3 ms·

- Medium (https://medium.com/.well-known/dnt-policy.txt https://medium.com/.well-known/dnt-policy.txt) - EFF (https://www.eff.org/.well-known/dnt-policy.txt ht

- Medium (https://medium.com/.well-known/dnt-policy.txt https://medium.com/.well-known/dnt-policy.txt) - EFF (https://www.eff.org/.well-known/dnt-policy.txt https://www.eff.org/.well-known/dnt-policy.txt) - Read the Docs (https://readthedocs.org/.well-known/dnt-policy.txt https://readthedocs.org/.well-known/dnt-policy.txt) Sites that implement DNT should respond to either /.well-known/dnt-policy.txt or /.well-known/dnt/ or both. Responding to /.well-known/dnt/ means a site has implemented the W3's Tracking Preference Expression (https://www.w3.org/TR/tracking-dnt/ https://www.w3.org/TR/tracking-dnt/). This doesn't necessarily mean much as there's no agreed standard of what complying with DNT means. However, it typically implies that the site does something different for users with DNT enabled vs. disabled. Responding to /.well-known/dnt-policy.txt is typically stricter and means a site adhere's to the EFF's guidelines (https://github.com/EFForg/dnt-guide https://github.com/EFForg/dnt-guide) for DNT. This has rules for how long data is retained, which data can be retained, specifications around anonymizing data, and security precautions. Disclaimer: I worked on Read the Docs' DNT implementation.

danShumway 8y ago
Props to Medium, because not only does it respect DNT, it pretty rigorously follows the advice about blocking third-party embeds if they don't respect it.[0] Medium is not always on my good side, and I think the site has some problems, but at least somebody working there does really care about privacy, and I regularly notice and appreciate their work. DuckDuckGo as well, but I would have a problem if they didn't respect DNT. Medium is the site where they really didn't have to care, but they did anyway. [0]: https://github.com/EFForg/dnt-guide#a-embedly https://github.com/EFForg/dnt-guide#a-embedly

danShumway 8y ago

Props to Medium, because not only does it respect DNT, it pretty rigorously follows the advice about blocking third-party embeds if they don't respect it.[0] Medium is not always on my good side, and I think the site has some problems, but at least somebody working there does really care about privacy, and I regularly notice and appreciate their work. DuckDuckGo as well, but I would have a problem if they didn't respect DNT. Medium is the site where they really didn't have to care, but they did anyway. [0]: https://github.com/EFForg/dnt-guide#a-embedly https://github.com/EFForg/dnt-guide#a-embedly