Welcome to WebmasterWorld Guest from 54.234.38.8

Forum Moderators: httpwebwitch

Message Too Old, No Replies

Valid (but simple) example of a P3P XML policy file?

Plus what is the point for most surfers?

     
5:50 pm on Feb 2, 2007 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member jab_creations is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Aug 26, 2004
posts:3145
votes: 12


Two things I want to talk about...

1.) Is there a valid but SIMPLE example of a P3P file someone could post here please?

2.) Secondly I fail to see how most people would be aware of a P3P policy? Does it HAVE to be an XML file?

- John

8:36 am on Feb 3, 2007 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member jab_creations is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Aug 26, 2004
posts: 3145
votes: 12


I'm getting a weird 404 error in regards to the header response via the P3P Validator...

I've implemented the header via PHP as...

header("p3p: policyref=\"w3c/p3p.xml\"");

In my access log is reports the following per attempt to validate the P3P file...

"GET /w3c/p3p.xml HTTP/1.1" 200 1094 "-" "P3P Validator"
"GET /%3E HTTP/1.1" 404 13247 "-" "P3P Validator"
"GET /w3c/p3p.xml HTTP/1.1" 200 1094 "-" "P3P Validator"

Any ideas?

- John

10:14 am on Feb 3, 2007 (gmt 0)

Preferred Member

10+ Year Member

joined:Aug 17, 2005
posts:432
votes: 0


Try the IBM P3P Policy Editor Tool [alphaworks.ibm.com]
7:26 pm on Feb 3, 2007 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member jab_creations is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Aug 26, 2004
posts: 3145
votes: 12


Actually I did! :-D

The websites I came across for generators all want money. IBM's program came the closest to something usable and understandable but it's still too rigid.

- John

8:50 pm on Feb 3, 2007 (gmt 0)

Full Member

10+ Year Member

joined:Jan 4, 2006
posts:307
votes: 0


If you are talking about Policy Refernece File then here is a working copy that i finally validated after doing a half day research!

<META xmlns="http://www.w3.org/2002/01/P3Pv1">
<POLICY-REFERENCES>
<POLICY-REF about="http://example.com/w3c/policy.xml#policy">
<INCLUDE>/*</INCLUDE>
<COOKIE-INCLUDE name="*" value="*" domain="*" path="/"/>
</POLICY-REF>
</POLICY-REFERENCES>
</META>

In addition, here is a link to FREE P3P Privacy Policy Generator [pics.enc.or.jp].

I hope this helps.

Milan

11:21 pm on Feb 3, 2007 (gmt 0)

Senior Member from US 

WebmasterWorld Senior Member jab_creations is a WebmasterWorld Top Contributor of All Time 10+ Year Member

joined:Aug 26, 2004
posts:3145
votes: 12


Milan, thank you, I've at least generated a couple things yet I'm not sure how to make the validator correctly reference everything?

PRF (XML)
What should be the public path and file name of this XML file?

<META xmlns="http://www.w3.org/2002/01/P3Pv1">
<POLICY-REFERENCES>
<POLICY-REF about="http://www.example.com/w3c/p3p.xml">
</POLICY-REF>
</POLICY-REFERENCES>
</META>

Compact Policy Information
It looks like header information, what do I do with this? If it's a header then how do I make this in to a PHP header?

P3P: CP="NOI DSP COR CURa ADMa DEVa OUR IND"\r\n\r\n

Compact Policy header information

NOI DSP COR CURa ADMa DEVa OUR IND

P3P Policy (XML)
What should be the public path and file name of this XML file?

<POLICIES xmlns="http://www.w3.org/2002/01/P3Pv1">
<POLICY name="policy1"

... this part omitted by poster to comply with WebmasterWorld TOS...

</STATEMENT>
</POLICY>
</POLICIES>

Thanks for your help so far!

- John

5:28 am on Feb 4, 2007 (gmt 0)

Full Member

10+ Year Member

joined:Jan 4, 2006
posts:307
votes: 0


Policy Reference File
Path : /w3c/
Filename : p3p.xml

P3P Policy
Path : /w3c/
Filename : policy.xml

PHP Header
header('P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa OUR IND"');

The public folder (/w3c/) is the recommended PATH but you can have your own file names for Policy Reference File and P3P Policy.

Milan