15:56:02 RRSAgent has joined #dnt 15:56:02 logging to http://www.w3.org/2012/05/02-dnt-irc 15:56:04 Zakim, ??P4 is schunter 15:56:04 +schunter; got it 15:56:08 rrsagent, make logs public 15:56:09 agenda? 15:56:10 Zakim, ??P4 is schunter 15:56:16 I already had ??P4 as schunter, schunter 15:56:24 zakim, code? 15:56:25 the conference code is 87225 (tel:+1.617.761.6200 sip:zakim@voip.w3.org), rigo 15:57:01 +rigo 15:57:10 +npdoty 15:57:15 AClearwater has joined #dnt 15:57:17 zakim, rigo is me 15:57:17 +rigo; got it 15:57:28 + +1.202.835.aaaa 15:57:33 regrets+ jchester 15:57:35 Marc has joined #DNT 15:57:49 ifette has joined #dnt 15:58:00 Nick, I added Jeff and Ninja already 15:58:09 +Loretta 15:58:12 + +1.202.326.aabb 15:58:20 Zakim, aabb is me 15:58:20 +efelten; got it 15:58:21 Zakim, Loretta is ifette 15:58:21 +ifette; got it 15:58:25 that's really annoying 15:58:42 Zakim, who is online 15:58:48 Anyone know how to get Zakim to show the phone number associated with what it thinks is a name? 15:58:48 I don't understand 'who is online', schunter 15:58:55 Zakim, who is on the call? 15:58:58 +alex.a 15:59:00 Marc 202.835 15:59:00 On the phone I see aleecia, schunter, alex, rvaneijk, rigo.a, npdoty, +1.202.835.aaaa, ifette, efelten, alex.a (muted) 15:59:03 zakim, mute me 15:59:04 sidstamm has joined #dnt 15:59:07 alex should now be muted 15:59:16 zakim, aaaa is Marc 15:59:21 Zakim, aaaa is Marc 15:59:21 +Marc; got it 15:59:25 sorry, rvaneijk, I do not recognize a party named 'aaaa' 15:59:27 fielding has joined #dnt 15:59:30 hefferjr has joined #dnt 15:59:50 rigo, you win :) 15:59:52 jchester2 has joined #dnt 15:59:57 Zakim, who is making noise? 16:00:14 +fielding 16:00:17 mute me 16:00:19 someone has funky background noise 16:00:20 Zakim, mute me 16:00:25 ifette, listening for 10 seconds I heard sound from the following: schunter (12%) 16:00:28 :) 16:00:33 vinent has joined #dnt 16:00:37 schunter should now be muted 16:00:38 eberkower has joined #dnt 16:00:43 Joanne has joined #DNT 16:00:51 + +1.617.733.aacc 16:01:14 Zakim, unmute me 16:01:26 Zakim, 618 is ifette 16:01:39 Zakim, aacc is AClearwater 16:01:39 schunter should no longer be muted 16:01:42 646 is eberkower 16:01:52 zakim, 618 is ifette 16:01:55 sorry, ifette, I do not recognize a party named '618' 16:01:57 gah 16:01:58 Zakim, who is on the phone? 16:01:59 vinay has joined #dnt 16:02:01 Sprint is unable to complete my call at this time. 16:02:07 Sigh. 16:02:09 + +1.646.654.aadd 16:02:14 +??P64 16:02:16 Zakim, aadd is eberkower 16:02:16 Zakim, mute me 16:02:17 +??P60 16:02:21 646 654 is eberkower 16:02:21 + +1.916.641.aaee 16:02:25 (thank you Nick) 16:02:26 zakim, aadd is eberkower 16:02:28 +AClearwater; got it 16:02:40 Zakim, +1.916.641 is Joanne 16:02:50 Zakim, aaee is Joanne 16:02:51 Zakim, unmute me 16:02:57 zakim, aaee is Joanne 16:03:00 sorry, ifette, I do not recognize a party named '618' 16:03:04 On the phone I see fielding, AClearwater, +1.646.654.aadd, ??P64, ??P60, +1.916.641.aaee, aleecia, schunter, alex (muted), rvaneijk, rigo.a, npdoty, Marc, ifette, efelten, alex.a 16:03:07 ack schunter 16:03:08 zakim, ??P60 is vincent 16:03:18 +eberkower; got it 16:03:18 Ionel has joined #dnt 16:03:20 schunter should now be muted 16:03:23 agenda? 16:03:25 +vinay 16:03:27 pedermagee has joined #dnt 16:03:27 sorry, rigo, I do not recognize a party named 'aadd' 16:03:42 Zakim, ??P60 is vincent 16:03:45 +??P20 16:03:47 tedleung has joined #dnt 16:03:50 +Joanne; got it 16:03:54 next agendum 16:03:55 sorry, npdoty, I do not recognize a party named 'aaee' 16:03:56 agenda: http://www.w3.org/mid/4FA00341.8030702@schunter.org 16:03:57 schunter should no longer be muted 16:03:59 +tl 16:04:03 aadd = +1 646 654 = eberkower 16:04:07 zakim, mute me 16:04:08 sorry, rigo, I do not recognize a party named 'aaee' 16:04:17 + +1.202.326.aaff 16:04:20 +vincent; got it 16:04:23 q? 16:04:23 +justin 16:04:25 would you like me to scribe today? 16:04:26 zakim, who is here? 16:04:40 scribe: aleecia 16:04:59 kj has joined #dnt 16:05:01 I already had ??P60 as vincent, vincent 16:05:14 justin_ has joined #dnt 16:05:15 +bilcorry 16:05:18 scribenick: tedleung 16:05:25 tl should now be muted 16:05:29 close agendum 1 16:05:31 + +1.206.664.aagg 16:05:40 Anna has joined #dnt 16:05:42 zakim, aagg is tedleung 16:05:44 On the phone I see fielding, AClearwater, eberkower, ??P64, vincent, Joanne, vinay, ??P20, tl (muted), +1.202.326.aaff, justin, bilcorry, +1.206.664.aagg, aleecia, schunter, alex 16:05:45 zakim, aagg is Anna 16:05:46 next agendum 16:05:51 ... (muted), rvaneijk, rigo.a, npdoty, Marc, ifette, efelten, alex.a 16:06:06 review of overdue action items 16:06:09 https://www.w3.org/2011/tracking-protection/track/actions/overdue 16:06:09 + +40.72.321.aahh 16:06:10 Zakim, Anna is Anna_Long 16:06:20 ChrisPedigoOPA has joined #dnt 16:06:25 +??P78 16:06:28 action-131? 16:06:28 ACTION-131 -- Roy Fielding to sketch use case for user agent requests on tracking status resource -- due 2012-04-25 -- OPEN 16:06:28 http://www.w3.org/2011/tracking-protection/track/actions/131 16:06:28 ACTION-131? 16:06:28 ACTION-131 -- Roy Fielding to sketch use case for user agent requests on tracking status resource -- due 2012-04-25 -- OPEN 16:06:30 http://www.w3.org/2011/tracking-protection/track/actions/131 16:06:50 +tedleung; got it 16:06:57 sorry, rigo, I do not recognize a party named 'aagg' 16:06:58 waiting until response is clarified. Postponed 1 wk 16:06:59 ACTION-131 due 2012-05-09 16:06:59 ACTION-131 Sketch use case for user agent requests on tracking status resource due date now 2012-05-09 16:07:02 Chapell has joined #DNT 16:07:03 cOlsen has joined #dnt 16:07:04 On IRC I see Anna, justin_, kj, tedleung, pedermagee, Ionel, vinay, Joanne, eberkower, vincent, jchester2, hefferjr, fielding, sidstamm, ifette, Marc, AClearwater, RRSAgent, 16:07:07 ... rvaneijk, npdoty, efelten, alex, rigo, aleecia, schunter, tl, tlr, trackbot, Zakim, hober, wseltzer_iiw, pde 16:07:11 +justin.a 16:07:15 (updating Ninja's now per email) 16:07:26 ACTION-141? 