Once you have completed and reviewed your organization's P3P policy, the next steps to implementing the policy are:
The policy reference file specifies the P3P policy that applies to a single Web document, portions of a Web site, or for an entire site. Services use policy references to state what policy applies to resources at a specific URL or set of URLs. User agents use policy references to locate the privacy policy which applies to a page. For a user agent to process the policy which applies to a given URL, it must locate and fetch the policy reference file, parse the policy reference file, fetch the referenced P3P policy or policies, and then parse and process the P3P policies.
The location of the policy reference file can be indicated using one of three mechanisms.
HTTP/1.1 200 OK P3P: policyref="http://catalog.example.com/P3P/PolicyReferences.xml" Content-Type: text/html Content-Length: 7413 Server: CC-Galaxy/1.3.18
For more information about policy references, refer to the latest P3P specification at http://www.w3.org/TR/P3P/#Referencing .
The P3P editor includes a wizard for creating a reference file. Before you start the wizard, you need to know:
To create a policy reference file, click
File
Create Reference File .
Note: The P3P specification states that no more than one policy can be active for a given resource at a time. A resource could include a static Web page, application, or any other resource that can be covered by your privacy policy. If a policy reference file at the well-known location declares a non-expired policy for a resource, this policy overrides any conflicting policy reference files referenced through HTTP headers or HTML link tags.