P3P & Internet Explorer 6.0 New York – Feb. 4, 2002

Before We Discuss IE 6.0…

Your One-stop P3P Resource Implementationguide Power Points Links Key outside resources

P3P & Internet Explorer 6.0

Cookie Management Earlier IE Versions: Earlier IE Versions:  “Reject” all, “accept” all, “prompt”  Cookies login, customization or advertising login, customization or advertising How do you know? How do you know?  Same action applied to all cookies indiscriminately

P3P in Internet Explorer 6.0 Based on the Network Advertising Initiative Based on the Network Advertising Initiative  Merging of online habits with offline databases (personally-identifiable information)  Opt-out of data collection

How Does This Work? Processes cookies based on presence and contents of P3P compact policies Processes cookies based on presence and contents of P3P compact policies Differentiates between cookies based on party Differentiates between cookies based on party  First party: Domain a Web user is visiting (  Third party: Any other domain serving content ( or Displays, but does not process, full, or verbose, P3P policies Displays, but does not process, full, or verbose, P3P policies

Types of P3P-based Policies Verbose P3P Policy (Mandatory) Verbose P3P Policy (Mandatory)  XML file with complete description of site privacy policies Compact P3P Policy (Optional) Compact P3P Policy (Optional)  1-line description of site privacy policy  Found in HTTP Header  Served by the provider of the cookie

Compact Policy Example  Individual Analysis  Other Recipients  Online Contact Information Policies could have more tokens, such as which data is available for access Policies could have more tokens, such as which data is available for access Compact Policy: P3P: CP=“IVA OTR ONL”

Status Icon: First Encounter

User Experience Help Topics Explains privacy issues with cookies Explains privacy issues with cookies Explains how to change privacy settings

User Experience Privacy Settings Privacy Tab slider Privacy Tab slider  Medium = Default  Highest = Block All Cookies 1 st and 3 rd 1 st and 3 rd  Lowest = Allow All Cookies 1 st and 3 rd 1 st and 3 rd  Import XML Privacy settings file XML Privacy settings file

User Experience Status Icon Web site uses cookies Web site uses cookies Privacy Policies don’t match settings Privacy Policies don’t match settings Cookies are restricted Cookies are restricted User notified User notified

User Experience Advanced Privacy Settings Overrides automatic cookie handling Overrides automatic cookie handling Control over 1 st & 3 rd Party cookies Control over 1 st & 3 rd Party cookies Users can exempt session cookies from first two options Users can exempt session cookies from first two options

What Does This Mean? At medium (default) setting: At medium (default) setting:  Third party cookies without compact policies are blocked  First party cookies are accepted  Third parties will not be able to collect some information.  Graphics may not appear In addition: In addition:  All settings medium & above will block at least some third party cookies Web site functionality may be compromised Web site functionality may be compromised

Additional Information P3P Toolbox:  W3C: W3C:  Deployment guide  Candidate Recommendation MSDN article MSDN article  and read the material on IE 6 privacy  Contact with questions