16:07:26 ACTION-141 -- Rigo Wenning to draft text on clarity that this is for user agents (addressing his concern) -- due 2012-03-07 -- OPEN 16:07:26 http://www.w3.org/2011/tracking-protection/track/actions/141 16:07:29 hwest has joined #dnt 16:07:29 sorry, npdoty, I do not recognize a party named 'Anna' 16:07:52 Rigo wrote this: http://lists.w3.org/Archives/Public/public-tracking/2012Mar/0045.html 16:07:57 rigo to review action 16:08:01 ACTION-150? 16:08:01 ACTION-150 -- Ninja Marnau to analyse EU legal implications of exceptions to (thissite, *) -- due 2012-05-04 -- OPEN 16:08:01 http://www.w3.org/2011/tracking-protection/track/actions/150 16:08:12 (added more time for Ninja) 16:08:13 ninja needs more time for her actions 16:08:17 Lia has joined #dnt 16:08:19 (taken care of) 16:08:46 rigo done with work for action-141 16:08:50 ACTION-163 due 2012-05-09 16:08:50 ACTION-163 Explain confusion or an alternative to text explaining the interaction with existing user privacy controls due date now 2012-05-09 16:08:52 rigo, what do you mean that you don't see it in tracker? 16:08:57 ACTION-141: rigo thinks this is done 16:08:57 ACTION-141 Draft text on clarity that this is for user agents (addressing his concern) notes added 16:08:59 + +1.202.744.aaii 16:09:00 dsriedel has joined #dnt 16:09:02 Zakim, who is making noise? 16:09:03 pde, are you here? 16:09:07 +Chapell 16:09:07 I know Peter and Shane are working on this 16:09:11 + +1.202.326.aajj 16:09:13 +??P86 16:09:13 Last I heard, it's not done. 16:09:15 pde is rarely on the calls 16:09:20 But is well in progress. 16:09:22 zakim, who is making noise 16:09:25 johnsimpson has joined #dnt 16:09:26 zakim, who is making noise? 16:09:31 Chris_IAB has joined #dnt 16:09:35 JC has joined #DNT 16:09:35 ACTION-153? 16:09:35 ACTION-153 -- Jonathan Mayer to draft a permitted use/definition for unlinkable data -- due 2012-04-04 -- CLOSED 16:09:35 http://www.w3.org/2011/tracking-protection/track/actions/153 16:09:37 + +1.202.587.aakk 16:09:43 action-163? 16:09:43 ACTION-163 -- Roy Fielding to explain confusion or an alternative to text explaining the interaction with existing user privacy controls -- due 2012-05-09 -- OPEN 16:09:43 http://www.w3.org/2011/tracking-protection/track/actions/163 16:09:44 Zakim, who is making noise 16:09:46 + +1.202.643.aall 16:09:46 KevinT has joined #dnt 16:09:50 action-163 pushed back 1 week 16:09:53 ACTION-166? 16:09:53 ACTION-166 -- Heather West to draft updated text on definitions of "collection" and similar terms "Data collection, retention, use, and sharing" (with fielding) -- due 2012-05-01 -- OPEN 16:09:53 http://www.w3.org/2011/tracking-protection/track/actions/166 16:09:55 Zakim, aakk is me 16:09:57 +[Microsoft] 16:10:00 bilcorry has joined #dnt 16:10:01 npdoty, listening for 10 seconds I heard sound from the following: schunter (69%), fielding (4%), vincent (15%) 16:10:05 ACTION-166 due 2012-05-09 16:10:05 ACTION-166 Draft updated text on definitions of "collection" and similar terms "Data collection, retention, use, and sharing" (with fielding) due date now 2012-05-09 16:10:08 +KevinT 16:10:10 action-166 delayed by one week 16:10:11 I don't understand 'who is making noise', rigo 16:10:12 jmayer has joined #dnt 16:10:15 rigo, listening for 10 seconds I heard sound from the following: schunter (21%), fielding (9%), vincent (5%) 16:10:18 I don't understand 'who is making noise', schunter 16:10:21 + +49.721.91.aamm 16:10:23 Zakim, who is on the call? 16:10:23 +Lia; got it 16:10:25 ACTION-169? 16:10:25 ACTION-169 -- Rigo Wenning to create text describing "if your privacy policies don't match, don't claim an associated domain" -- due 2012-04-19 -- OPEN 16:10:25 http://www.w3.org/2011/tracking-protection/track/actions/169 16:10:27 +johnsimpson 16:10:27 hum i'm on mute actually, i must have get the wrong prot number 16:10:29 On the phone I see fielding, AClearwater, eberkower, ??P64, vincent, Joanne, vinay, ??P20, tl (muted), +1.202.326.aaff, justin, bilcorry, tedleung, +40.72.321.aahh, ??P78, 16:10:32 ... justin.a, +1.202.744.aaii, Chapell, +1.202.326.aajj, ??P86, Lia, +1.202.643.aall, [Microsoft], KevinT, +49.721.91.aamm, johnsimpson, aleecia, schunter, alex (muted), rvaneijk, 16:10:33 Zakim, mute me 16:10:34 zakim, aamm is dsriedel 16:10:35 ... rigo.a, npdoty, Marc, ifette, efelten, alex.a 16:10:48 Lia should now be muted 16:10:51 +dsriedel; got it 16:10:55 +jmayer 16:10:55 zakim, mute me 16:10:56 ACTION-169 due 2012-05-09 16:10:56 ACTION-169 Create text describing "if your privacy policies don't match, don't claim an associated domain" due date now 2012-05-09 16:10:59 action-169 delayed 1 week 16:11:00 Zakim, ??P64 is vincent 16:11:01 dsriedel should now be muted 16:11:06 ACTION-170? 16:11:06 ACTION-170 -- Heather West to provide an alternative approach to well-known URI for resources that are used in both first-party and third-party contexts without changing the resource URI -- due 2012-04-19 -- OPEN 16:11:06 http://www.w3.org/2011/tracking-protection/track/actions/170 16:11:09 +vincent; got it 16:11:16 ACTION-170 due 2012-05-09 16:11:16 ACTION-170 Provide an alternative approach to well-known URI for resources that are used in both first-party and third-party contexts without changing the resource URI due date now 2012-05-09 16:11:21 apologies for joining late 16:11:21 action-170 delayed 1 week 16:11:38 ACTION-190? 16:11:40 ACTION-190 -- Ian Fette to write up proposal for allowed uses for protocol data in the first N weeks -- due 2012-05-02 -- OPEN 16:11:40 http://www.w3.org/2011/tracking-protection/track/actions/190 16:11:40 q+ 16:11:47 enewland has joined #dnt 16:11:48 q? 16:11:49 + +1.609.981.aann 16:11:53 thanks Justin - that's going to be useful sooner rather than later, I think 16:12:04 -tl 16:12:10 BrendanIAB has joined #DNT 16:12:16 zakim, aann is me. 16:12:16 +tl; got it 16:12:17 https://www.w3.org/2011/tracking-protection/track/actions/190 16:12:20 zakim, who is here 16:12:20 enewland, you need to end that query with '?' 