The P3P Transmogrifier (10 comments)

The P3P Transmogrifier

Thursday, May 22, 2003 - 11:00 AM

On of the nice things about being done with school is that I tend to have more time on my hands. (One of the not-so-nice things is that I'm no longer a student, I'm just unemployed.) The question thus arises of what to do with all this time.

Sure, some would say that I should add features to the forums or otherwise be productive, but to that, I say Pah!

Instead, I bring you The P3P Transmogrifier&quot.

Background. One of the classes I took last semester, which was fun for a geek doing an MBA, was Online Privacy. It was taught (primarily) by Lorrie Cranor, of AT&T and chair of the W3C's P3P working group.

Anyway, for a final project for the class, I implemented a web based translator of P3P into English. It was primarily based on the code for the W3C's existing P3P Validator, but cleaned up to run under mod_perl instead of CGI, and (of course) with all the translation added into it. She expressed an interest in using it for testing recommended language for what the various P3P tags do, but with modifications so that additional languages could more easily plug into it. I knew what a hack the internals were anyway, and have more pride than to hand over something that looked like it did at that point to anyone else, so this is the result of a rewrite with those modifications, and some additional checks to try and prevent abuse from you folk.

As an example, here's our privacy policy, P3P policy, and the P3P policy translated. If you run a site, I recommend implementing P3P yourself. As you'll notice when you start plugging in domains, most sites don't. Good resources for starting out:

It looks daunting at first, but it's really just a couple of files you need to put on your server, so do it.
phillip
phillip

Chief Goatherd

Posts: 414

Registered:
Jul 2000
Re: The P3P Transmogrifier (Score: 3, Super-Genius)
posted Thursday, May 22, 2003 - 12:11 PM (#5870)
Just because there's so few "P3P enabled" sites, here's some that do work, for you to take a look at:

As you find more that work, post them below....especially if they're sites you otherwise wouldn't think would have done this. Likewise, if there are sites where privacy should be an issue that never enabled themselves (like PayPal) , post those too.

--
Work is the curse of the drinking classes.
-Oscar Wilde
Locked profile
Lonely Goatherd
Lonely Goatherd
Re: The P3P Transmogrifier (Score: 1, Funny)
posted Thursday, May 22, 2003 - 01:02 PM (#5871)
In Response to phillip (#5870):

How 'bout a site that has the files for it, but they're not valid? Yep, x10.com [x10.com] has a syntactically-invalid privacy policy. Kinda figures, don't it?

-m


Locked
tor
tor

Code Monk

From: Sydney

Posts: 769

Registered:
Sep 2000
Re: The P3P Transmogrifier (Score: 3, Funny)
posted Friday, May 23, 2003 - 12:43 AM (#5879)
I guess I must be the first to have a look at the goats one, no one else here would admit to having overlooked the typo:

"anonymous and non-registered users have no additioanal data"
Locked profile
phillip
phillip

Chief Goatherd

Posts: 414

Registered:
Jul 2000
Re: The P3P Transmogrifier (Score: 2)
posted Friday, May 23, 2003 - 10:04 AM (#5887)
In Response to tor (#5879):

I have no idea where that is...

or I fixed it...

or something.

--
Work is the curse of the drinking classes.
-Oscar Wilde
Locked profile
Lonely Goatherd
Lonely Goatherd
Re: The P3P Transmogrifier (Score: 1, Intriguing)
posted Friday, May 23, 2003 - 05:08 PM (#5917)
In Response to tor (#5879):

I think it's very important to know that visiting this site without being logged on will not lead to having CD-ROMs or whatever stuffed up your butt.

-m, you want that unbroken-and-wiiiiide, or broken-sharp-and-pointy?
Locked
phillip
phillip

Chief Goatherd

Posts: 414

Registered:
Jul 2000
Re: The P3P Transmogrifier (Score: 2)
posted Sunday, May 25, 2003 - 08:55 AM (#5951)
In Response to Lonely Goatherd (#5917):

If you can point out the appropriate P3P tags for that, I'd be happy to add them.
--
Work is the curse of the drinking classes.
-Oscar Wilde
Locked profile
dcook32p
Initiate

From: Garland, Texas - USA

Posts: 6

Registered:
Apr 2003
Re: The P3P Transmogrifier (Score: 1)
posted Wednesday, May 28, 2003 - 01:08 PM (#6000)
This is a great tool. Thanks, Phillip!

What is your policy on external linking? Would you be willing to provide the source code for this program (perhaps under a free license)?
--
Dustin D. Cook, A+ dcook32p@htcomp.net
Locked profile
phillip
phillip

Chief Goatherd

Posts: 414

Registered:
Jul 2000
Re: The P3P Transmogrifier (Score: 2)
posted Wednesday, May 28, 2003 - 01:40 PM (#6003)
In Response to dcook32p (#6000):

Thanks.

I'm not sure that we have a policy on "external linking" ... it's the web, people are supposed to link (to pages, that is...). If you want to link to this, feel free, even including the relevant policies in your link.

I need to find out what the deal with the source is. As I stated, this is based on an edited version of the W3C's code, so I would need to find out what the deal with redistributing modified versions of their stuff is. There's a possibility that they'll have a version of this running on their site with the source available from there in the future. WHen I find out more about what the status of that is, I'll try to remember to post that here.

--
Work is the curse of the drinking classes.
-Oscar Wilde
Locked profile
tor
tor

Code Monk

From: Sydney

Posts: 769

Registered:
Sep 2000
Re: The P3P Transmogrifier (Score: 2)
posted Wednesday, May 28, 2003 - 07:24 PM (#6009)
In Response to phillip (#5951):

and in return for -m doing that is there any chance you could tell him the password to his damn account and ban him from posting anonymously?
Locked profile
Dynedain
Dynedain

Code Monk

From: anywhere but here

Posts: 1383

Registered:
Jul 2002
Re: The P3P Transmogrifier (Score: 2)
posted Sunday, June 01, 2003 - 10:12 PM (#6051)
Hey phillip, found something you can do w/ your free time:

http://www.stud.ntnu.no/~arnesen/peltierbeer/ [stud.ntnu.no]
--
But do you ever see a person leave a cathedral toting a to-go box?

Coffins don't count.
Locked profile www
Discussion: The P3P Transmogrifier | Login/Create an Account | 10 comments
Threshold:  Locked
The Fine Print: The above comments are owned by whoever posted them. We are not responsible for them in any way.
Hell, let's face it, we're not responsible for anything; including the things we say, do, or think. And if you sue us because you think we are? Well, we're not responsible for that either.