Re: P3P Header Issue...

Martin Presler-Marshall <[email protected]> Thu, 12 Sep 2002 12:16:47 -0400
Newsgroups gmane.comp.web.p3p.policy
Message-ID <[email protected]>




      With IBM HTTP Server (and other Apache-based servers) on Unix, you
need to uncomment both of these lines:
LoadModule headers_module libexec/mod_headers.so
AddModule mod_headers.c

      If you haven't activated both of these lines, you won't get P3P
headers.

      -- Martin

Martin Presler-Marshall - WebSphere Portal Server Performance & Privacy
E-mail: [email protected]     AIM: jhreingold
Phone: (919) 254-7819 (tie-line 444-7819) Fax: (919) 254-6430 (tie-line
444-6430)



                                                                                                                       
                      "Michael Knight"                                                                                 
                      <[email protected]         To:      <[email protected]>                                      
                      om>                        cc:                                                                   
                      Sent by:                   Subject: P3P Header Issue...                                          
                      www-p3p-policy-req                                                                               
                      [email protected]                                                                                      
                                                                                                                       
                                                                                                                       
                      09/11/2002 10:36                                                                                 
                      PM                                                                                               
                                                                                                                       
                                                                                                                       








I am using IBM HTTP Server on a Win2k Server and am unable to get P3P
Headers to work.
I am naturally assuming that the P3P Headers are not working because IE6 is
still blocking the site and the P3P validator is telling me that "Headers
Have No P3P Header."
I have uncommented the load header module statement in the httpd.conf file
and have put the p3p header directive in as follows:

Header append P3P "CP=\"NOI DSP COR NID CUR TAIa OUR NOR\"
policyref=\"/w3c/p3p.xml\""

I have a full P3P Policy enabled and am receiving no errors from the P3P
Validator save for the "No P3P Headers" error.
Is there something that I am missing?
I must have a Compact P3P Policy working in order for users to access the
site.

Warmest personal regards and thanks in advance,

Michael J. Knight
Security Engineer
CDGroup Inc.
www.cdgroup.com