16:12:28 zakim, who is here? 16:12:29 On the phone I see fielding, AClearwater, eberkower, vincent.a, vincent, Joanne, vinay, ??P20, +1.202.326.aaff, justin, bilcorry, tedleung, +40.72.321.aahh, ??P78, justin.a, 16:12:29 ... +1.202.744.aaii, Chapell, +1.202.326.aajj, ??P86, Lia (muted), +1.202.643.aall, [Microsoft], KevinT, dsriedel (muted), johnsimpson, jmayer, tl, aleecia, schunter, alex (muted), 16:12:29 ... rvaneijk, rigo.a, npdoty, Marc, ifette, efelten, alex.a 16:12:34 On IRC I see BrendanIAB, enewland, jmayer, bilcorry, KevinT, JC, Chris_IAB, johnsimpson, dsriedel, Lia, hwest, cOlsen, Chapell, ChrisPedigoOPA, Anna, justin_, kj, tedleung, 16:12:37 ... pedermagee, Ionel, vinay, Joanne, eberkower, vincent, jchester2, hefferjr, fielding, sidstamm, ifette, Marc, AClearwater, RRSAgent, rvaneijk, npdoty, efelten, alex, rigo, 16:12:41 ... aleecia, schunter, tl, tlr, trackbot, Zakim, hober, wseltzer_iiw, pde 16:12:45 agenda? 16:12:46 New Business 16:12:59 http://www.w3.org/2011/tracking-protection/drafts/tracking-dnt.html#responding 16:13:05 close agendum 2 16:13:10 next agendum 16:13:12 Zakim, mute me 16:13:19 q- 16:13:21 bilcorry should now be muted 16:13:22 zakim, justin.a is enewland 16:13:26 q? 16:13:29 +enewland; got it 16:13:31 Zakim, take up agendum 3 16:13:38 agendum 3. "Review / feedback on hybrid proposal in spec (Section 5 of http://www.w3.org/2011/tracking-protection/drafts/tracking-dnt.html)" taken up [from aleecia] 16:13:54 kj_ has joined #dnt 16:14:08 -tl 16:14:11 +q 16:14:12 q? 16:14:12 5.1 Overview 16:14:13 The Tracking Protection protocol is designed to be applicable regardless of the response from servers that receive the tracking preference expression, allowing conformance to be achieved without impacting the operational performance of site resources. However, there is also a desire to support verification or pre-flight testing of a site's conformance with this protocol for evaluating conformance before sending data, enabling specialized user interfaces, 16:14:14 discovering the scope of protocol deployment, and testing adherence to potential regulations. 16:14:15 This section explains how a user agent may discover an origin server's tracking status for a given resource. It defines a required well-known tracking status resource for describing a machine-readable tracking status and a Tk response header field that may be sent in any HTTP response and must be sent in responses to requests that modify the tracking status for that user agent. 16:14:23 ack tl 16:14:38 [my phone just disconnected, so I'm typing my comments] 16:15:12 It does not look as though the most recent draft which we discussed in DC has been incorporated into section 5. 16:15:15 I don't understand the phrasing of "regardless of the response from servers" 16:15:27 +tl 16:15:36 q? 16:15:43 q+ 16:16:07 we're looking at: http://www.w3.org/2011/tracking-protection/drafts/tracking-dnt.html#responding 16:16:08 Zakim, ??P64 is really vincent 16:16:08 +vincent; got it 16:16:15 tl: does the current text include the changes discussed in DC? 16:16:17 egrant has joined #DNT 16:16:45 fielding: I merged the content into the draft keeping to "best editorial style" 16:16:54 fielding, are there substantive differences from what you discussed in DC? 16:17:18 fielding: in some cases i changed the content 16:17:18 maybe could you summarize those changes for us quickly? 16:17:40 schunter: are we seeing disagreement between the proposal co-authors? 16:17:45 q- 16:17:55 (What I think you're saying is that servers can respond in two different ways, rather than "regardless of the response" which to means something a little different) 16:18:12 http://www.w3.org/mid/E1SORt7-0006O6-2g@lionel-hutz.w3.org 16:18:23 following npdoty's suggestion to summarize the changes 16:19:11 to me this looks like too much P3P reloaded and thus does not respect the direction of the protocol 16:19:24 tl: it looks like the vast majority of normative content that I proposed was not added 16:19:32 q+ 16:19:35 -tl 16:19:41 q? 16:19:44 http://lists.w3.org/Archives/Public/public-tracking-commit/2012Apr/0004.html 16:19:47 Well, this phone connection is just fantastic. 16:20:12 +tl 16:20:26 And I'm back. 16:21:04 rigo: i was originally a proponent of a feedback mechanism, but what we have now looks close to a P3P protocol, e.g. an announcement of a policy, which is the reverse direction from DNT 16:21:12 q? 16:21:16 ack ri 16:21:24 rigo, is your concern about the complexity of the well-known URI content? or that it doesn't seem responsive to the user expressed preference? 16:21:29 q? 16:21:41 the second 16:21:59 q? 16:22:20 schunter: what exactly don't you like about the proposal 16:22:36 Correction: the I was looking at an old cache. I retract my concerns. 16:22:45 To be clear, we DID NOT have consensus on Tom's text at the DC meeting. We didn't even discuss it as a WG whole -- only in a single breakout section -- and even then we did not receive consensus. So I am trying to find a proposal that addresses EVERYONE''s concerns, not just Tom. 16:23:03 tom: Is it OK to discuss the section anyway? 16:23:11 rigo: I fear it's getting so complicated that it's almost becoming a policy, it's not just reflecting the preference of the user 16:23:45 fielding: I perceived that a majority was OK with tom's 'minimal' header proposal that was created with Shane, Rigo, and others. 16:24:01 +q 16:24:12 q? 16:24:18 fielding: that's not the use case that we have in front of us 16:24:30 tl: agrees with fielding 16:24:32 Rigo we're trying to build so that user agents can express these details if they wish 16:25:02 schunter: i'm unsure because we don't really have a complete set of technical requirements 16:25:19 fielding, you were making the point that this isn't just an echo, which I believe Rigo would agree with 16:25:46 q+ 16:25:52 q? 16:26:01 tl: we looked at the technical requirements and added the necessary fields 16:26:15 I thought we hadn't actually considered the list of fields as a group, leaving that open until later 16:26:45 Perhaps now is later 16:26:49 as it were 16:27:04 back and forth between schunter and tl regarding the set of requirements 16:27:04 oh really? 