P3P Policy in header, body, or where? Options?

P3P reference Placement within a Page

[YadiYudi]

Is it possible to put an xml P3P meta tag or XML information at the end of the body just before </body> instead of in the header?

I'd like to call if from an external script at that point in the code. Will it be read correctly by machines?

Current policy specifications are at: [w3.org...]

Thanks.

YadiYudi

[Conard]

Tadi,
Go up a few lines in that doc and pick up this
"Web sites using P3P MAY (and, are strongly encouraged to) place a policy reference file in a "well-known" location. To do this, a policy reference file would be made available on the site at the path /w3c/p3p.xml."
If you set it up this way you don't have to add anything to any pages.

[YadiYudi]

Tadi,

What happens if it's an external file on a different domain that needs to be referenced?

I am providing a tracking service for clients and need to reference my P3P at my site.

Yadi Yudi

[Conard]

YadiYudi,
Here are some if's:
If you are on an Apache server and
If you have root access to the server
1) The Apache instance for
the site the P3P policy is on needs
to supply a P3P compact policy header with
every response it sends back.
2) To do this,
Apache must be compiled with mod_headers, it
will not work otherwise.
3) Once mod_headers
is compiled in, you can add something like
the following statement to your Apache config
for the site in question:

Header set P3P "CP="NOI DEVa TAIa OUR BUS UNI STA",policyref="http://domain/w3c/p3p.xml""
Make sure the header set is on one line.

[YadiYudi]

That is very interesting. I am not on my own server so I doubt that the ISP will do this for everyone, but seems like I could considering migrating to one to enable this capability.

It isn't possible for mod_headers to only deliver this to one domain on a shared server is it?

Then maybe it could be a go.

YadiYudi

[YadiYudi]

Just realized it is not a go.

I have a remote JS script call to a client's page giving the directions. So this will appear on their pages, not mine.

Any other way to do this in the html area without showing it to viewers?

I guess I could have clients put the compact form in the header record, but that does not provide for external maintenance on my part.

Rick