Announcement

Collapse
No announcement yet.

P3P policy not being recognized by IE 6

Collapse
X
Collapse
 
  • Page of 1
  • Filter
  • Time
  • Show
Clear All
new posts
Previous template Next
    #1

    P3P policy not being recognized by IE 6



    Hi again,

    Last, week, I was able to get our compact privacy up on all the pages
    the web site serves. Thank you again. However, through
    the week, we've been testing it on IE 6.0, and that browser
    is not reading the P3P header. I say that because in the
    View>Privacy Report...>(click on page, ask for summary).
    the browser returns this message:

    Could not find a privacy policy for http://denniskunkel.com/.
    To view this site's privacy policy, contact the web site
    directly.

    But, I've gone and checked that the P3P header is
    delivering both the compact policy (yes) and the URL to
    the .xml P3P policy (yes). And that URL has been checked,
    and is correct.

    What do I do to get IE 6 to recognize the P3P header?
    The privacy setting is set at medium in IE 6.


    --
    Cheers, Chris Porter
    --


    Tags: None
    #2
    P3P policy not being recognized by IE 6



    It might just be that IE is stupid and can't
    accept your non-default path to your P3P policy
    file, try putting it in the default /w3c/p3p.xml
    and see if that works.=20

    David


    > -----Original Message-----
    > From: Chris Porter [mailto:[email protected]]=20
    > Sent: Sunday, February 29, 2004 1:17 PM
    > To: Merchant User Group
    > Subject: [mru] P3P policy not being recognized by IE 6
    >=20
    > Hi again,
    >=20
    > Last, week, I was able to get our compact privacy up on all the pages
    > the web site serves. Thank you again. However, through
    > the week, we've been testing it on IE 6.0, and that browser
    > is not reading the P3P header. I say that because in the
    > View>Privacy Report...>(click on page, ask for summary).
    > the browser returns this message:
    >=20
    > Could not find a privacy policy for http://denniskunkel.com/.
    > To view this site's privacy policy, contact the web site
    > directly.
    >=20
    > But, I've gone and checked that the P3P header is
    > delivering both the compact policy (yes) and the URL to
    > the .xml P3P policy (yes). And that URL has been checked,
    > and is correct.
    >=20
    > What do I do to get IE 6 to recognize the P3P header?
    > The privacy setting is set at medium in IE 6.
    >=20
    >=20
    > --
    > Cheers, Chris Porter
    > --=20
    >=20
    >=20

    Comment

      #3
      P3P policy not being recognized by IE 6



      I visited your site with IE6 and didn't have any problems with P3P.

      I did notice that the site loads slowly, but no privacy problems.

      HTH
      Tom

      > -----Original Message-----
      > From: [email protected]
      > [mailto:[email protected]]On Behalf Of Chris Porter
      > Sent: Sunday, February 29, 2004 12:17 PM
      > To: Merchant User Group
      > Subject: [mru] P3P policy not being recognized by IE 6
      >
      >
      > Hi again,
      >
      > Last, week, I was able to get our compact privacy up on all the pages
      > the web site serves. Thank you again. However, through
      > the week, we've been testing it on IE 6.0, and that browser
      > is not reading the P3P header. I say that because in the
      > View>Privacy Report...>(click on page, ask for summary).
      > the browser returns this message:
      >
      > Could not find a privacy policy for http://denniskunkel.com/.
      > To view this site's privacy policy, contact the web site
      > directly.
      >
      > But, I've gone and checked that the P3P header is
      > delivering both the compact policy (yes) and the URL to
      > the .xml P3P policy (yes). And that URL has been checked,
      > and is correct.
      >
      > What do I do to get IE 6 to recognize the P3P header?
      > The privacy setting is set at medium in IE 6.
      >
      >
      > --
      > Cheers, Chris Porter
      > --
      >
      >

      Comment

        #4
        P3P policy not being recognized by IE 6



        Same problem you asked about last time Chris, and the same answer:

        You are missing the double-quotes, and combining them into one line. Also,
        you can enclose them in a module function so it won't die if mod_headers is
        pissed. It could be:

        <IfModule mod_headers.c>
        Header append P3P "policyref="http://denniskunkel.com/PrivacyPolicy/p3p.xml""
        Header append P3P "CP="CAO CURa ADMa DEVa TAIa OUR IND PHY ONL UNI PUR FIN
        COM NAV INT DEM CNT STA PRE""
        </IfModule>

        Two lines is optional but easier to grok.