16:27:10 aleecia, yes, I think we've reached now now 16:27:22 if any one person has a requirement it goes into the spec? 16:27:29 in that case, i have lots of requirements 16:27:42 As long as nobody else objects. 16:28:08 q- 16:28:11 claim is that requirements for a single person can be added to the spec, unless there are objections 16:28:13 ack tl 16:28:15 The second paragraph in the intro seems clear to me 16:28:16 Should we restore the section on WG notes? 16:28:32 q+ 16:28:46 q? 16:28:51 ack aleecia 16:29:00 q+ 16:29:07 schunter: we now must have a well-known URI, we cannot just use headers 16:29:51 This is not the text that we reviewed in DC, there have been substantial modifications. 16:30:03 q+ 16:30:03 fielding: was trying to say the server must respond 16:30:10 q? 16:30:10 tl, yes 16:30:14 q? 16:30:19 ack ifette 16:30:20 ack ifette 16:30:43 q? 16:30:47 ack rigo 16:30:52 do we believe the full set of requirements/desires are listed in this Overview section? 16:31:29 Well-known URI and headers should be as simple as possible (but no simpler) ;-) 16:31:30 No, absolutely not. 16:31:37 I'm having trouble with the subject and object in the opening line. Something like (and maybe this is wrong) "Servers must abide by DNT regardless of the response" or something along these lines? I don't quite get who must do what. 16:31:48 rigo: i'm unclear on what this feedback mechanism actually says. 16:31:57 even "the response" is bad there, I want who is responding -- I'm not helping. 16:31:59 tl, fielding, should we document all the desires in the Overview given that we're documenting some? 16:32:13 es 16:32:17 yes 16:32:18 q? 16:32:19 But perhaps the problem I'm having becomes more clear, I want the subject and object nailed down 16:32:41 q+ 16:32:50 5.2.1 Definition 16:32:51 An origin server must provide a tracking status resource at the well-known identifier [RFC5785] 16:32:53 (relative to the URI of that origin server) for obtaining information about the potential tracking behavior of resources provided by that origin server. A tracking status resource may be used for verification of DNT support, as described in section 5.2.4 Using the Tracking Status. 16:33:16 A valid retrieval request (e.g., a GET in HTTP) on the well-known URI must result in either a successful response containing a machine-readable representation of the site-wide tracking status, as defined below, or a sequence of redirects that leads to such a representation. A user agent may consider failure to provide access to such a representation equivalent to the origin server not implementing this protocol. The representation might be cached, as described 16:33:17 section 5.2.5 Caching. 16:33:18 If an origin server contains multiple services that are controlled by distinct parties or that might have differing behavior or policies regarding tracking, then it may also provide a space of well-known resources for obtaining information about the potential tracking behavior of each specific service. This parallel tree of resources is called the tracking status resource space. 16:33:56 New: When sending a request for the tracking status, a user agent should include any cookie data [COOKIES] (set prior to the request) that would be sent in a normal request to that origin server, since that data might be needed by the server to determine the current tracking status. For example, the cookie data might indicate a prior out-of-band decision by the user to opt-out or consent to tracking by that origin server. 16:33:56 All requests on the tracking status resource space, including the site-wide tracking status resource, must not be tracked, irrespective of the presence, value, or absence of a DNT header field, cookies, or any other information in the request. In addition, all responses to those requests, including the responses to redirected tracking status requests, must not have Set-Cookie or Set-Cookie2 header fields and must not have content that initiates tracking beyond 16:33:57 what was already present in the request. A user agent should ignore, or treat as an error, any Set-Cookie or Set-Cookie2 header field received in such a response. 16:34:15 q? 16:34:18 q+ 16:34:24 ack ifette 16:34:29 fielding: mostly unchanged, added the final 2 paragraphs to cover what should be done with cookies 16:34:55 +q 16:35:38 -q 16:35:47 ifette: if you have different policies for subspaces of the site, then what does the policy for the top level-space look like 16:36:04 -Marc 16:36:07 So that's the section I didn't paste in: 16:36:12 The tracking status resource space is defined by the following URI Template [URI-TEMPLATE]: 16:36:14 where the value of pathinfo is equal to the path component [RFC3986] of a given reference to that origin server, excluding those references already within the above resource space. For example, a reference to 16:36:15 I wonder if we have to register the well-known location somewhere. For P3P we had to do that. I think we have a simpler mechanism now in RFC 5785 16:36:16 http://example.com/over/here?q=hello#top 16:36:17 may have a corresponding tracking status resource identified by 16:36:17 http://example.com/.well-known/dnt/over/here 16:36:47 ksmith has joined #DNT 16:37:02 q? 16:37:08 fielding describes the search mechanism to find the correct policy 16:37:12 q+ 16:37:51 if my homepage (that is, "example.com/") has a different tracking status than all the pages underneath "/", what path should I use in JSON for the top-level tracking-status resource? 16:38:04 (maybe that's related to your question, ifette) 16:38:23 q? 16:38:27 so is this going to blow up the number of queries to the server? 