[Envolution-devel] IE cookie problem possible solution

[Scott K. <sc...@ki...>]

This is a strange problem that seems to be Micro$oft IE specific. It
affect more than jjst Envo or other nukeish type CMS's but any site
utilizing session cookies.

I cannot consistantly test this on real examples cause sometimes it
happens and sometimes it don't.

This isn't an Envo bug but an IE bug which we will undoubtably get held
responsible for.

In some of the research I'm doin there is mention of the way cookies and
privacy are handled by IE. As of some patch between IE 5.5 and IE 6 on
all platforms MS introduced to meet W3C privacy standards.

This code I found on the net:

response.setHeader("P3P","CP=\"NOI DSP COR DEVa TAIa OUR BUS UNI\"");

when placed in the site (where I'm not sure, header.php maybe)

I am not even certain what the "CP=\"NOI DSP COR DEVa TAIa OUR BUS UNI\"
part actually means. I still have some more reading to do later on this.

But in the mean time I think we need a FAQ or something about this issue
posted in plain view on the website that IE users need to set privacy
settings to Medium, and explicitily allow all cookies and specifically
allow sessions cookies from the privacy tab in their IE installation.

I have confirmed that this works consistantly on IE 6 sp1 on Win98 and
WinXP Pro using http://www.terracro.com which is who originally brought
this to my attention a while back. Prior to specifying these setting on
my 98 and XP installs I could not login to his site. After I made these
changes all is well and expected.

Anyone else who could test and experiement with settings like this or a
real solution would be welcomed.

Zoom