Why I need to make sure to implement P3P if using iframes or using cross-site cookies? The point is that if your application is inside iframe with parent belongs to another domain – cookies will not work for some very common configurations, for example IE 6/7 with privacy set to medium. If cookies [...]