16:38:27 rvaneijk has joined #dnt 16:38:35 ack schunter 16:38:52 tl: there's the pathinfo in the well-known-uri, and that's binding, but if there is a more specific policy, then an additional request would be made 16:39:11 Ian Fette: only when I don't know the TSR. 16:39:30 max two additional queries per 24 hours per UA that does active verification. It is not expected to be much. 16:39:31 and what if i track only a percentage of requests? 16:39:32 schunter: i'm unclear on the precedence rules, and it seems complex 16:39:34 And I can always make a deeplink request to start. 16:39:47 roy, 2 queries per resource on a page? 16:39:50 q? 16:39:58 q? 16:40:00 tracking a percentage is still tracking 16:40:01 ack aleecia 16:40:03 ifette: The TSR must cover your practices. 16:40:24 s/ifette:/ifette,/ 16:40:24 ifette, you also have the optional Tk header if you the server want to give a more granular response 16:40:29 aleecia: looks like we need some non-normative example text 16:40:35 npdoty, but the uri is required 16:40:39 I still have that action 16:40:51 and it doesn't seem clear to me how i would express 'i'm logging 1% of these queries' 16:41:07 ifette, right 16:41:08 ifette: You'd say "I'm logging these queries." 16:41:19 s/ifette:/ifette,/ 16:41:37 s/Ian Fette:/ian fette,/ 16:41:54 Roy, to be clear, I think you've just said you're writing a non-norm section for 5.2.1 with basic and advanced examples 16:42:34 aleecia, yes a use case and examples section 16:42:39 that's a problem... 16:42:39 thank you 16:42:46 tl: if there are 2 policies that apply to the same resource, that's conflicting, if there are 2 policies for different resources, that's the whole point 16:42:53 i have a requirement that i be able to publish a broad polciy and override it as necessary 16:43:02 +q 16:43:15 tl: for each resource there is at least 1 policy that describes it 16:43:17 q+ 16:43:18 I think that's a non-unique use case that Ian has, to say the least 16:43:20 q? 16:43:32 ifette, sounds like an interesting use case 16:44:09 q+ to note that I need the same expression-power in headers 16:44:17 schunter: better documentation needed 16:44:19 I'm going to guess Ian doesn't want to use headers due to cache issues, but that's a fair question 16:44:22 ack ChrisPedigoOPA 16:44:59 ChrisPedigoOPA: what's the functional reason for well-known-uri / response headers, since bad actors can still fake it. 16:45:02 transparency, auditability, enforcement 16:45:16 tl: if you lie, you are subject to legal measures such as deceptive practices 16:45:16 chris: for me the reason is that it adds value in comparison to the existing opt-out system. 16:45:17 URI's don't lie, people do 16:45:34 q? 16:45:55 where "researchers" includes regulators and users 16:46:16 I think tl is making the point that users and researchers could more easily get transparency into the tracking practice if we have a machine-readable tracking status 16:46:46 schunter: the goal is for browsers or other tools to be able to see whether a site is stating compliance or not 16:46:57 the response header is crucial for the consent mechanism 16:47:30 because the scope of the declaration is different from a press release 16:47:31 ChrisPedigoOPA: isn't english text at the bottom of CNN.com the same thing? 16:47:33 recital 66 gives an opening towards letting the browser express user consent... 16:47:40 I feel we are trying to force 100% of sites do something that < .001% of users would ever use or care about 16:47:43 q+ 16:47:44 schunter: yes, but it's not helpful for a machine 16:47:45 The response is only necessary for one in a million users that wants active verification. 16:47:51 q- later 16:47:58 +tl.a 16:48:09 -tl 16:48:25 fielding, there are multiple conflicting predictions about how many users will take advantage of the tracking response, and how their agents will use it 16:48:46 ChrisPedigoOPA: do we need to make a statement about every page on a site? 16:48:53 but we know if we don't support the data, 0 users and users agents will use it :-) 16:49:10 good point ;-) 16:49:14 q? 16:49:16 schunter: the current proposal allows you to make a statement for the whole site and additional statements for pieces of a site 16:49:22 q+ tl 16:49:31 npdoty, sure, but that one is mine 16:49:35 tl: it also gives information such as "this site is a 3rd party" 16:49:44 q? 16:50:08 q- 16:50:13 ack ifette 16:50:15 ack ifette 16:51:23 ifette: i thought that response header was going to return a policy code, which could then be tacked onto the well-known-uri to obtain more information on the policy 16:51:41 so for Chris, it's been true for a long time that the value of a property and who owns it is filed at the county courthouse. It is different when it's online and accessible, able to be automated. Same idea here: having "we're DNT compliant" in a text footer is the same statement, perhaps, yet has totally different utility. 16:52:02 I think it's very important for us to know if tracking statuses vary based on query string or body of the request or other information not in the path 16:52:15 ifette: the current proposal drops query params, but google uses query params to figure out which site, it's hard to see how we could use this for google.com 16:52:25 KevinT1 has joined #dnt 16:52:48 Ian, the path matching was a major hickup in P3P's policy reference file 16:53:13 KevinT has joined #dnt 16:53:16 ifette, would Tk headers work for your cases? per response values? 16:53:37 - +1.202.326.aajj 16:53:38 tl: supply an unmet technical requirement and a fix 16:53:43 Google's tracking policy does not change per query. That's nonsense. Google tracks ALL requests on ALL resources, ALL of the time and only drops some records based on cookie data 16:53:49 could we not talk over each other? 