<!--
	Every user has it's own subdomain which is redirected to http.

	Other Tumblr rulesets:

		+ Tmblr.co.xml
		+ Txmblr.com.xml
		+ umblr.com.xml

	Non-functional hosts
		SSL peer certificate was not OK:
			 - data.tumblr.com

		Secure connection redirects to plaintext:
			 - developers.tumblr.com

	Users should enable tls support in tumblr settings:

		https://staff.tumblr.com/post/75482980993/you-can-now-take-extra-precaution-against-hackers

	Unfortunately, per-user subdomains don't support https either, so users
	are still vulnerable whenever they browse blogs while logged in. :(

-->
<ruleset name="Tumblr.com (partial)">
	<target host="tumblr.com" />
	<target host="www.tumblr.com" />
	<target host="a.tumblr.com" />
		<test url="http://a.tumblr.com/tumblr_mss09owW141rdplduo1.mp3" />
	<target host="assets.tumblr.com" />
		<test url="http://assets.tumblr.com/assets/scripts/" />
		<test url="http://assets.tumblr.com/assets/scripts/dashboard.js" />
		<test url="http://assets.tumblr.com/assets/scripts/polyfills.js" />
		<test url="http://assets.tumblr.com/assets/scripts/posting.js" />
		<test url="http://assets.tumblr.com/assets/scripts/vendor/jquery_backbone_lodash.js" />
		<test url="http://assets.tumblr.com/assets/scripts/vendor/tiny_mce_3_5_10/tiny_mce.js" />
	<target host="secure.assets.tumblr.com" />
		<test url="http://secure.assets.tumblr.com/images/reads_program.pdf" />
	<target host="embed.tumblr.com" />
		<test url="http://embed.tumblr.com/embed/post/NX56sHYxMxsNiYMhM3gx8A/139221102643" />
	<target host="engineering.tumblr.com" />
	<target host="media.tumblr.com" />
		<test url="http://media.tumblr.com/tumblr_ly6fs5CdtS1qhcsyw.jpg" />
	<target host="*.media.tumblr.com" />
		<test url="http://37.media.tumblr.com/b7b007141713201d3692f6c2fae605e7/tumblr_mvoi8uOMTH1rnf5opo2_r1_250.gif" />
		<test url="http://66.media.tumblr.com/3beca4f8c1e028a29e87394de17c86b1/tumblr_o2qh8ztGAt1r7hrego2_1280.jpg" />
		<test url="http://68.media.tumblr.com/eb21f58707fa8f80d6f35979261e7a62/tumblr_oghnajATtI1uiqvf8o1_500.jpg" />
	<target host="platform.tumblr.com" />
		<test url="http://platform.tumblr.com/v1/follow_button.html" />
	<target host="px.srvcs.tumblr.com" />
		<test url="http://px.srvcs.tumblr.com/impixu" />
	<target host="staff.tumblr.com" />
	<target host="static.tumblr.com" />
		<test url="http://static.tumblr.com/i21wc39/5sxmn9bjr/paperstacks_theme.css" />
	<target host="secure.static.tumblr.com" />
		<test url="http://secure.static.tumblr.com/tkqqpe9/4J6n0jyt7/bhrp_programguide_cairo_v9_press_secure.pdf" />
	<target host="tm319.tumblr.com" />
	<target host="v.tumblr.com" />
		<test url="http://v.tumblr.com/tumblr_m5hdfrQdSp1r1bcej_r1.mov" />
	<target host="vt.tumblr.com" />
		<test url="http://vt.tumblr.com/tumblr_mrhbqiTyqB1r8cz1x.mp4" />

	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.tumblr\.com$" name="^(?:__cfduid|cf_clearance|language|logged_in)$" /-->
	<!--securecookie host="^\.srvcs\.tumblr\.com$" name="^anon_id$" /-->
	<!--securecookie host="^www\.tumblr\.com$" name="^(capture|devicePixelRatio|documentWidth|last_toast|pfe|pfp|pfu|tmgioct)$" /-->

	<!--	Tracking cookies:
					-->
	<securecookie host="^(?:secure\.assets|www)\.tumblr\.com$" name="^__utmf$" />

	<securecookie host="^\." name="^(?:__cfduid|cf_clearance)$" />
	<securecookie host="^\.srvcs\.tumblr\.com$" name="." />
	<securecookie host="^www\.tumblr\.com$" name="^d(?:evicePixelRatio|ocumentWidth)$" />

	<rule from="^http:" to="https:" />
</ruleset>
