Re: Call for Experts: How can a site determine whether it is 1st or 3rd party? [ISSUE-60]

fyi: Following a suggestion by Thomas Roessler, the page is now in the
W3C wiki at http://www.w3.org/wiki/FirstThirdPartyDetection

On 10/13/2011 3:33 PM, Matthias Schunter wrote:
> Hi Team,
> 
> 
> As an experiment, I started a scratchpad at:
>  https://docs.google.com/document/d/1FgbUKuRkNrDYc6RgrRUn6-LT8eFZipcwiRKVQn9eQco/edit?hl=en_US
> 
> Feel free to register yourself and add your thoughts to the scratchpad
> and give me feedback on using a scratchpad.
> 
> 
> Regards,
> matthias
> 
> 
> 
> On 10/13/2011 9:55 AM, Matthias Schunter wrote:
>> Hi Team,
>>
>>
>> during our F2F we agreed that we need a way for a site to determine
>> whether it is acting as 1st or 3rd party.
>>
>> I'd like to form a sub-team of experts to design proposals how this
>> can be achieved and/or identify technical limitations.
>>
>> Working Definition (may be refined by the sub-group):
>> - 1st party: The site that the user visits directly (e.g. by
>>     typing the URL)
>> - associated parties: Other sites (with different URLs) that may
>>     be exempted. E.g. co-branded sites such as
>>       lotus.com that belongings to IBM (and may be run on
>>       same or different infrastructure)
>> - 3rd parties: All other sites
>>
>> Challenge:
>> - How can a site tell in what category it is (wrt a request).
>>
>> If you are interested to join the group, drop me a line.
>> Note that the goal is just to prepare proposals that will then be
>> discussed in a larger group.
>>
>>
>> Regards,
>>  matthias
>>
> 

-- 
Dr. Matthias Schunter, MBA
IBM Zurich Research Laboratory,  Ph. +41 (44) 724-8329
Homepage: www.schunter.org, Email: schunter(at)acm.org
PGP Fingerprint    989AA3ED 21A19EF2 B0058374 BE0EE10D

Received on Friday, 14 October 2011 07:41:08 UTC