16:53:51 ifette: I've done that, but it's been rejected 16:54:10 We are spending too much time on this. 16:54:20 JC, this is critical 16:54:22 q+ 16:54:25 actually, we do need to work through this JC 16:54:41 argument over whose proposal is unworkable, but hard to scribe due to people talking over each other 16:54:56 you've been doing an awesome job scribing, by the way 16:55:06 JC, because it is a predictable hickup that has haunted P3P for month 16:55:10 I can live with no response at all. 16:55:17 -jmayer 16:55:28 i'll note there's also an open action on heather to come up with an alternate proposal 16:55:38 good note, Ian 16:55:43 schunter, yes 16:55:44 yep 16:55:46 disucssion seems to be leading to a review of requirements/proposals leading up to the current 16:55:46 Roy, I can't, because for an agreement I need two matching declarations 16:55:56 q? 16:56:12 ACTION: ifette to document difficulties around well known URIs for large sites and propose alternatives 16:56:13 Created ACTION-193 - Document difficulties around well known URIs for large sites and propose alternatives [on Ian Fette - due 2012-05-09]. 16:56:17 Matthias, what about the q? 16:56:22 schunter: ifette to sent his requirement/use case to the list 16:56:31 thanks, Ian 16:56:37 q? 16:56:39 tl, the action also includes proposing alternatives 16:56:41 tl: suggesting that ifette send use case and a proposal 16:56:56 -q 16:57:02 Note that the policy only needs to express the worst case for path. 16:57:09 ack rigo 16:57:09 rigo, you wanted to note that I need the same expression-power in headers 16:57:57 Rigo: Header-only should be possible 16:58:09 rigo: I have technical requirement too. W3c.org uses date space, and the path matching doesn't work at all for our site. We need a header only solution. 16:58:11 well, it's not the case that path matching doesn't work at all, just that we wouldn't get the efficiency of caching the status for a large group of resources, right? 16:58:32 +q 16:58:35 -q 16:58:40 I don't think rigo is suggesting a header-only requirement, just that the header should be an option 16:58:50 rigo: maybe it's the case that simple sites use the well known uri, and complicated sites use the header, but then the header must be as expressive as the well known uri 16:58:53 W3C has one and only on tracking policy. 16:59:33 I read rigo/ifettes requirement as being able to point to a URI from a response header. This would mean that at "/" you may permit a policy 'please look at the headers'. 16:59:33 Could we please not talk over one another? 16:59:39 tl: rigo what stops you from having a tracking status resource for every uri on w3.org? 16:59:43 q? 17:00:10 I think Rigo is just giving the example that two resources in the same subdirectory might have different tracking statuses, so it wouldn't get any of the advantages of caching the status for a particular path 17:00:45 Given we're not going to get through the full agenda on this call, I suggest we take the last agendum early on a future call, since jmayer is particularly interested in it yet has a conflict for the end of calls 17:00:47 rigo: how do i do the matching, and where do the policies go, and how big is the file that has to hold the policies? 17:00:50 q? 17:00:55 ack hwest 17:00:59 tl: how many policies are you really going to have? 17:01:01 hwest? 17:01:08 ok 17:01:10 q? 17:01:41 its not about how many policies but about how many resources have a policy and how to find which has which 17:01:42 and I still haven't solved Heather's issue regarding different policy per reference context 17:02:01 schunter: people should send their comments to the list 17:02:04 sorry fielding, what is "per reference context"? 17:02:22 first-party and third-party usage of the same resource URI 17:02:35 q? 17:02:38 … where one tracks and the other does not 17:02:47 schunter: we'l discuss this over the next 2 weeks, issues by issue, not calling for complete alternative proposals 17:02:54 … or has different policy links 17:03:14 fielding: I thought we were waiting for Heather to make a proposal on that. 17:03:21 s/fielding:/fielding,/ 17:04:22 tl, I don't segment my thinking that well … and we don't have time. 17:04:51 Yes, there's an open action for me to submit text on this - my concerns haven't changed (but am having phone trouble) 17:04:53 tl: i thought we had finished with this in DC 17:05:05 schunter: I'm not convinced that all issues have been resolved 17:05:12 noted, Heather; thanks 17:05:39 tl: maybe I don't understand the issue resolution process 17:06:00 schunter: this is the first time this chapter has appeared in full in the spec 17:06:02 q? 17:06:08 if we had consensus, we wouldn't be having this disucssion 17:06:11 tl, regardless, I have to reflect consensus or lack of it in the draft even if we don't have replacement text yet 17:06:33 -tl.a 17:06:58 the group will need to sign off (or not) in a similar way on compliance; if you're frustrated here, you'll be frustrated there too 17:06:58 +tl 17:06:59 yes, the cost of my freedom is that I don't get to say we are don. ;-) 17:07:05 s/don/done/ 17:07:17 shall we take up the next section? 17:07:18 -tl 17:07:39 +tl 17:07:53 ifette: now that we see the details issues become apparent, when maybe they weren't before 17:08:24 schunter: if we ignore issues now, we'll just get formal objections later 17:08:33 5.2.2 Representation 17:08:33 The representation of a tracking status resource shall be provided in the "application/json" format [RFC4627] and must conform to the ABNF in section 5.2.6 Status-object ABNF. The following is an example tracking status representation that illustrates all of the fields defined by this specification, most of which are optional. 17:08:41 schunter: i believe that we can get to consensus with some more work 17:09:48 sgtm 17:09:54 ? 17:09:55 makes sense 17:09:58 sounds good to me 17:09:59 sgtm 17:10:02 can we get updates in a week so we can discuss again in 2 weeks? 17:11:00 Are we going through the other sections? 17:11:06 Agenda? 