[P3P] Privacy Report in IE6 bij laden van third-party files

[Verwijderd]

Ik heb het probleem dat als ik op domein1 een frame laadt met in het frame een file op domein2 ik altijd een "Privacy Report" icoontje rechtsonderin Internet Explorer 6 krijg met de melding:

Site: domein2/file.php
cookies: blocked

Ik krijg dat icoontje er niet weg wat ik ook verander aan policy.xml.
Het heeft te maken met de volgende privacy setting van IE:
"Blocks third-party cookies that use personally identifiable information without your implicit consent"
Zodra ik de privacy setting binnen IE op "accept all cookies" of expliciet aangeef dat third-party cookies altijd geladen mogen worden verdwijnt het icoontje.

dus mijn vraag:

Is er een mogelijkheid om toch dat icoontje te laten verdwijnen (en dus geen blokkering) maar wel de mogelijkheid behouden om cookies te zetten via third-party url's middels aanpassingen aan policy.xml en/of p3p.xml?

ik heb de diverse oudere draadjes al doorgelezen maar kon hierover niets vinden.

Hieronder mijn houdige file.php, p3p.xml en policy.php:

domein2/file.php:

code:

<?php

header("P3P: CP=\"ALL\"");
header("P3P: policyref=\"/w3c/p3p.xml\"");

?>

Ik heb op domein2 een /w3c/p3p.xml aangemaakt:

code:

<META xmlns="http://www.w3.org/2000/12/P3Pv1">
   <POLICY-REFERENCES>
      <POLICY-REF about="/w3c/policy.xml">
      <INCLUDE>/*</INCLUDE>
      </POLICY-REF>
   </POLICY-REFERENCES>
</META>

en de policy.xml:

code:

<?xml version="1.0"?>
<POLICY xmlns="http://www.w3.org/2000/12/P3Pv1"
    discuri="http://domein2/PrivacyReglement.html">
    <!-- Generated by IBM P3P Policy Editor version Beta 1.11 built 6/4/02 11:23 AM -->

    <!-- Expiry information for this policy -->
    <EXPIRY max-age="604800"/>

    <!-- Custom data elements defined by this policy. -->
    <DATASCHEMA>
    <DATA-DEF name="newdataset" short-description="New Data Set"></DATA-DEF>
    </DATASCHEMA>

    <!-- Description of the entity making this policy statement. -->
    <ENTITY>
    <DATA-GROUP>
<DATA ref="#business.contact-info.online.uri">http://www.domein2</DATA>
<DATA ref="#business.name">naampje</DATA>
    </DATA-GROUP>
    </ENTITY>

    <!-- Disclosure -->
    <ACCESS><nonident/></ACCESS>


    <!-- Disputes -->
    <DISPUTES-GROUP>
        <DISPUTES resolution-type="service" service="http://www.domein2.nl/mailscript.php" short-description="Dispute Resolution">
            <LONG-DESCRIPTION>We will work to resolve any issues with this privacy policy.</LONG-DESCRIPTION>
            <REMEDIES><correct/></REMEDIES>
        </DISPUTES>
    </DISPUTES-GROUP>

    <!-- Statement for group "Access log information" -->
    <STATEMENT>
        <EXTENSION optional="yes">
            <GROUP-INFO xmlns="http://www.software.ibm.com/P3P/editor/extension-1.0.html" name="Access log information"/>
        </EXTENSION>

    <!-- Consequence -->
    <CONSEQUENCE>
Our Web server collects access logs containing this information. We use it for maintaining and improving the web site.</CONSEQUENCE>

    <!-- Use (purpose) -->
    <PURPOSE><admin/><current/><develop/></PURPOSE>

    <!-- Recipients -->
    <RECIPIENT><ours/><public/></RECIPIENT>

    <!-- Retention -->
    <RETENTION><indefinitely/></RETENTION>

    <!-- Base dataschema elements. -->
    <DATA-GROUP>
    <DATA ref="#dynamic.clickstream"/>
    <DATA ref="#dynamic.http"/>
    <DATA ref="#dynamic.searchtext"/>
    </DATA-GROUP>
</STATEMENT>

    <!-- Statement for group "Cookies" -->
    <STATEMENT>
        <EXTENSION optional="yes">
            <GROUP-INFO xmlns="http://www.software.ibm.com/P3P/editor/extension-1.0.html" name="Cookies"/>
        </EXTENSION>

    <!-- Consequence -->
    <CONSEQUENCE>
Cookies are used to track visitors to our site, 
so we can better understand what portions of our site best serve you.</CONSEQUENCE>

    <!-- Use (purpose) -->
    <PURPOSE><develop/><tailoring/></PURPOSE>

    <!-- Recipients -->
    <RECIPIENT><ours/></RECIPIENT>

    <!-- Retention -->
    <RETENTION><business-practices/></RETENTION>

    <!-- Base dataschema elements. -->
    <DATA-GROUP>
    <DATA ref="#dynamic.cookies" optional="yes"><CATEGORIES><uniqueid/></CATEGORIES></DATA>
    </DATA-GROUP>
</STATEMENT>

<!-- End of policy -->
</POLICY>

enkele draadjes en andere info:
http://www.w3.org/TR/p3pdeployment
http://www.w3.org/P3P/validator.html
http://msdn.microsoft.com...tml/ie6privacyfeature.asp
P3P en cookies :((((
[rml][ PHP] Problemen met inlogscript onder IE6[/rml]

[Verwijderd]

ik heb nog een goede pagina gevonden met wat uitleg:

http://www.oreillynet.com...cript/2002/10/04/p3p.html

ik moet een opt-out mogelijkheid meegeven, maar ik kan nergens vinden hoe ik dat moet doen

"
To prevent IE6 from blocking cookies on your site, you need to make sure that all of the cookies that are being set in a third-party context have P3P compact policies associated with them, and that those compact policies are considered satisfactory by IE6. If the third-party cookies are being set by another company, you may need to ask them to P3P-enable and set P3P compact policies. Any host that sets a P3P compact policy must also have a corresponding full P3P policy. Users can change their IE6 settings so that cookies will be blocked under other conditions as well; however, placing satisfactory compact policies on third-party cookies will prevent most IE6 cookie blocking.

Unsatisfactory cookies are basically cookies with a P3P compact policy that indicates that the cookie may be associated with personally-identifiable information that may be shared with other companies, used for marketing, used for profiling, or used for unknown purposes -- without giving the user the option of opting out.
"