Web Privacy with P3P

Cover
"O'Reilly Media, Inc.", 23.09.2002 - 321 Seiten
Web site developers balance their need to collect information about users with their obligation to show respect for their users' privacy. The Platform for Privacy Preferences Project, or P3P, has emerged as a technology that may satisfy the wishes of both parties. Developed by the World Wide Web Consortium (W3C), P3P gives users more control over the amount of information they disclose about themselves as they browse the Web, and allows web sites to declare to browsers what sort of information they will request of users. The number of web developers using P3P continues to grow. P3P support is now built into the newest browsers, including Microsoft Internet Explorer, Netscape Navigator, and Mozilla. Web Privacy with P3P explains the P3P protocol and shows web site developers how to configure their sites for P3P compliance. Author Lorrie Faith Cranor, chair of the Platform for Privacy Preferences Project (P3P) Specification Working Group at the W3C and co-author of the P3P1.0 specification, explains the inner workings of the P3P protocol while maintaining a hands-on implementation approach. Following a foreword by Stanford Law professor Lawrence Lessig, the book begins with an introduction to P3P and an overview of online privacy concerns and the laws governing online privacy. Cranor discusses existing privacy technology, such as encryption tools, filters and identity management tools. Next, the book shows you how to P3P-enable your own site. Among the many topics covered are:
  • P3P deployment steps
  • P3P policy syntax
  • Creating P3P policies
  • Creating and referencing policy reference files
  • Data schemas
Full of examples and case studies, Web Privacy with P3P delivers practical advice and insider tips. Software developers, privacy consultants, corporate decision-makers, lawyers, public policy-makers, and any individual interested in online privacy issues will find this book a necessary reference.
 

Ausgewählte Seiten

Inhalt

Introduction to P3P
3
How P3P Works
4
P3PEnabling a Web Site
9
The Online Privacy Landscape
12
Fair Information Practice Principles
22
Privacy Laws
24
Privacy Seals
27
Chief Privacy Officers
28
The Policy File
107
Creating P3P Policies
110
Turning the Information You Gathered into a P3P Policy
121
Writing a Compact Policy
128
Avoiding Common Pitfalls
131
Creating and Referencing Policy Reference Files
133
Referencing a Policy Reference File
144
P3P Policies in Policy Reference Files
149

PrivacyRelated Organizations
29
Privacy Technology
30
Encryption Tools
31
Anonymity and Pseudonymity Tools
36
Filters
40
IdentityManagement Tools
41
P3P History
43
The Internet Privacy Working Group
45
W3C Launches the P3P Project
46
The Evolving P3P Specification
47
The Patent Issue
51
Feedback from Europe
52
Finishing the Specification
53
Legal Implications
55
Criticism
56
Overview and Options
61
P3P Deployment Steps
63
Creating a Privacy Policy
65
Analyzing the Use of Cookies and ThirdParty Content
68
One Policy or Many?
73
Generating a P3P Policy and Policy Reference File
74
Helping User Agents Find Your Policy Reference File
75
Combination Files
76
Compact Policies
77
The Safe Zone
78
Testing Your Web Site
79
P3P Policy Syntax
81
General Assertions
82
DataSpecific Assertions
89
The P3P Extension Mechanism
104
Changing Your P3P Policy or Policy Reference File
150
Avoiding Common Pitfalls
151
Data Schemas
153
Fixed and Variable Categories
154
Writing a P3P Data Schema
164
P3PEnabled Web Site Examples
170
ThirdParty Agents
179
Third Parties with Their Own Policies
180
P3P Vocabulary Design Issues
191
P3P Vocabulary Terms
195
Whats Not in the P3P Vocabulary
201
P3P User Agents and Other Tools
203
Other Types of P3P Tools
207
P3P Specification Compliance Requirements
210
A P3P Preference Exchange Language APPEL
214
APPEL Evaluator Engines
216
Processing APPEL Rules
225
Other Privacy Preference Languages
229
User Interface
236
Privacy Preference Settings
254
User Agent Behavior
259
Accessibility
262
Privacy
264
P3P Policy and Policy Reference File Syntax Quick Reference
269
Configuring Web Servers to Include P3P Headers
284
P3P in IE6
289
How to Create a Customized Privacy Import File for IE6
301
P3P Guiding Principles
306
Index
311
Urheberrecht

Häufige Begriffe und Wortgruppen

Autoren-Profil (2002)

Dr. Lorrie Faith Cranor is a principal technical staff member in the Secure Systems Research Department at AT&T Labs-Research Shannon Laboratory in Florham Park, New Jersey. She is chair of the Platform for Privacy Preferences Project (P3P) Specification Working Group at the World Wide Web Consortium. Her research has focused on a variety of areas where technology and policy issues interact, including online privacy, electronic voting, and spam. Dr. Cranor plays the tenor saxophone in the Chatham Community Band. She spends most of her free time with her husband, Chuck, and her son, Shane, but sometimes she finds time to design and create quilts.

Bibliografische Informationen