Valid (but simple) example of a P3P XML policy file?

Plus what is the point for most surfers?

[JAB Creations]

Two things I want to talk about...

1.) Is there a valid but SIMPLE example of a P3P file someone could post here please?

2.) Secondly I fail to see how most people would be aware of a P3P policy? Does it HAVE to be an XML file?

- John

[JAB Creations]

I'm getting a weird 404 error in regards to the header response via the P3P Validator...

I've implemented the header via PHP as...

header("p3p: policyref=\"w3c/p3p.xml\"");

In my access log is reports the following per attempt to validate the P3P file...

"GET /w3c/p3p.xml HTTP/1.1" 200 1094 "-" "P3P Validator"
"GET /%3E HTTP/1.1" 404 13247 "-" "P3P Validator"
"GET /w3c/p3p.xml HTTP/1.1" 200 1094 "-" "P3P Validator"

Any ideas?

- John

[appi2]

Try the IBM P3P Policy Editor Tool [alphaworks.ibm.com]

[JAB Creations]

Actually I did! :-D

The websites I came across for generators all want money. IBM's program came the closest to something usable and understandable but it's still too rigid.

- John

[milanmk]

If you are talking about Policy Refernece File then here is a working copy that i finally validated after doing a half day research!

<META xmlns="http://www.w3.org/2002/01/P3Pv1">
<POLICY-REFERENCES>
<POLICY-REF about="http://example.com/w3c/policy.xml#policy">
<INCLUDE>/*</INCLUDE>
<COOKIE-INCLUDE name="*" value="*" domain="*" path="/"/>
</POLICY-REF>
</POLICY-REFERENCES>
</META>

In addition, here is a link to FREE P3P Privacy Policy Generator [pics.enc.or.jp].

I hope this helps.

Milan

[JAB Creations]

Milan, thank you, I've at least generated a couple things yet I'm not sure how to make the validator correctly reference everything?

PRF (XML)
What should be the public path and file name of this XML file?

<META xmlns="http://www.w3.org/2002/01/P3Pv1">
<POLICY-REFERENCES>
<POLICY-REF about="http://www.example.com/w3c/p3p.xml">
</POLICY-REF>
</POLICY-REFERENCES>
</META>

Compact Policy Information
It looks like header information, what do I do with this? If it's a header then how do I make this in to a PHP header?

P3P: CP="NOI DSP COR CURa ADMa DEVa OUR IND"\r\n\r\n

Compact Policy header information

NOI DSP COR CURa ADMa DEVa OUR IND

P3P Policy (XML)
What should be the public path and file name of this XML file?

<POLICIES xmlns="http://www.w3.org/2002/01/P3Pv1">
<POLICY name="policy1"

... this part omitted by poster to comply with WebmasterWorld TOS...

</STATEMENT>
</POLICY>
</POLICIES>

Thanks for your help so far!

- John

[milanmk]

Policy Reference File
Path : /w3c/
Filename : p3p.xml

P3P Policy
Path : /w3c/
Filename : policy.xml

PHP Header
header('P3P: policyref="/w3c/p3p.xml", CP="NOI DSP COR CURa ADMa DEVa OUR IND"');

The public folder (/w3c/) is the recommended PATH but you can have your own file names for Policy Reference File and P3P Policy.

Milan