Re: Using P3P technologies to express privacy preferences

[Patrick <patrick@gandi.net>]

On Fri, Aug 16, 2002 at 09:58:57AM +0200, Stephane Bortzmeyer took time to write:
> Was there any work done after that? I assume that a P3P policy file
> could be included in the XML stream (although the registry policy does
> not change so often, registrars do not need to read it each time) and,

<dcp> ?
§2.3 of draft-ietf-provreg-epp-06.txt

> more important, that an APPEL file
> <URL:http://www.w3.org/TR/P3P-preferences/> could be included in the
> <contact:create> element to carry to the registry the privacy
> preferences of a contact. Anyone interested to follow this idea?

I am not sure that P3P exactly as is will nicely fit in EPP, since
P3P was designed for websites.

In fact by reading §1.1 of your reference, I fail to understand how
to fit that in EPP. Since the EPP client is not the final user (the
one you specify in contact:create) nor run by the final user, 
what options are there ?
(as quoted: 4.The agent fetches the policy ... and determines what
action to take)

Also, it would probably be a huge overhead to specify things
everytime in contact:create
I guess that Registrars will adopt only one behavior with maybe some
exceptions. 

Other than that I am interested.

Patrick.