Hello, hairymp.
The Platform for Privacy Preferences Project (P3P) is a specification
that lets a Web site express its privacy policy in standard
machine-readable formats.
A site that supports P3P policies should have two versions of a
policy: compact and full. A "compact" policy is information about a
site's privacy policy that a Web server can include as part of the
HTTP header when setting cookies. According to the P3P specification,
"The policy specified in a P3P compact policy applies to data stored
within all cookies set in the same HTTP response as the compact
policy, all cookies set by scripts associated with that HTTP response,
and also to data linked to the cookies." The "full" version of a
policy is an XML file which can provide more detailed information
about a site's policies.
To implement P3P, you can use a "policy generator" application to
create the full and compact policies based on your site's existing
privacy policy. You upload the full policy file to a your server. You
must also create (or the editor will create) a "policy reference file"
which will tell the browser where it can find the policy file. The
policy reference file should be saved as /w3c/p3p.xml
Finally, you must set your Web server to deliver the compact version
in the http headers.
The official W3C specification for P3P is here:
http://www.w3.org/TR/P3P/
Microsoft's informative manual "How to Deploy P3P Privacy Policies on
Your Web Site" succinctly shows how to add full and compact policies
to your Web site:
http://msdn.microsoft.com/workshop/security/privacy/overview/createprivacypolicy.asp
The W3C's document "Make Your Web Site P3P Compliant" is brief but worth reading:
http://www.w3.org/P3P/usep3p.html
America Online offers an informative page on service compact P3P
headers with Microsoft Internet Information Server, Apache, and other
servers:
http://webmaster.info.aol.com/p3psetup.html
This Web site also shows how to add a P3P compact privacy policy to
the http headers for a web site running on an Apache web server:
http://www.duxcw.com/faq/webmastr/privhttp.htm
This page includes useful links to P3P policy generators, editors, and checkers:
http://www.w3.org/P3P/implementations
I hope this answers your question. |