        Jonathan
        Driftwood Network Services


        At 01:17 PM 2/29/2004, Chris Porter wrote:
        >Hi again,
        >
        >Last, week, I was able to get our compact privacy up on all the pages
        >the web site serves. Thank you again. However, through
        >the week, we've been testing it on IE 6.0, and that browser
        >is not reading the P3P header. I say that because in the
        >View>Privacy Report...>(click on page, ask for summary).
        >the browser returns this message:
        >
        >Could not find a privacy policy for http://denniskunkel.com/.
        >To view this site's privacy policy, contact the web site
        >directly.
        >
        >But, I've gone and checked that the P3P header is
        >delivering both the compact policy (yes) and the URL to
        >the .xml P3P policy (yes). And that URL has been checked,
        >and is correct.
        >
        >What do I do to get IE 6 to recognize the P3P header?
        >The privacy setting is set at medium in IE 6.
        >
        >
        >--
        >Cheers, Chris Porter
        >--
        >
        >

        Comment

          #5
          P3P policy not being recognized by IE 6



          I think you are right Chris. I was seeing the policy verify failure as
          being the result of an improperly defined XML file, and that is clearly not
          the case from your validation below.

          Check your XML file closely. My guess is an improperly defined <INCLUDE>
          segment. Here's is a sample that works for Driftwood.net:

          <META xmlns="<A HREF ="http://www.w3.org/2000/12/P3Pv1">">http://www.w3.org/2000/12/P3Pv1"></A>
          <POLICY-REFERENCES>
          <POLICY-REF about="<A HREF ="http://www.driftwood.net/w3c/Driftwood.p3p">">http://www.driftwood.net/w3c/Driftwood.p3p"></A>
          <INCLUDE>/*</INCLUDE>
          </POLICY-REF>
          </POLICY-REFERENCES>
          </META>


          Notice lines #3 and #4. Make sure that #3 points to the policy, and that
          line #4 defines for -all- pages on the site; not (possibly) only your index
          page.

