
<!--
Disabled by https-everywhere-checker because:
Non-2xx HTTP code: http://pages.optimizely.com/rs/optimizely/images/Customer_Story_Backcountry.pdf (200) => https://na-sjn.marketo.com/rs/optimizely/images/Customer_Story_Backcountry.pdf (403)

	For rules covering resources which do not secure
	mixed content, see optimizely.com-resources.xml.


	CDN buckets:

		- d1qmdf3vop2l07.cloudfront.net
		- cdn.optimizely.com.edgekey.net	← cdn3


	Nonfunctional hosts in *optimizely.com:

		- pages ᵃ

	ᵃ Marketo / shows another domain


	Problematic hosts in *optimizely.com:

		- cdn4 ᴬ
		- support ᵈ
		- log3 ᵐ

	ᴬ Akamai / mismatched
	ᵈ Dropped, preemptable redirect
	ᵐ Mismatched


	Insecure cookies are set for these hosts: ᶜ

		- community.optimizely.com
		- learn.optimizely.com

	ᶜ See https://owasp.org/index.php/SecureFlag


	cdn sets the following insecure wildcard cookies
	on whichever domain it is loaded from:

		- optimizelyBuckets
		- optimizelyEndUserId
		- optimizelyPendingLogEvents
		- optimizelySegments

-->
<ruleset name="Optimizely (partial)" default_off='failed ruleset test'>

	<!--	Direct rewrites:
				-->
	<target host="optimizely.com" />
	<target host="app.optimizely.com" />
	<target host="blog.optimizely.com" />
	<target host="cdn.optimizely.com" />
	<target host="cdn2.optimizely.com" />
	<target host="cdn3.optimizely.com" />
	<target host="community.optimizely.com" />
	<target host="developers.optimizely.com" />
	<target host="help.optimizely.com" />
	<target host="learn.optimizely.com" />
	<target host="log.optimizely.com" />
	<target host="*.log.optimizely.com" />
	<target host="www.optimizely.com" />

		<exclusion pattern="^http://(?:[^./]+\.){2,}log\.optimizely\.com/" />

			<!--	+ve:
					-->
			<test url="http://this.host.log.optimizely.com/" />
			<test url="http://exists.not.log.optimizely.com/" />

		<test url="http://cdn.optimizely.com/js/geo2.js" />
		<test url="http://cdn2.optimizely.com/js/geo2.js" />
		<test url="http://cdn3.optimizely.com/js/geo2.js" />

	<!--	Complications:
				-->
	<target host="log3.optimizely.com" />
	<target host="pages.optimizely.com" />
	<target host="support.optimizely.com" />

		<!--exclusion pattern="^http://pages\.optimizely\.com/(?!/*(?:$|\?|css/|images/|rs/))" /-->
		<!--
			Reduce non-Tor distinguishability:
								-->
		<exclusion pattern="^http://pages\.optimizely\.com/(?!/*(?:$|\?|rs/.+\.pdf(?:$|\?)))" />

			<!--	+ve:
					-->
			<test url="http://pages.optimizely.com/book" />
			<test url="http://pages.optimizely.com/eBook_The_Ultimate_Guide_to_Optimizing_Your_Online_Store.html" />
			<test url="http://pages.optimizely.com/email-ab-testing-toolkit.html" />
			<test url="http://pages.optimizely.com/shopper-survey.html" />
			<test url="http://pages.optimizely.com/thrive-new-digital-reality-webinar-series-1.html" />
			<test url="http://pages.optimizely.com/thrive-new-digital-reality-webinar-series-2.html" />
			<test url="http://pages.optimizely.com/thrive-new-digital-reality-webinar-series-3.html" />
			<test url="http://pages.optimizely.com/thrive-new-digital-reality-webinar-series-4.html" />
			<test url="http://pages.optimizely.com/thrive-new-digital-reality-webinar-series.html" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^community\.optimizely\.com$" name="^Lithium(?:UserInfo|UserSecure|Visitor)$" /-->
	<!--securecookie host="^learn\.optimizely\.com$" name="^(?:YII_CSRF_TOKEN|backend_us_east_1)$" /-->

	<securecookie host="^(?!pages\.)." name="." />


	<rule from="^http://log3\.optimizely\.com/"
		to="https://3.log.optimizely.com/" />

	<!--	Redirect drops forward slash and args:
							-->
	<rule from="^http://pages\.optimizely\.com/+(?:\?.*)?$"
		to="https://www.optimizely.com/" />

		<test url="http://pages.optimizely.com/?" />

	<rule from="^http://pages\.optimizely\.com/"
		to="https://na-sjn.marketo.com/" />

		<!--
		<test url="http://pages.optimizely.com/rs/361-GER-922/images/Share1.png" />
		-->
		<test url="http://pages.optimizely.com/rs/optimizely/images/Customer_Story_Backcountry.pdf" />

	<!--	Redirect drops path and forward
		slash, but not args:
					-->
	<rule from="^http://support\.optimizely\.com/[^?]*"
		to="https://help.optimizely.com/" />

		<test url="http://support.optimizely.com/Get_Started" />

	<rule from="^http:"
		to="https:" />

</ruleset>
