1. P3P & Internet Explorer 6.0 New York – Feb. 4, 2002

2. Before We Discuss IE 6.0…

3. Your One-stop P3P Resource http://www.p3ptoolbox.org Implementationguide Power Points Links Key outside resources

4. P3P & Internet Explorer 6.0

5. Cookie Management Earlier IE Versions: Earlier IE Versions:  “Reject” all, “accept” all, “prompt”  Cookies login, customization or advertising login, customization or advertising How do you know? How do you know?  Same action applied to all cookies indiscriminately

6. P3P in Internet Explorer 6.0 Based on the Network Advertising Initiative Based on the Network Advertising Initiative  Merging of online habits with offline databases (personally-identifiable information)  Opt-out of data collection

7. How Does This Work? Processes cookies based on presence and contents of P3P compact policies Processes cookies based on presence and contents of P3P compact policies Differentiates between cookies based on party Differentiates between cookies based on party  First party: Domain a Web user is visiting (www.example.com)  Third party: Any other domain serving content (www.examplestore.com or www.catalog.com) Displays, but does not process, full, or verbose, P3P policies Displays, but does not process, full, or verbose, P3P policies

8. Types of P3P-based Policies Verbose P3P Policy (Mandatory) Verbose P3P Policy (Mandatory)  XML file with complete description of site privacy policies Compact P3P Policy (Optional) Compact P3P Policy (Optional)  1-line description of site privacy policy  Found in HTTP Header  Served by the provider of the cookie

9. Compact Policy Example  Individual Analysis  Other Recipients  Online Contact Information Policies could have more tokens, such as which data is available for access Policies could have more tokens, such as which data is available for access Compact Policy: P3P: CP=“IVA OTR ONL”

10. Status Icon: First Encounter

11. User Experience Help Topics Explains privacy issues with cookies Explains privacy issues with cookies Explains how to change privacy settings

12. User Experience Privacy Settings Privacy Tab slider Privacy Tab slider  Medium = Default  Highest = Block All Cookies 1 st and 3 rd 1 st and 3 rd  Lowest = Allow All Cookies 1 st and 3 rd 1 st and 3 rd  Import XML Privacy settings file XML Privacy settings file

20. User Experience Status Icon Web site uses cookies Web site uses cookies Privacy Policies don’t match settings Privacy Policies don’t match settings Cookies are restricted Cookies are restricted User notified User notified

24. User Experience Advanced Privacy Settings Overrides automatic cookie handling Overrides automatic cookie handling Control over 1 st & 3 rd Party cookies Control over 1 st & 3 rd Party cookies Users can exempt session cookies from first two options Users can exempt session cookies from first two options

25. What Does This Mean? At medium (default) setting: At medium (default) setting:  Third party cookies without compact policies are blocked  First party cookies are accepted  Third parties will not be able to collect some information.  Graphics may not appear In addition: In addition:  All settings medium & above will block at least some third party cookies Web site functionality may be compromised Web site functionality may be compromised

26. Additional Information P3P Toolbox:  http://www.p3ptoolbox.org/browser W3C: www.w3c.org/P3P W3C: www.w3c.org/P3Pwww.w3c.org/P3P  Deployment guide http://www.w3.org/TR/p3pdeployment http://www.w3.org/TR/p3pdeployment  Candidate Recommendation http://www.w3.org/TR/P3P/ http://www.w3.org/TR/P3P/ MSDN article MSDN article  http://msdn.microsoft.com/ie and read the material on IE 6 privacy http://msdn.microsoft.com/ie  Contact privinfo@microsoft.com with questions privinfo@microsoft.com privinfo@microsoft.com