          Jonathan
          Driftwood Network Services



          At 03:44 PM 2/29/2004, Chris Porter wrote:
          >>It is the issue of the double quotes Chris. Just try cut-n-pasting the
          >>reviewed sample into your config file and try it again. You must use the
          >>slash to preceed the quote marks. They are odd to look at, but they work
          >>(smile).
          >>
          >>Jonathan
          >>Driftwood Network Services
          >
          >
          >But Jon, what I actually did was cut and past your work
          >the first time. I think it's working.
          >
          >I'm running a validator, and these are the results.
          ><<A HREF ="http://www.w3.org/P3P/validator.html>">http://www.w3.org/P3P/validator.html></A>
          >
          >
          >Results of P3P validation
          >
          >Target URI: http://denniskunkel.com/index.asp
          >------------------------------------------------------------------------
          >
          >Step 1: /w3c/p3p.xml Validation
          >
          >URI: http://denniskunkel.com/w3c/p3p.xml
          >
          >Step 1-1: Access check
          >
          >/w3c/p3p.xml can be retrieved.
          >
          >Message: The content type of /w3c/p3p.xml is text/xml.
          >
          >Step 1-2: Syntax check
          >
          >/w3c/p3p.xml has no syntax errors.
          >
          >Step 1-3: Policy URI check
          >
          >/w3c/p3p.xml has some warnings or errors.
          >
          >Warning: P3P policy indicated at line 3 can NOT be accessed.
          >403 Forbidden
          >
          >/w3c/p3p.xml does not specify P3P policy for http://denniskunkel.com/index.asp
          >------------------------------------------------------------------------
          >
          >Step 2: HTTP Protocol Validation ( HTTP headers )
          >
          >HTTP headers are P3P compliant.
          >
          >
          >P3P:CP="CAO CURa ADMa DEVa TAIa OUR IND PHY ONL UNI PUR FIN COM NAV INT
          >DEM CNT STA PRE", policyref="http://denniskunkel.com/w3c/p3p.xml"
          >
          >Step 2-1: Compact Policy Validation
          >Compact Policy syntax OK.
          >------------------------------------------------------------------------
          >
          >Step 3: HTML File Validation
          >
          >HTML document has no P3P compliant link tags.
          >
          >Message: No valid P3P compliant <link> element.
          >------------------------------------------------------------------------
          >
          >Step 4: /w3c/p3p.xml Validation
          >
          >URI: http://denniskunkel.com/w3c/p3p.xml
          >
          >Step 4-1: Access check
          >
          >/w3c/p3p.xml can be retrieved.
          >
          >Message: The content type of /w3c/p3p.xml is text/xml.
          >
          >Step 4-2: Syntax check
          >
          >/w3c/p3p.xml has no syntax errors.
          >
          >Step 4-3: Policy URI check
          >
          >/w3c/p3p.xml has some warnings or errors.
          >
          >Warning: P3P policy indicated at line 3 can NOT be accessed.
          >403 Forbidden
          >
          >/w3c/p3p.xml does not specify P3P policy for http://denniskunkel.com/index.asp
          >------------------------------------------------------------------------
          >
          >Validator could not find P3P policy file. Validation aborted.
          >
          >
          >So what's happening is a 403 Forbidden error, and
          >I'm in the process of trying to figure out the permissions.
          >
          >
          >*******
          >
          >
          >>At 03:23 PM 2/29/2004, Chris Porter wrote:
          >>>>Same problem you asked about last time Chris, and the same answer:
          >>>>
          >>>>You are missing the double-quotes, and combining them into one line.
          >>>>Also, you can enclose them in a module function so it won't die if
          >>>>mod_headers is pissed. It could be:
          >>>>
          >>>><IfModule mod_headers.c>
          >>>>Header append P3P
          >>>>"policyref="http://denniskunkel.com/PrivacyPolicy/p3p.xml""
          >>>>Header append P3P "CP="CAO CURa ADMa DEVa TAIa OUR IND PHY ONL UNI PUR
          >>>>FIN COM NAV INT DEM CNT STA PRE""
          >>>></IfModule>
          >>>>
          >>>>Two lines is optional but easier to grok.
          >>>>
          >>>>Jonathan
          >>>>Driftwood Network Services
          >>>
          >>>I don't think so, the header, when looked at, looks correct to me
          >>>
          >>>HTTP/1.1 200 OK
          >>>Date: Sun, 29 Feb 2004 19:05:52 GMT
          >>>Server: Apache/1.3.27 (Unix) (Red-Hat/Linux) Chili!Soft-ASP/3.6.2
          >>>mod_ssl/2.8.12 OpenSSL/0.9.6 PHP/4.1.2 mod_perl/1.27 FrontPage/5.0.2.2623
          >>>Connection: Keep-Alive, close
          >>>Cache-control: private
          >>>Set-Cookie: ASPSESSIONIDGGGGGGGG=QQSFOQACDMTEHFCABXEDSSQQPQQQH VQG; path=/
          >>>
          >>>P3P: CP="CAO CURa ADMa DEVa TAIa OUR IND PHY ONL UNI PUR FIN COM NAV INT
          >>>DEM CNT STA PRE", policyref="http://denniskunkel.com/w3c/p3p.xml"
          >>>
          >>>Content-Length: 11035
          >>>Content-Type: text/html
          >>>
          >>>
          >>>I compared this to the Microsoft site:
          >>><http://msdn.microsoft.com/workshop/security/privacy/overview/createprivacypolicy.asp>
          >>>Compact Policies and the HTTP Header
          >>>
          >>>Compact policies are added to HTTP headers associated with cookie
          >>>operations. Internet Explorer 6 uses these compact policies to filter
          >>>cookies based on a user's privacy preferences. The following example
          >>>shows the syntax for the P3P header using the preceding compact policy
          >>>example. For more information on how Internet Explorer 6 blocks or
          >>>allows cookies, see Privacy in Internet Explorer 6.
          >>>
          >>>P3P: CP="NOI ADM DEV PSAi COM NAV OUR OTR STP IND DEM"
          >>>
          >>>So it looks correct to me, it just has an extra bit at the end. Or are
          >>>you trying to say
          >>>that I should have a double quote before the
          >>>letters CP and a second double quote after the last one on the second line?
          >>>
          >>>Forgive me, it's not easy being dyslexic and trying to code, I get
          >>>the simplest things wrong.