17:11:14 thx, I just mean getting email updates within a week so we have time to read and discuss over email before the next call 17:11:18 issue-140? 17:11:18 ISSUE-140 -- Do we need site-specific exceptions, i.e., concrete list of permitted thirdparties for a site? -- open 17:11:18 http://www.w3.org/2011/tracking-protection/track/issues/140 17:11:23 Zakim, take up Agendum 4 17:11:23 agendum 4. "ISSUE-140: Do we need explicit-explicit user-granted exceptions?" taken up [from aleecia] 17:11:40 +q 17:11:44 close agendum 2 17:11:48 close agendum 2 17:12:27 schunter: we have agreement that it is okay for a site to ask for an exemption for all my 3rd parties 17:12:58 +??P7 17:13:09 schunter: the question is, can the site ask for exemptions for 3rd parties on a party by party basis 17:13:13 q? 17:13:24 -tl 17:13:26 schunter: this complex, and poses complex UI challenges 17:13:27 arguments against also includes that it may change over time 17:13:28 q? 17:13:33 requiring re-promoting 17:13:36 prompting 17:13:39 freudian 17:13:41 q? 17:13:46 +tl 17:13:54 ack tl 17:14:03 q+ 17:14:20 "i think it is a requirement that explicit-explicit exceptions not be implemented" 17:14:24 tl: i think is a requirement that explicit/explicit exceptions be implemented 17:14:30 arguments for also includes sites that want to increase opt in by making limited requests 17:14:31 -[Microsoft] 17:14:35 tl: explicit/explicit enables competition on privacy 17:14:37 q? 17:14:43 q+ 17:14:47 tl: this allows sites to compete on privacy, and gives full visibility to users 17:14:51 ack ifette 17:15:08 ack rigo 17:15:09 ifette: I think it is a requirement that explicit/explicit *not* be implemented 17:15:17 q+ 17:15:18 q+ 17:15:23 and I think it satisfies a data minimization principle 17:15:29 ifette: points have been made in the e-mail thread 17:16:06 rigo: Is this API meant recursive or only direct sub-third parties are named/used/mentioned by this API? 17:16:08 ? 17:16:09 q? 17:16:17 rigo: is your concern "direct" 3rd parties or "brokered/marketplaced" sub providers? 17:17:03 ifette: I'm including the sub provider issue, and I believe that exceptions should transitively descend from a broker to the sub providers 17:17:09 q? 17:17:14 ian would be OK if 1st level only is included in the API and this basically grantes a "*" exception for all corresponding sub-sub providers below this 3rd party. 17:17:20 - +1.202.326.aaff 17:17:25 q? 17:17:26 q? 17:17:30 ack ifette 17:17:32 q+ 17:17:37 q+ 17:17:39 ack fielding 17:17:39 s/OK/better 17:17:40 ifette: i still think that a transitive model is too complex, but would be better than explicit/explicit 17:17:48 -vincent 17:18:02 q? 17:18:12 q? 17:18:23 +1 17:18:28 +q 17:18:30 + +385221aaoo 17:18:40 ack aleecia 17:18:40 fielding: I tend to agree with ifette. I'd prefer to remove the entire exception framework, and rely on site developed mechanisms as the only means of escaping dnt 17:18:40 zakim, unmute me 17:18:42 alex should no longer be muted 17:18:42 ack alex 17:18:44 -1 on having no exception mechanism 17:18:44 i would support roy's proposal 17:18:48 schunter: tjat 17:18:51 fielding: One alternative would be to drop the complete exception framework and do exception handling from the spec. 17:18:59 schunter: that's quite a radical proposal 17:19:01 q? 17:19:20 +1 to alex as well 17:19:32 you can list out your third parties outside of the exception mechanism 17:19:53 I mean, continue sending DNT:1 to everyone with that preference and let each site develop their own consent mechanisms with cookies. 17:19:54 alex: there are ways for sites to compete on privacy besides at the point of asking for an exception 17:19:57 concern: Enumerating third parties vs. exempting them. 17:20:22 * is mainly a blank check that you sign and can't express consent as the content of the agreement is not determined 17:20:27 also: before loading (via DNT) vs. after loading (vs browser logging) 17:20:34 knowing number of 3rd parties on a site doesn't tell me how deep the rabbit hole goes, too 17:20:40 tl: but who knows how big "*" is, since it was claimed that it is impossible to determine the number of 3rd parties on a site. 17:20:42 q? 17:20:57 Rigo's point on consent not being valid in EU is non-trivial 17:21:15 yet how to make things work with the current auction model is also non-trivial 17:21:28 +1 17:21:32 +1 17:21:34 ok with me 17:21:35 +1 for pushing agenda item 17:21:36 +1 17:21:38 q+ 17:21:39 schunter: propose that we move last item to next call since jmayer is now absent 17:21:40 ack npdoty 17:21:43 agenda? 17:22:08 close agendum 5 17:22:19 close agendum 3 17:22:21 sidstamm has joined #dnt 17:22:44 q+ 17:22:57 q+ 17:23:12 npdoty: the user agent doesn't have to display the full list of 3rd parties all the time, even if that list is returned by the JS API 17:23:58 ISSUE-111? 17:23:58 ISSUE-111 -- Signaling state/existence of site-specific exceptions -- postponed 17:23:58 http://www.w3.org/2011/tracking-protection/track/issues/111 17:24:27 q 17:24:29 q? 17:24:32 ack tl 17:24:43 npdoty: perhaps additional bits in the headers might help - sorry lost the details, mental buffer overflow 17:25:16 q? 17:25:17 q? 17:25:20 tedleung, sorry, that was a long piece of text I was giving 17:25:22 ack rigo 17:26:23 rigo: a 1st party selects 3rd parties based on reputation and performance, so I am not concerned about taking into account the sub providers 17:26:24 rigo: Proposal to change spec to only allow sub-third parties (at direct / 1st level). This exception then automatically inherits to all subsub, subsubsub, ... providers used by this 1st level third party. 