Re: [FYI] P3P: New Technology Is Aimed at Increasing Web Privacy

["Axel H Horns" <horns@ipjur.com>]

On 22 Jun 00, at 12:03, I wrote:

> http://www.nytimes.com/library/tech/00/06/cyber/articles/22privacy.htm
> l
> 
> ------------------------------ CUT -------------------------------
> 
> June 22, 2000  
> 
> New Technology Is Aimed at Increasing Web Privacy  
> 
> But Critics Warn of False Sense of Security  
> 
> By JERI CLAUSING   
> 
> ASHINGTON -- Major Internet companies and the Web's standard-setting
> body on Wednesday unveiled some long-awaited technology that would
> alert computer users before they visited Web sites that collect more
> personal information than they are willing to share.  


Siehe dazu auch:

http://www.epic.org/reports/prettypoorprivacy.html

-------------------------------- CUT ---------------------------------

                         Pretty Poor Privacy:

              An Assessment of P3P and Internet Privacy

                             June 2000

                Electronic Privacy Information Center
                           www.epic.org

                           Junkbusters
                      www.junkbusters.com


     Summary

This report examines whether P3P is an effective solution to growing 
public concerns about online privacy. The report surveys earlier 
experience with "cookie" technology and notes similarities. The 
report finds that P3P fails to comply with baseline standards for 
privacy protection. It is a complex and confusing protocol that will 
make it more difficult for Internet users to protect their privacy. 
P3P also fails to address many of the privacy problems specifically 
associated with the Internet. The report further finds that earlier 
versions of P3P were withdrawn because the developers recognized that 
the proposed negotiation process was too burdensome for users and 
that the automatic transfer of personal information would be widely 
opposed. It is anticipated that this version of P3P will also be 
significantly overhauled once it is reviewed. The report concludes 
that there is little evidence to support the industry claim that P3P 
will improve user privacy citing the widely accepted Fair Information 
Practices.  

The report recommends the adoption of privacy standards built on Fair 
Information Practices and genuine Privacy Enhancing Techniques that 
minimize or eliminate the collection of personally identifiable 
information. Simple, predictable rules for the collection and use of 
personal information will also support consumer trust and confidence. 
P3P, on the other hand, is likely to undermine public confidence in 
Internet privacy.  
      

          Table of Contents

          Understanding Privacy 
          Current Internet Privacy Risks 
          Cookies -- The Precursor to P3P 
          What is P3P and How Does it Work? 
          Relating Cookies to P3P 
          Failure to Establish Privacy Standards 
          Exclusion of Non-Compliant Sites 
          Absence of Enforcement 
          Prognosis for Adoption 
          Impact on Privacy if P3P is Deployed 
          P3P Fails to Satisfy Jurisdictions with Strong Privacy
          Standards 
          Better Alternatives Exist 
          Conclusions and Recommendations 
          References 

[...]

-------------------------------- CUT ---------------------------------