=3D"http://www.qtrnote.com/w3c/policy.xml">
<INCLUDE>\*</INCLUDE>
<COOKIE-INCLUDE name=3D"*" value=3D"*" domain=3D"*" path=3D"*"/>
</POLICY-REF>
</POLICY-REFERENCES>
</META>
1/ the <?xml version=3D"1.0" ?> directs the validator to the pure=20
XML namespace, not to P3P ;)
Remove <?xml version=3D"1.0" ?>
2/ in the about=3D, you don't need a full path, as the policy=20
is on the same machine
3/ The notion of path in P3P is according to RFC 2396. This=20
means don't use \, but use / instead
4/ your cookie include is kind of dangerous, as it would apply=20
your policy on everything the cookie is replayed to. You should=20
really limit this at least with the domain.
According to this, your p3p.xml should look like this:
<META xmlns=3D"http://www.w3.org/2002/01/P3Pv1">
<POLICY-REFERENCES>
<POLICY-REF about=3D"/w3c/policy.xml">
<INCLUDE>/*</INCLUDE>
<COOKIE-INCLUDE name=3D"*" value=3D"*" domain=3D"*.qtrnote.com" path=
=3D"*"/>
</POLICY-REF>
</POLICY-REFERENCES>
</META>
Now the validator should be happy..
Best,=20
=2D-=20
Rigo Wenning W3C/ERCIM
Staff Counsel Privacy Activity Lead
mail:[email protected] 2004, Routes des Lucioles
http://www.w3.org/ F-06902 Sophia Antipolis
Am Thursday 30 September 2004 17:56 verlautbarte William C Hesselbein Jr :
> When I use the validator for http://www.qtrnote.com I get the
> following:
>
>
> /w3c/p3p.xml has invalid namespace
> http://www.w3.org/2000/12/p3pv1.
>
>
> Validator could not find P3P policy file. Validation aborted.
>
>
> I dont understand what I have done wrong. All of the sites on the
> compliant list do the same thing. Using IE6, I cannot login to my
> site, which does Cookies. Can anyone help??
>
>
> Thanks,
>
>
> Bill Hesselbein
--nextPart1515153.mnCXpWKzFb
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQFBXHtNCRlGO2Cxp/0RAoq8AJ9DHM+YqxN/uZLuIpEXCK15hs6UEQCfU8Be
yPBsdmwMtjQngWiVRgXUltQ=
=aq6v
-----END PGP SIGNATURE-----
--nextPart1515153.mnCXpWKzFb--