My question is related to the problem outlined in this question.
I have set up my p3p fine as far as I know (the p3p validator doesn't return any errors), but I still get blocked cookies.
src of my
iframe is an external website, is there anything special I have to do if the cookies I want to accept are coming from an external site?
Here is my p3p.xml:
<?xml version="1.0" encoding="UTF-8" ?> <META xmlns="http://www.w3.org/2002/01/P3Pv1"> <!-- Policy Generated by P3PWiz http://www.p3pwiz.com --> <POLICY-REFERENCES> <EXPIRY date="Tue, 16 Feb 2010 08:50:40 -0600"/> <POLICY-REF about="/w3c/Policies.xml#Privacy"> <INCLUDE>/*</INCLUDE> </POLICY-REF> <POLICY-REF about="/w3c/Policies.xml#WSC"> <INCLUDE>*/*</INCLUDE> <COOKIE-INCLUDE name="*" value="*" domain="*" path="*" /> </POLICY-REF> </POLICY-REFERENCES> </META>
Well, I'm not sure that you're setting the header right as it is described in the article:
As you can see, somebody else had the same problem:
I'm also wondering if there is any relation between where the policy file is hosted and where the actual site is hosted.