ISSUE-167: Multiple site exceptions

Multiple site exceptions

State:

CLOSED

Product:

Tracking Preference Expression (DNT)

Raised by:

Mike O'Neill

Opened on:

2012-09-24

Description:

It is very common that a single legal entity controls very many websites, and wish to apply a single privacy policy and set of standards across all or many of them.

For instance some multi-brand international consumer products companies control hundreds of websites and they currently offer a single "cookies policy" across their EU member state facing ones in order to help comply with the Privacy & Electronic Communications directive.

The DNT exception API currently would require a new user-agent UI interaction for every site under the same policy. It would be very useful for these companies that they could request one exception for their "tracking policy" so that they need not bombard their site visitors with multiple requests.

The current API usefully leverages the same-origin security model to ensure requests can not be forged by malicious parties, but at the moment this results in a the exception being "locked" to a single domain name. The only alternative for these large multi-site organisations, other than repetatively polling their users, is to ask for a web-wide exception, which may not be appropriate for many users and so reduce consumer choice.

I have written a description of an API that could give user-agents the ability to associate legal entities with exceptions but still retain the domain-origin security model. It also addresses the use case of Issue-138.

Related Actions Items:

No related actions

Related emails:

1. RE: Batch closing of TPE related issues (from wileys@yahoo-inc.com on 2013-06-12)
2. Re: Batch closing of TPE related issues (from mts-std@schunter.org on 2013-06-12)
3. Re: ISSUE-192 (Re: Batch closing of TPE related issues) ISSUE-201 (from mts-std@schunter.org on 2013-06-12)
4. Re: Batch closing of TPE related issues (from mts-std@schunter.org on 2013-06-12)
5. RE: Batch closing of TPE related issues (from michael.oneill@baycloud.com on 2013-06-12)
6. RE: Batch closing of TPE related issues (from wileys@yahoo-inc.com on 2013-06-12)
7. RE: Batch closing of TPE related issues (from wileys@yahoo-inc.com on 2013-06-12)
8. Re: Batch closing of TPE related issues (from rob@blaeu.com on 2013-06-12)
9. Re: Batch closing of TPE related issues (from mts-std@schunter.org on 2013-06-12)
10. Re: Batch closing of TPE related issues (from npdoty@w3.org on 2013-06-12)
11. RE: Batch closing of TPE related issues (from wileys@yahoo-inc.com on 2013-06-10)
12. Re: Batch closing of TPE related issues (from mts-std@schunter.org on 2013-06-10)
13. ISSUE-192 (Re: Batch closing of TPE related issues) (from rob@blaeu.com on 2013-06-06)
14. Re: Batch closing of TPE related issues (from rob@blaeu.com on 2013-06-06)
15. Re: Batch closing of TPE related issues (Deadline: June 12) (from mts-std@schunter.org on 2013-06-05)
16. Batch closing of TPE related issues (from mts-std@schunter.org on 2013-06-04)
17. F2F: Open Issues for the TPE Discussion on Tuesday (from mts-std@schunter.org on 2013-05-05)
18. Re: Issue maintenance for the TPE spec (from singer@apple.com on 2013-04-15)
19. RE: Issue maintenance for the TPE spec (from wileys@yahoo-inc.com on 2013-04-14)
20. Re: Issue maintenance for the TPE spec (from fielding@gbiv.com on 2013-04-13)
21. Issue maintenance for the TPE spec (from mts-std@schunter.org on 2013-04-12)
22. Re: RE: Approach to ISSUE-167: Multiple site exception (from rigo@w3.org on 2013-03-22)
23. RE: Approach to ISSUE-167: Multiple site exception (from michael.oneill@baycloud.com on 2013-03-20)
24. RE: Approach to ISSUE-167: Multiple site exception (from wileys@yahoo-inc.com on 2013-03-19)
25. RE: Approach to ISSUE-167: Multiple site exception (from michael.oneill@baycloud.com on 2013-03-18)
26. RE: Approach to ISSUE-167: Multiple site exception (from wileys@yahoo-inc.com on 2013-03-18)
27. Re: Approach to ISSUE-167: Multiple site exception (from mts-std@schunter.org on 2013-03-18)
28. RE: Approach to ISSUE-167: Multiple site exception (from wileys@yahoo-inc.com on 2013-03-18)
29. Approach to ISSUE-167: Multiple site exception (from mts-std@schunter.org on 2013-03-18)
30. Revision on agenda -- deID decisions now on Tuesday (from peter@peterswire.net on 2013-02-04)
31. Agenda update for Monday and Tuesday in Cambridge (compliance spec) (from peter@peterswire.net on 2013-02-04)
32. Re: TPWG agenda for Wednesday, January 16 (from jmayer@stanford.edu on 2013-01-30)
33. Re: TPWG agenda for Wednesday, January 16 (from singer@apple.com on 2013-01-29)
34. ISSUE Cleanup: Please reconfirm your support of Raised ISSUES (by Jan 30) (from mts-std@schunter.org on 2013-01-21)
35. Re: tracking-ISSUE-167 (mikeo): Multiple site exceptions [Tracking Preference Expression (DNT)] (from rigo@w3.org on 2012-09-26)
36. RE: tracking-ISSUE-167 (mikeo): Multiple site exceptions [Tracking Preference Expression (DNT)] (from michael.oneill@baycloud.com on 2012-09-26)
37. Re: tracking-ISSUE-167 (mikeo): Multiple site exceptions [Tracking Preference Expression (DNT)] (from rigo@w3.org on 2012-09-26)
38. FW: tracking-ISSUE-167 (mikeo): Multiple site exceptions [Tracking Preference Expression (DNT)] (from michael.oneill@baycloud.com on 2012-09-25)
39. RE: tracking-ISSUE-167 (mikeo): Multiple site exceptions [Tracking Preference Expression (DNT)] (from michael.oneill@baycloud.com on 2012-09-25)
40. RE: tracking-ISSUE-167 (mikeo): Multiple site exceptions [Tracking Preference Expression (DNT)] (from michael.oneill@baycloud.com on 2012-09-25)
41. Re: tracking-ISSUE-167 (mikeo): Multiple site exceptions [Tracking Preference Expression (DNT)] (from npdoty@w3.org on 2012-09-24)
42. RE: tracking-ISSUE-167 (mikeo): Multiple site exceptions [Tracking Preference Expression (DNT)] (from michael.oneill@baycloud.com on 2012-09-24)
43. tracking-ISSUE-167 (mikeo): Multiple site exceptions [Tracking Preference Expression (DNT)] (from sysbot+tracker@w3.org on 2012-09-24)

Related notes:

Display change log