[prev in list] [next in list] [prev in thread] [next in thread]
List: www-p3p-policy
Subject: [www-p3p-policy] <none>
From: Rigo Wenning <rigo () w3 ! org>
Date: 2001-10-22 9:25:27
[Download RAW message or body]
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.
What I mean is even though I have Full P3P policy in place in the well-known
location, IE 6.0 will not recognize the P3P policies for the cookies. The
only way I can make IE 6.0 work is by inserting a HTTP-Header in the
response object. In the specification it is mentioned that the Web Servers
(i.e. Apache, tomcat, iis etc) are responsible for creating Compact Policy
and supplying to the user agents ( typically web browsers).
I am sure future version of these web servers support this, however for now
we have no choice but manually adding the compact policy header in the
response object.
If you are using jsp/servlets it is very easy, for example in your servlet
or jsp page do this.
/**
// HttpServletResponse resp
resp.addHeader("P3P", "CP=\"NON DSP CURa ADMa DEVa CUSa TAIa PSAa PSDa IVAa
IVDa OUR NOR UNI COM NAV \"");
*/
that it.
Ramesh..
> -----Original Message-----
> From: Martin Presler-Marshall [SMTP:mpresler@us.ibm.com]
> Sent: Monday, October 22, 2001 7:40 AM
> To: Reddy, Ramesh
> Cc: www-p3p-policy@w3.org
> Subject: Tomcat 3.2 and P3P policies
>
> How is tomcat not compatible with P3P policies? And do you mean full
> policies or compact policies?
>
> -- Martin
>
> Martin Presler-Marshall - Program Manager, Privacy Technology
> E-mail: mpresler@us.ibm.com AIM: jhreingold
> Phone: (919) 254-7819 (tie-line 444-7819) Fax: (919) 254-6430 (tie-line
> 444-6430)
***************************************************************************************
WARNING: All e-mail sent to and from this address will be received or
otherwise recorded by the A.G. Edwards corporate e-mail system and is
subject to archival, monitoring or review by, and/or disclosure to,
someone other than the recipient.
***************************************************************************************
[Attachment #3 (text/html)]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2652.35">
<TITLE>RE: Tomcat 3.2 and P3P policies</TITLE>
</HEAD>
<BODY>
<P><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">What I mean is even though I have Full \
P3P policy in place in the well-known location, IE 6.0 will not recognize the P3P \
policies for the cookies. The only way I can make IE 6.0 work is by inserting a \
HTTP-Header in the response object. In the specification it is mentioned that \
the Web Servers (i.e. Apache, tomcat, iis etc) are responsible for creating Compact \
Policy and supplying to the user agents ( typically web browsers).</FONT></P>
<P><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">I am sure future version of these web \
servers support this, however for now we have no choice but manually adding the \
compact policy header in the response object. </FONT></P>
<P><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">If you are using jsp/servlets it is very \
easy, for example in your servlet or jsp page do this.</FONT> <BR><FONT \
COLOR="#0000FF" SIZE=2 FACE="Arial">/**</FONT> <BR><FONT COLOR="#0000FF" SIZE=2 \
FACE="Arial">// HttpServletResponse resp</FONT> <BR><FONT COLOR="#0000FF" SIZE=2 \
FACE="Arial">resp.addHeader("P3P", "CP=\"NON DSP CURa ADMa DEVa \
CUSa TAIa PSAa PSDa IVAa IVDa OUR NOR UNI COM NAV \"");</FONT> <BR><FONT \
COLOR="#0000FF" SIZE=2 FACE="Arial">*/</FONT> </P>
<P><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">that it.</FONT>
</P>
<P><FONT COLOR="#0000FF" SIZE=2 FACE="Arial">Ramesh..</FONT>
</P>
<UL>
<P><FONT SIZE=1 FACE="Arial">-----Original Message-----</FONT>
<BR><B><FONT SIZE=1 FACE="Arial">From: </FONT></B> <FONT SIZE=1 \
FACE="Arial">Martin Presler-Marshall [SMTP:mpresler@us.ibm.com]</FONT> <BR><B><FONT \
SIZE=1 FACE="Arial">Sent: </FONT></B> <FONT SIZE=1 FACE="Arial">Monday, \
October 22, 2001 7:40 AM</FONT> <BR><B><FONT SIZE=1 \
FACE="Arial">To: </FONT></B> <FONT SIZE=1 FACE="Arial">Reddy, \
Ramesh</FONT> <BR><B><FONT SIZE=1 FACE="Arial">Cc: </FONT></B> \
<FONT SIZE=1 FACE="Arial">www-p3p-policy@w3.org</FONT> <BR><B><FONT SIZE=1 \
FACE="Arial">Subject: </FONT></B> <FONT \
SIZE=1 FACE="Arial">Tomcat 3.2 and P3P policies</FONT> </P>
<P><FONT SIZE=2 FACE="Arial"> How is tomcat not compatible \
with P3P policies? And do you mean full</FONT> <BR><FONT SIZE=2 FACE="Arial">policies \
or compact policies?</FONT> </P>
<P><FONT SIZE=2 FACE="Arial"> -- Martin</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Martin Presler-Marshall - Program Manager, Privacy \
Technology</FONT> <BR><FONT SIZE=2 FACE="Arial">E-mail: \
mpresler@us.ibm.com AIM: jhreingold</FONT> <BR><FONT SIZE=2 \
FACE="Arial">Phone: (919) 254-7819 (tie-line 444-7819) Fax: (919) 254-6430 \
(tie-line</FONT> <BR><FONT SIZE=2 FACE="Arial">444-6430)</FONT>
</P>
</UL>
<CODE><FONT SIZE=3><BR>
<BR>
***************************************************************************************<BR>
WARNING: All e-mail sent to and from this address will be received or<BR>
otherwise recorded by the A.G. Edwards corporate e-mail system and is<BR>
subject to archival, monitoring or review by, and/or disclosure to,<BR>
someone other than the recipient.<BR>
***************************************************************************************<BR>
</FONT></CODE></BODY>
</HTML>
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic