Shibboleth Developers

[Lukas Haemmerle <>]

>> If you mean Medium privacy, that level blocks third-party cookies under a
>> variety of circumstances. It's hard to see how you could get around
>> that if
>> you're dealing with a second domain.
> 
> Distributing a P3P policy file got me around this issue of third-party
> cookies.

There is a line in the WAYF code that goes like this :)

/*------------------------------------------------*/
// Set P3P headers for %#!*$ IE
/*------------------------------------------------*/
header('P3P:CP="NOI CUR DEVa OUR IND COM NAV PRE"');

Probably the tests were successful because I have his line in there
(have yet to carry out a test to check if it makes a difference without
it). Don't ask me what the codes are supposed to mean and if they make
sense but I somewhere found a table that explain them more or less.
Using that I put together the above :)

Lukas

-- 
SWITCH
Serving Swiss Universities
--------------------------
Lukas Haemmerle, Software Engineer, Security
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 15 64, fax +41 44 268 15 68
,
 http://www.switch.ch