Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <blockquote> <p>"I want to skip the nasty details of the P3P policy"</p> </blockquote> <p>It is possible to set a <code>P3P</code> HTTP header without valid compact privacy policy attributes.</p> <p>Facebook does this. Here is the <code>P3P</code> HTTP header from facebook.com:</p> <pre><code>P3P: CP="Facebook does not have a P3P policy. Learn why here: http://​fb.me/p3p" </code></pre> <p>Google does it too:</p> <pre><code>p3p: CP="This is not a P3P policy! See http://www.google.com/support/accounts/bin/answer.py?hl=en&amp;answer=151657 for more info." </code></pre> <p>This is accepted by Internet Explorer. For example, IE's "high" privacy setting blocks all cookies from websites that do not have a compact privacy policy, but cookies accompanied by P3P non-policies like those above are not blocked.</p> <p>If you implement such a P3P non-policy, be sure to include natural language that explains it is <em>not</em> a real P3P policy, avoid using words that are valid P3P tokens, and also link to the URL of a longer explanation or to your site's real privacy policy.</p> <hr> <p>UPDATE: In 2012, Microsoft <a href="https://blogs.msdn.microsoft.com/ie/2012/02/20/google-bypassing-user-privacy-settings/%20%22%22" rel="nofollow noreferrer">accused Google of bypassing user privacy settings</a> because of this practice, and they <a href="https://blogs.msdn.microsoft.com/ieinternals/2013/10/16/strict-p3p-validation/" rel="nofollow noreferrer">added a "strict P3P validation" setting to IE 10 and 11</a>. When enabled, it rejects cookies that are accompanied by P3P policies that contain undefined tokens. I believe the setting was disabled by default.</p> <p><a href="https://msdn.microsoft.com/en-us/library/mt146424(v=vs.85).aspx" rel="nofollow noreferrer">Microsoft finally gave up on P3P</a> as of Windows 10. So for Edge (and IE 11 on Windows 10), a P3P policy has no bearing on cookie acceptance.</p> <p>You can inspect the <code>User-Agent</code> request header in order to only set the <code>P3P</code> header on affected versions of IE.</p>
    singulars
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    3. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload