16:55:49 RRSAgent has joined #dnt 16:55:49 logging to http://www.w3.org/2014/11/05-dnt-irc 16:55:51 RRSAgent, make logs world 16:55:51 Zakim has joined #dnt 16:55:53 Zakim, this will be TRACK 16:55:53 ok, trackbot, I see T&S_Track(dnt)12:00PM already started 16:55:54 Meeting: Tracking Protection Working Group Teleconference 16:55:54 Date: 05 November 2014 16:55:58 +rvaneijk 16:58:14 +npdoty 16:58:19 Zakim, who is on the phone? 16:58:19 On the phone I see rvaneijk, npdoty 16:58:26 chair: schunter 16:58:35 regrets+ justin, cargill 16:59:41 +[FTC] 16:59:51 kulick has joined #dnt 16:59:54 +WileyS 17:00:13 WileyS has joined #dnt 17:00:14 fielding has joined #dnt 17:00:55 +Fielding 17:01:07 +??P12 17:01:13 +kulick 17:01:32 vincent has joined #dnt 17:01:44 Zakim, ??p12 is schunter 17:01:44 +schunter; got it 17:02:21 +vincent 17:02:56 +[IPcaller] 17:02:56 zakim,[IPcaller is me] 17:02:57 +me]; got it 17:03:25 scribenick: npdoty 17:03:45 agenda http://lists.w3.org/Archives/Public/public-tracking/2014Nov/0011.html 17:03:55 Topic: TPE Last Call comments 17:04:14 zakim, me] is moneill2 17:04:14 +moneill2; got it 17:04:15 schunter: first topic is TPE Last Call comments, go through to see what consensus is emerging 17:04:18 issue-262? 17:04:19 issue-262 -- guidance regarding server responses and timing -- pending review 17:04:19 http://www.w3.org/2011/tracking-protection/track/issues/262 17:04:30 I have a proposal :) 17:04:32 schunter: long discussion on the mailing list. emerging consensus? 17:04:47 ... basically, how to deal with ad auctions, data returned from a winner 17:04:49 +Wendy 17:04:55 zakim, who is here? 17:04:55 On the phone I see rvaneijk, npdoty, [FTC], WileyS, Fielding, schunter, kulick, vincent, moneill2, Wendy 17:04:58 On IRC I see vincent, fielding, WileyS, kulick, Zakim, RRSAgent, moneill2, rvaneijk, schunter, npdoty, walter, hober, wseltzer, trackbot 17:05:05 +Chris_Pedigo 17:05:06 npdoty: summarizing my suggestion 17:05:06 -Chris_Pedigo 17:05:07 jeff has joined #dnt 17:05:17 ... for TPE, we need to look at how to respond ot the user 17:05:24 q+ 17:05:26 ... existing response value ?, dynamic 17:05:27 I agree with Nick's suggestion - my comments are more specific to the TCS side of this conversation. Responding with "?" is fair in this scenario. 17:05:34 +Chris_Pedigo 17:05:40 ... actual response value could be sent in the TK response header 17:05:54 s/ot/to 17:05:56 +Jeff 17:06:08 q+ 17:06:11 q+ 17:06:20 schunter: [summarizing] 17:06:21 schunter: ? indiciating it depends on the auction; then auction winner sends back the header of how we'll handle 17:06:34 ack r 17:07:09 rvaneijk: clarifying questions. about URL: the full URL is not necessary, truncated form does not need to be retained very long. is that correct? 17:07:10 This is a TCS specific discussion - not a TPE element 17:07:27 Who determine truncation rules? Sometimes the query string is important, sometimes it is not. 17:07:44 ... if the query string can be truncated immediately, or if it could be aggregated within a certain time 17:08:00 +q 17:08:08 schunter: sounds like a compliance discussion 17:08:12 Depends on the URL 17:08:16 rvaneijk: is the full URL needed, or just the domain information? 17:08:31 ack v 17:08:45 I am guessing Rob means the Referer URL? 17:09:05 fielding, yes. 17:09:10 vincent: my understanding is that if the bid winner provides the final answer to the DNT request, it won't know everything about the other bid losers who were involved 17:09:35 ... for example, if one of them believed it had a web-wide exception it may have tracked the user anyway 17:10:04 schunter: your point is that if the non-winners share or publish data, but only the winner responds, then the user doesn't learn the right thing 17:10:24 vincent: bid losers that don't respect DNT could profile users anyway 17:10:31 Then the Exchange should not respond that it honors DNT 17:10:34 q? 17:10:37 ack f 17:10:52 +hefferjr 17:10:54 fielding: my preference in changes of TPE would be to use a different tracking status value for the exchange model 17:11:03 +1 17:11:13 ... to handle any type of situation where the server is relaying to multiple origin servers (an HTTP gateway) 17:11:23 ... a common enough model that it probably deserves a response 17:11:35 ... client would expect to retain information about both the gateway and the winning bidder 17:12:15 ... it would then be easier to discuss compliance as a separate problem, rather than what all dynamic responses need to answer 17:12:30 ... rather than making a change at this late date 17:13:02 schunter: general pattern would be the same (TSV and then Tk header later), just a different value 17:13:08 no objection from protocol side 17:13:11 q+ what does the user learn? 17:13:15 ack m 17:13:18 q+ to ask what does the user learn? 17:13:52 moneill2, I think all should receive the DNT through the ad exchange 17:14:00 moneill2: if you pass the DNT signal through a gateway to the multiple bidders, hard to send site-specific DNT consent mechanism, or opt-out cookies 17:14:07 ... requires broadcasting 17:14:09 NT could be passed with the bid request 17:14:26 But that is a compliance issue 17:14:49 What the user gains is the ability to make pre-flight requests on the gateway's well-known URI and having a response from that gateway that does not prevent dynamic responses later on. 17:14:52 moneill2: there seems to be an ambiguity. don't need web-wide confirm, just needs tighter text description 17:15:29 q? 17:15:47 schunter: sounds like everyone is fine with the two stage response approach 17:16:09 ... questions seem to be about the compliance side about passing on the DNT signal to all bidders, or have control over the data sent to the bidders 17:16:38 ... but for non-winners, the user does not have awareness or control 17:17:03 unique IDs and URL 17:17:04 bidders that do not win the bid MUST be prohibited to enhancing profiles for later targeting 17:17:29 +q 17:17:45 moneill2: downstream bidders can only determine consent through our user-granted exception model, which won't be passed down 17:17:55 ack n 17:17:55 npdoty, you wanted to ask what does the user learn? 17:18:19 Agreement was: 17:18:20 npdoty: Question about TPE resolution 17:18:27 1. 2phase approach 17:18:31 rvaneijk, that would be what receiving DNT:1 requires if the recipient complies; not sure what good that would do if the recipient does not comply. 17:18:37 ... I agree with the two-stage response, but not sure I see the value of a separate gateway signal 17:18:49 ... why isn't the existing response enough? 17:18:57 2. Gateway signal ("G") instead of "?" 17:21:22 ack WileyS 17:21:43 WileyS: this is a common enough use case, a significant fraction of online ads that are served 17:22:08 ... separate signal, as opposed to generic ? 17:22:20 ... a common and well-understood dynamic in industry. you can do more by having a specific signal 17:23:04 ... regarding Compliance, allow downstream bidders, if they have in their most recent interaction with the user have been provided a user-granted exception 17:23:16 +q 17:23:27 ... if the exchange passes on the DNT: 1, but if the server saw a user-granted exception on their most recent interaction with the user 17:23:50 ... can re-confirm the UGE status when they next interact with the user, like when they win the bid 17:23:57 ... don't have direct access to the user agent in this case 17:24:19 I don't know exactly what will be necessary to convince users that a gateway is trustable with the DNT signal, but I do know that it will be easier for a UA if we distinguish between a gateway to multiple data controllers versus a dynamic response from a single data controller. 17:24:33 schunter: if a party participating in an auction has a user-granted exception, they should be able to track the data 17:24:53 [not-scribing, fielding, but what do you expect a user agent to actually do that's different?] 17:25:00 1. Pass on DNT;1 17:25:03 fielding: agree with the point on being able to distinguish. 17:25:06 [besides just making it easier to block ad exchanges?] 17:25:10 2. If you have an UGE, you can use data 17:25:13 … And I don't want to change the protocol later just to satisfy that distinction. It is near zero cost to add it right now (the cost being on me to define it). 17:25:15 3. If not, you cant. 17:25:24 4. The winner sends a response. 17:25:38 q+ 17:25:47 ack m 17:25:57 schunter: sounds plausible that if you have a UGE, then you can track this user 17:26:23 moneill2: ad exchange in this circumstance should reply with a "T" 17:26:46 ... either you use the consent mechanism that we have, or you send a user identifier so that they can be matched by the bidder to see if they have consent 17:27:01 Remaining open question: How can we enable the bidders to look up a UGE in a privacy friendly way. 17:27:03 ... it's possible to come up with mechanisms that solve this by getting consent 17:27:29 agree with moneill2, you're basically sharing the data (URL and UID) with other bidders 17:27:31 ... should interpret G as T, since this is tracking as far as I'm concerned 17:27:35 ack n 17:27:42 well sharing the data is prohibited... 17:27:49 Bid loser would not store the data at a per user/device level 17:28:07 q+ 17:28:40 q- 17:28:57 +q 17:29:03 Don't forget that first party advertisers also use exchanges on their own sites and sometimes win their own auctions. 17:29:18 npdoty: concerned about parties to the exchange system not updating their understandings of user consent 17:29:34 ... when DNT/UGE changes 17:30:42 q+ 17:30:45 kulick_ has joined #dnt 17:31:00 shane: I don't think we'll see UGE at that scale 17:31:03 bid losers MUST be prohibited enhancing profiles for later targeting 17:31:08 bid losers MUST be prohibited enhancing profiles for later targeting 17:31:09 ... we should be transparent to the user about what's happening 17:31:52 ... when bid winner, who had UGE previously, should send back a response saying didn't honor DNT 17:32:10 ... then user can send back DNT and show the site that he changed his mind 17:32:29 ... build and plan for common case (infrequent changing of minds) 17:32:46 schunter: inclined to agree with Shane 17:32:56 schunter: policy-management portal at Yahoo to manage exceptions. sort of assume they stay valid until you hit this portal again 17:33:16 ... inclined to agree 17:33:40 schunter: do we have agreement that non-winning bidders must not use this data for tracking purposes? 17:33:42 q? 17:33:52 ack w 17:33:54 +q 17:33:57 ack v 17:34:32 vincent: already considering an edge case, where a Web-wide exception case -- the site-wide exception is already covered 17:35:03 I just wanted to point out that the existence of UID is not considered tracking per the definition of tracking ("Tracking is the collection of data regarding a particular user's activity across multiple distinct contexts and the retention, use, or sharing of data derived from that activity outside the context in which it occurred."). I heard someone mention that in their opinion that having... 17:35:04 ...uids would be tracking. 17:35:14 ... ad exchange will broadcast the signal, but a specific ad network identifies that it has a Web-wide exception 17:35:34 We seem to have consensus that (a) DNT;1 signal is passed (a) "G" is first responded, then (b) parties with a web-wide UGE can re-use obtained data even if they loose the auction, (c) winners respond with their final answer 17:35:38 ... agree we should address the common case, but disagree on what the common case is 17:35:52 Its okay for the ad exchange because its a service provider to the participants in the auction 17:36:08 +q 17:36:13 q+ 17:36:17 (d) Non-winners without a UGE must not keep the data for tracking purposes. 17:36:28 if it behaves on behalf of one of the bidders, it should sent T in its behalf 17:36:30 Note that "G" would only appear in the tracking status resource for the exchange -- it would not be in the header field response, which only contains the dynamic response from bid winner 17:36:33 ack moneill 17:36:59 moneill2: the only way for the downstream bidders to determine whether they have a UGE requires sharing a user identifier, which is tracking 17:37:10 Its behaving as a Service Provider for mulitiple participants so "G" is better here 17:37:33 ... spec says user identifiers shouldn't be used unless there is no other option, and consent is our option 17:37:50 DNT DOES NOT halt sharing of IDs for ad transactions 17:37:58 schunter: not sure I understand. only way to do it is to forward identifiers 17:38:36 WileyS: confusion on identifiers. (repost from kulick above) passing an identifier as part of an advertising transaction is a permitted use, so I don't see an issue there 17:38:54 sharing of UID AND URL would be prohibited 17:39:00 q+ 17:39:29 ... service provider acting on behalf of multiple parties. if the different ad networks had been elements on the page already, would have received those ids. permitted uses around security, frequency capping, financial 17:39:54 schunter: unique ID is sprayed over the Web, but no one receiving it is using it for outside the permitted uses 17:40:07 ack n 17:40:17 TCS: When a third party to a given user action receives a DNT:1 signal in a related network interaction: that party MUST NOT collect, share, or use data related to that interaction; 17:40:26 q+ 17:40:53 Losing bidder so only be able to retain de-identified/aggregate data - nothing user/device specific 17:41:18 npdoty: it would be concerning if non-winning bidder retained info without any communications to user 17:41:34 q- 17:41:39 but they wont be tracked by non-bid winners 17:41:50 ... gateway needs to take responsibility for combining responses if service-provider to multiple parties 17:42:15 not-scribing, WileyS, kulick -- that's my understanding as well, but I think schunter's text was suggesting that multiple parties would track, and the user would never receive that feedback 17:42:47 additional normative requirement for the ad exchange: data minimisation (truncate the query string of the referrer URL immediately) 17:43:19 +q 17:43:21 Nick - I'm okay with stating the bid-loser can not retain user/device specific data 17:43:39 schunter: strategic behavior possible from those who've obtained UGE, if they put in low bids just to get info on multiple auctions they lose 17:43:47 ack v 17:43:48 ... yet never communicate back to users 17:44:06 vincent: It's not just the UserID, but also URLs in the bid request that are problematic 17:44:21 Two alternatives seem to emerge: 17:44:30 ack rvaneijk 17:44:34 1. The (a)-(d) case 17:44:44 The 3rd party is not sharing - the Service Provider (representing the 3rd party) is passing it to themselves (where a service provider = the party they are representing). 17:44:51 rvaneijk: second Vincent. can we add some normative requirements on conveyance of full URL? 17:44:56 2. A case where only the winner can keep data (using or ot using a UGE) 17:44:57 ... I think only domain should be necessary 17:44:58 URL truncation - you are incorrect. What data do you have to defend your position? 17:45:10 q? 17:45:15 scribenick: npdoty 17:45:17 ack m 17:45:17 ack mon 17:45:21 Opinions aren't has helpful in areas where companies spend millions of dollars to defend their businesses. 17:45:55 If we find a way to provide transparency (who has tracked you), then the option (a)-(d) may be more accetable. 17:45:59 WIleyS: had discussions with some long tail companies. 17:46:13 WileyS, the service provider can not represent multiple entities at a given time. The one it represents is sharing data if you prefer, but that's still sharing 17:46:18 moneill2: comment to WileyS about the confirming UGE. when a user has consent with a large number of bidders, it would add to latency to add to a cookie all the sites with UGEs 17:46:22 Vincent - yes they can. 17:46:34 Vincent - your stating they can't doesn't change that. 17:46:43 ... ad exchange could have a subset of sites for which it polls for a user-granted exception 17:46:50 ... will send to mailing list 17:47:13 q+ 17:47:32 schunter: options are either my (a)-(d) where background tracking can go on. or where data can't be retained by bid losers (as if only the winner interacted with you) 17:47:33 Matthias - agree with that approach. 17:48:25 WileyS: agree with the latter approach. bid losers wouldn't retain information even if they felt they had a UGE, because they wouldn't have a chance to communicate back to the user 17:48:56 q- 17:49:07 ... chance to explain to the user. as a bid winner, if you didn't want to consent, can fix that as soon as talked to the user agent 17:49:17 Consensus: Non-winners must not retain individualised data; Winner can use UGE (to keep tracking data) and is able to provide transparancy by response header. 17:49:23 How is winner going to convey that they assumed UGE (as opposed to consent)? 17:49:24 ... bid losers would keep aggregate or deidentified information to remember that they lost, but nothing user or device specific or profiling 17:49:31 q+ 17:49:35 q+ 17:49:41 ack r 17:49:47 ack fielding 17:49:49 q+ rvaneijk 17:50:08 Roy - I was thinking "C" here as well 17:50:23 fielding: if the bid-winner communicates that they have User-Granted Exception, how do they respond? "C" is used for having consent 17:50:30 schunter: I think "C" 17:50:39 ack r 17:51:04 rvaneijk: use case of an ad exchange that has bidders that respect DNT and bidders that don't respect DNT 17:51:21 ... would prefer outcome that only allows bidding parties that do adhere to DNT standard 17:51:28 Rob - that will push the entire ecosystem to not support DNT 17:51:31 schunter: ad exchange has to be responsible for enforcing requirements 17:51:41 q+ 17:51:42 that would introduce a chicken and egg problem to deployent 17:51:51 Rob - you are wrong - please speak to companies on this matter 17:51:59 s/deployent/deployment/ 17:52:05 rvaneijk: lack of adoption doesn't speak to the actual problem of accountability 17:52:13 ... otherwise doesn't express much meaning 17:52:44 +Q 17:52:55 agree with rvaneijk. Plus we should support privacy friendly alternatives that would be able to differenciate themselves 17:52:55 schunter: concern is that if the user uses DNT and the ad exchange supports it, then the user won't be aware of the data collection 17:53:05 ack n 17:53:58 npdoty: 2 levels of concern: if bidders in ad exchange doesn't support DNT and doesn't support rules of auction, keeping data 17:54:20 Compromise: The ad exchange is responsible to ensure that no identifying data is kept by the non-winners (by contractual means or by DNT compliance or by not forwarding IDs) 17:54:36 ack WileyS 17:54:39 WileyS: similar 17:55:29 ... the real-world dynamics are about how businesses work. there's a timeframe where the exchange can only turn on DNT support once every bidder already supports it 17:55:47 ... unlikely to kick out bidders who don't support DNT 17:56:09 ... would push away from industry support of DNT 17:56:38 ... for transparency purposes, indicate that it's a mixed state. "G" could indicate that it includes both parties that support and parties that don't support DNT 17:56:42 Wiley, the ad exchange just replies with T unless it knows all the bidders support DNT 17:57:03 ... if there were direct communication with the user agent, the user agent could be configured to not send requests to those servers 17:57:30 ... if you felt that was appropriate, you could still do that with the "G" response. user agents could stop transactions on "G" because