17:26:29 if I remember right - a flag of 2 tells you that some 3rd parties may have dnt:0 and others dnt:1. Knowing that you are in a state of partial exception is useless unless you know which parties are allowed - which is the problem. And even then even if you knew, it gets very expensive to support partial states 17:26:33 npdoty: if the concern was visibility for the publishers to the state of their third parties, we absolutely should take that up (as in 111) and that a separate DNT header value might be what's needed (dnt:2 or 10/11, as we discussed in DC) 17:26:50 ksmith, we can define DNT:2 or 10 or 11 as we want 17:27:07 what if DNT:10 means "you have a site-wide exception for all your third parties"? would that work for you? 17:27:16 I postponed this issue-111 to a later point: 17:27:16 rigo: if we have web wide exceptions, then we are already into a model where not all 3rd parties on a site are treated equally 17:27:17 q? 17:27:22 ack ifette 17:27:24 all or nothing works, its the partial that gets hard 17:28:04 so it would help your sites if you the first party could receive a DNT:10 which is an all-or-nothing request? ksmith 17:28:17 ifette: 1st parties don't rely on web-wide exceptions to cover the 1st party's 3rd parties 17:28:48 agree with Ian - web wide exceptions will usually be for 3rd parties that are providing a service directly to the user - not to the 1st party 17:29:03 or likely both 17:29:08 q? 17:29:12 agree with Ian: BIG +1 on this comment 17:29:26 I am sad to see that Ian doesn't want to compete on Ux. 17:29:28 "are all of my third parties covered or not?" -- that's why I'm suggesting a * option and a DNT header to signal a site-wide exception 17:29:39 new issue: compliant behavior of user agents. 17:29:40 ifette: not going to rehash the UI issue, but does not thing that we should be doing translation of user intent in the UI. 17:29:55 q? 17:29:59 Ted thanks for scribing this call 17:30:02 ifette: we should be processing user preferences directly 17:30:05 ack schunter 17:30:36 if and only if these are transitive 17:30:46 Which they are currently not. 17:30:47 schunter: rigo thinks that permitting the first level of 3rd parties is useful in the EU context 17:30:51 correct 17:30:59 Because this is the first that we have heard of transitivity. 17:31:11 zakim, who is on the phone? 17:31:11 On the phone I see fielding, AClearwater, eberkower, vincent, Joanne, vinay, ??P20, justin, bilcorry (muted), tedleung, +40.72.321.aahh, ??P78, enewland, +1.202.744.aaii, Chapell, 17:31:15 ... ??P86, Lia (muted), +1.202.643.aall, KevinT, dsriedel (muted), johnsimpson, ??P7, tl, +385221aaoo, aleecia, schunter, alex, rvaneijk, rigo.a, npdoty, ifette, efelten, alex.a 17:31:21 schunter: we need some more discussion on this 17:32:13 -KevinT 17:32:41 thanks, Ian 17:32:45 sorry 2mins past hard stop... 17:32:46 ACTION: ifette to write up a proposal for transitive third party exceptions 17:32:46 Created ACTION-194 - Write up a proposal for transitive third party exceptions [on Ian Fette - due 2012-05-09]. 17:32:53 -tedleung 17:32:54 - +385221aaoo 17:32:57 -Chapell 17:33:02 tedleung has left #dnt 17:33:09 -enewland 17:33:11 - +1.202.744.aaii 17:33:17 -Joanne 17:33:18 -Lia 17:33:19 RRSAgent, draft minutes 17:33:19 I have made the request to generate http://www.w3.org/2012/05/02-dnt-minutes.html ifette 17:33:21 -tl 17:33:23 Zakim, list participants 17:33:24 As of this point the attendees have been aleecia, alex, rvaneijk, schunter, npdoty, rigo, +1.202.835.aaaa, +1.202.326.aabb, efelten, ifette, Marc, fielding, +1.617.733.aacc, 17:33:24 ... +1.646.654.aadd, +1.916.641.aaee, AClearwater, eberkower, vinay, Joanne, tl, +1.202.326.aaff, vincent, justin, bilcorry, +1.206.664.aagg, +40.72.321.aahh, tedleung, 17:33:25 cheers to tedleung for scribing a challenging call 17:33:28 ... +1.202.744.aaii, Chapell, +1.202.326.aajj, +1.202.587.aakk, +1.202.643.aall, [Microsoft], KevinT, +49.721.91.aamm, Lia, johnsimpson, dsriedel, jmayer, +1.609.981.aann, 17:33:28 ... enewland, +385221aaoo 17:33:31 RRSAgent, draft minutes 17:33:31 I have made the request to generate http://www.w3.org/2012/05/02-dnt-minutes.html ifette 17:33:32 +1 to that 17:33:32 -vinay 17:33:35 RRSAgent, make logs member 17:33:36 ksmith has left #DNT 17:33:36 -alex.a 17:33:38 -rvaneijk 17:33:40 -??P7 17:33:41 johnsimpson has left #dnt 17:33:42 - +1.202.643.aall 17:33:45 -efelten 17:33:46 -schunter 17:33:48 -bilcorry 17:33:51 -rigo.a 17:33:53 -johnsimpson 17:33:54 -justin 17:33:56 -??P20 17:33:57 ifette, is there a reason you're asking to make logs member? I've been making them public 17:33:58 -alex 17:34:00 -eberkower 17:34:02 -npdoty 17:34:04 -??P78 17:34:06 -AClearwater 17:34:09 -vincent 17:34:10 -??P86 17:34:13 -dsriedel 17:34:14 - +40.72.321.aahh 17:34:21 Meeting: Tracking Protection Working Group teleconference 17:34:24 -aleecia 17:34:24 Chair: schunter 17:34:33 regrets+ ninja 17:34:37 regrets+ wileys 17:34:54 AClearwater has left #dnt 17:36:27 -fielding 17:41:28 disconnecting the lone participant, ifette, in T&S_Track(dnt)12:00PM 17:41:29 T&S_Track(dnt)12:00PM has ended 17:41:29 Attendees were aleecia, alex, rvaneijk, schunter, npdoty, rigo, +1.202.835.aaaa, +1.202.326.aabb, efelten, ifette, Marc, fielding, +1.617.733.aacc, +1.646.654.aadd, 17:41:29 ... +1.916.641.aaee, AClearwater, eberkower, vinay, Joanne, tl, +1.202.326.aaff, vincent, justin, bilcorry, +1.206.664.aagg, +40.72.321.aahh, tedleung, +1.202.744.aaii, Chapell, 17:41:31 ... +1.202.326.aajj, +1.202.587.aakk, +1.202.643.aall, [Microsoft], KevinT, +49.721.91.aamm, Lia, johnsimpson, dsriedel, jmayer, +1.609.981.aann, enewland, +385221aaoo 17:42:50 Zakim, bye 17:42:50 Zakim has left #dnt 17:42:59 trackbot, bye 17:42:59 trackbot has left #dnt 17:43:03 rrsagent, draft minutes 17:43:03 I have made the request to generate http://www.w3.org/2012/05/02-dnt-minutes.html npdoty 17:43:08 rrsagent, bye 17:43:08 I see 2 open action items saved in http://www.w3.org/2012/05/02-dnt-actions.rdf : 17:43:08 ACTION: ifette to document difficulties around well known URIs for large sites and propose alternatives [1] 17:43:08 recorded in http://www.w3.org/2012/05/02-dnt-irc#T16-56-12 17:43:08 ACTION: ifette to write up a proposal for transitive third party exceptions [2] 17:43:08 recorded in http://www.w3.org/2012/05/02-dnt-irc#T17-32-46