>-----Original Message----- >From: Caldarale, Charles R [mailto:chuck.caldar...@unisys.com] >Sent: Friday, January 14, 2011 3:05 PM >To: Tomcat Users List >Subject: RE: How to configure Tomcat/Coyote to deliver a P3P Header on Every Request
>> From: Joseph Morgan [mailto:joseph.mor...@ignitesales.com] >> Subject: How to configure Tomcat/Coyote to deliver a P3P Header on Every Request >> Using Tomcat 6.0.13 >So what's your upgrade schedule? Once a decade? It's an old system still running quite a few apps, but we're leaving it for dead. >> how do we configure the Coyote server to deliver a P3P header >> on every request, even if for a JavaScript, Image, CSS, etc? >Interesting question, especially in light of the following quote from a related Mozilla bugzilla entry: >"Ah the memories. We (IBM) wrote the original P3P implementation and then Netscape proceeded to write their own. So both our >companies wasted immense amounts of time that everyone thought was a crappy proposal to begin with. Remove it." >>https://bugzilla.mozilla.org/show_bug.cgi?id=225287#c12 Now THAT is a good quote! But, our old apps recently ran into problem when our clients began loading these apps into div overlays, IE stopped saving cookies. Further research took us down the road of studying P3P headers and how browsers respond to them, and it seems that if the P3P header is not returned on every request, IE throws the baby out with the bath water. > Write a filter. Will do.... Thanks - Chuck THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY MATERIAL and is thus for use only by the intended recipient. If you received this in error, please contact the sender and delete the e-mail and its attachments from all computers. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