of that uncertainty 17:57:42 ... it would be a long wait 17:58:21 schunter: in that case "G" would be the same as "T" about potential tracking 17:58:37 ... even if the winner eventually says that they don't track 17:59:07 WileyS: more likely that ad exchanges may just not respond to DNT signals 17:59:25 ... until you have widespread support, you'd just be silent 17:59:44 ... but I think it would be better to get exchanges and many bidders to support, which could then entice others 17:59:53 ... but I don't think we should start that way 18:00:12 schunter: need to move on 18:00:24 ... write down a consensus version, regarding non-winners not storing information 18:00:34 ... and remaining question about ad exchange accountability or enforcement 18:00:56 ... who can take an action item to write this down? 18:01:10 I'm on vacation starting this evening - please pick someone else 18:02:43 schunter: important to write down that we agreed that non-winners are not to keep data. just a question of how to enforce it 18:03:08 rvaneijk: understand Shane's point about different levels of ad exchange support 18:03:16 schunter: can you write down this part we agree on? 18:03:35 rvaneijk: think there should be a middle path, should have more discussion 18:03:46 q+ 18:04:06 Consensus: (1) Ad exchange responds with "G", (2) winner returns header and may use UGE, (3) non-winners must not keep data 18:04:07 ack vincent 18:04:14 vincent: still think there are differences 18:05:01 not-scribing, fielding, are you going to write up a "G" proposal? 18:05:18 schunter: rvaneijk, can you summarize the consensus before the next call? 18:05:23 I'll be on vacation for a bit so please don't take my silence on the discussion as agreement :-) 18:05:45 BTW, I will be at the IETF in Honolulu next week, so may or may not have time to write. 18:05:47 rvaneijk: don't want an action item at this time 18:06:02 schunter: consensus on those three points. 18:06:22 Open question: How to handle bidders who may not satify our requirement not to keep data. 18:06:26 action on fielding to draft a G response for exchanges 18:06:26 Error finding 'on'. You can review and register nicknames at . 18:06:41 issue-266? 18:06:41 issue-266 -- automatic expiration of a tracking preference exception via API parameter -- raised 18:06:41 http://www.w3.org/2011/tracking-protection/track/issues/266 18:06:59 schunter: dsinger not here, can postpone discussion 18:07:01 q+ 18:07:03 action fielding to draft a G response for exchanges 18:07:03 Created ACTION-463 - to draft a g response for exchanges [on Roy Fielding - due 2014-11-12]. 18:07:30 q- 18:08:12 not-scribing, was just going to say that we should make sure we have the proposal from moneill2 18:08:29 slackers 18:08:58 18:09:13 schunter: made some progress on this issue, but push the rest to the next call 18:09:29 Thank you Matthias! 18:09:29 ... currently finishing the audience measurement cfo, should send around in the next week 18:09:32 ... anything else? 18:09:36 -Chris_Pedigo 18:09:39 -WileyS 18:09:45 -npdoty 18:09:46 -[FTC] 18:09:46 -kulick 18:09:47 thanks nick 18:09:47 -Wendy 18:09:47 -schunter 18:09:47 [adjourned] 18:09:51 -vincent 18:09:53 -Fielding 18:09:53 -rvaneijk 18:09:55 Zakim, list attendees 18:09:55 As of this point the attendees have been rvaneijk, npdoty, [FTC], WileyS, Fielding, kulick, schunter, vincent, [IPcaller], moneill2, Wendy, Chris_Pedigo, Jeff, hefferjr 18:09:58 -moneill2 18:10:00 rrsagent, please draft the minutes 18:10:00 I have made the request to generate http://www.w3.org/2014/11/05-dnt-minutes.html npdoty 18:10:14 -Jeff 18:10:22 -hefferjr 18:10:23 T&S_Track(dnt)12:00PM has ended 18:10:23 Attendees were rvaneijk, npdoty, [FTC], WileyS, Fielding, kulick, schunter, vincent, [IPcaller], moneill2, Wendy, Chris_Pedigo, Jeff, hefferjr 18:10:34 Zakim, bye 18:10:34 Zakim has left #dnt 18:10:37 RRSAgent, bye 18:10:37 I see no action items