          Comment

            #6
            P3P policy not being recognized by IE 6



            At 3:51 PM -0500 2/29/04, Jonathan - Driftwood wrote:
            >I think you are right Chris. I was seeing the policy verify failure
            >as being the result of an improperly defined XML file, and that is
            >clearly not the case from your validation below.
            >
            >Check your XML file closely. My guess is an improperly defined
            ><INCLUDE> segment. Here's is a sample that works for Driftwood.net:
            >
            ><META xmlns="<A HREF ="http://www.w3.org/2000/12/P3Pv1">">http://www.w3.org/2000/12/P3Pv1"></A>
            ><POLICY-REFERENCES>
            > <POLICY-REF about="<A HREF ="http://www.driftwood.net/w3c/Driftwood.p3p">">http://www.driftwood.net/w3c/Driftwood.p3p"></A>
            > <INCLUDE>/*</INCLUDE>
            > </POLICY-REF>
            ></POLICY-REFERENCES>
            ></META>
            >
            >
            >Notice lines #3 and #4. Make sure that #3 points to the policy, and
            >that line #4 defines for -all- pages on the site; not (possibly)
            >only your index page.

            >Jonathan
            >Driftwood Network Services


            Thanks so much you all for the support, really appreciated.
            I have finally found my big goof (Monday morning after a
            good sleep), and have made corrections, and it works.
            IE will now allow cookies to be set even when the Privacy
            Policy indicated by the client is "High".

            I'm going to write up the steps I did, using examples, so I don't
            ever have to go through this and bother others due to my
            mistakes.

            Thank you all.


            --
            Cheers, Chris Porter
            --


            Comment

              #7
              P3P policy not being recognized by IE 6



              Trying to resort products by "Code Ascending." They reorder themselves
              in the product listing but don't change on the actual site. Have tried
              sorting by code ad name but the actual product order does not change.

              Any suggestions?


              Comment

                #8
                P3P policy not being recognized by IE 6



                That should not be related to your P3P policy and IE6.

                David
                =20

                > -----Original Message-----
                > From: Wesley Copple [mailto:[email protected]]=20
                > Sent: Monday, March 01, 2004 11:34 AM
                > To: 'Merchant User Group'
                > Subject: RE: [mru] P3P policy not being recognized by IE 6
                >=20
                > Trying to resort products by "Code Ascending." They reorder =
                themselves
                > in the product listing but don't change on the actual site. Have =
                tried
                > sorting by code ad name but the actual product order does not change.
                >=20
                > Any suggestions?
                >=20
                >=20

                Comment

                  #9
                  Sorting Issues



                  Sorry, I forgot to change the subject line last time.

                  Trying to resort products by "Code Ascending." They reorder themselves
                  in the product listing but don't change on the actual site. Have tried
                  sorting by code ad name but the actual product order does not change.

                  Any suggestions?

                  FYI: Sorting works perfectly with categories.


                  Comment

                    #10
                    P3P policy not being recognized by IE 6



                    It was my mistake, I did not change the subject line.


                    -----Original Message-----
                    From: [email protected]
                    [mailto:[email protected]] On Behalf Of David Hubbard
                    Sent: Monday, March 01, 2004 11:40 AM
                    To: Merchant User Group
                    Subject: RE: [mru] P3P policy not being recognized by IE 6


                    That should not be related to your P3P policy and IE6.

                    David


                    > -----Original Message-----
                    > From: Wesley Copple [mailto:[email protected]]
                    > Sent: Monday, March 01, 2004 11:34 AM
                    > To: 'Merchant User Group'
                    > Subject: RE: [mru] P3P policy not being recognized by IE 6
                    >
                    > Trying to resort products by "Code Ascending." They reorder themselves

                    > in the product listing but don't change on the actual site. Have tried

                    > sorting by code ad name but the actual product order does not change.
                    >
                    > Any suggestions?
                    >
                    >

                    Comment

                      #11
                      Product Sorting WAS: P3P policy not being recognized by IE 6



                      Are you clicking on Update, after you resort?

                      Also, please change the subject when you are posting new topic. This is
                      not related at all to the subject you have.

                      Vic Vega
                      WolfPaw Computers
                      Miva Merchant Hosting Specialists
                      "Put the power of the pack to work for you!"(sm)
                      Ph: 1 (866) WOLFPAW
                      www.wpcomp.com


                      -----Original Message-----
                      From: [email protected]
                      [mailto:[email protected]] On Behalf Of Wesley Copple
                      Sent: Monday, March 01, 2004 10:34 AM
                      To: 'Merchant User Group'
                      Subject: RE: [mru] P3P policy not being recognized by IE 6


                      Trying to resort products by "Code Ascending." They reorder themselves
                      in the product listing but don't change on the actual site. Have tried
                      sorting by code ad name but the actual product order does not change.

                      Any suggestions?


                      Comment

                      Previous template Next
                      Working...
                      X