
<!--
Disabled by https-everywhere-checker because:
Fetch error: http://alphaville.ft.com/ => https://alphaville.ft.com/: (6, 'Could not resolve host: alphaville.ft.com')
Fetch error: http://alphaville-cdn.ft.com/ => https://alphaville-cdn.ft.com/: (6, 'Could not resolve host: alphaville-cdn.ft.com')
Non-2xx HTTP code: http://track.ft.com/ (200) => https://track.ft.com/ (404)

	Financial Times

	For rules causing MCB, see ft.com-mixedcontent.xml.

	Other Financial Times rulesets:

		- FT-static.com.xml
		- on.ft.com (via Bitly_branded_short_domains.xml)


	CDN buckets:

		- media.ft.com.edgesuite.net
		- s1.media.ft.com.edgesuite.net
		- search.ft.com.edgesuite.net
		- www.ft.com.edgesuite.net
		- az592774.vo.msecnd.net


	Nonfunctional hosts in *ft.com:

		- discussions ʳ
		- enterprise ᵈ
		- ftcorporate ʰ
		- funds ʳ
		- help ʰ
		- s1.media *
		- test.media *
		- reg.test.media *
		- s[123].test.media *
		- membership *
		- nbe ʰ
		- rankings *
		- search *
		- static-render-p	(504, Akamai)
		- the125		502, Akamai
		- video ᵈ

	* 503, akamai
	* Redirects to www.ft.com, akamai
	ᵈ Dropped
	ʰ Redirects to http
	ʳ Refused


	Problematic hosts in *ft.com:

		- aboutus ᴬ
		- announce ˣ
		- blogs ᴬ
		- im.media ᴬ
		- s4.media		(works, akamai)
		- origami ᵐ
		- navigation.webservices ᴬ

	ᴬ Akamai / mismatched
	ᵐ Mismatched
	ˣ Mixed css, see https://www.paulirish.com/2010/the-protocol-relative-url/


	Partially covered hosts in *ft.com:

		- markets *

	* Some pages redirect to http


	Insecure cookies are set for these domains and hosts: ᶜ

		- .ft.com
		- announce.ft.com
		- ftepaper.ft.com
		- cdn.markets.ft.com
		- myaccount.ft.com
		- propertylistings.ft.com
		- sub.ft.com
		- .sub.ft.com

	ᶜ See https://owasp.org/index.php/SecureFlag


	Mixed content:

		- css, on:

			- announce from static-render-p.ft.com
			- announce from navigation.webservices.ft.com

		- Images, on:

			- announce from navigation.webservices.ft.com
			- announce, ftalphaville from im.ft-static.com ˢ
			- ftalphaville from im.media.ft.com ˢ

		- Ads/bugs, on:

			- announce, ftalphaville from ad.doubleclick.net
			- announce, ftalphaville, ftepaper from media.ft.com ˢ
			- announce, ftalphaville, ftepaper from stats.ft.com ˢ
			- announce, ftalphaville, ftepaper from track.ft.com ˢ

	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/

-->
<ruleset name="FT.com (partial)" default_off='failed ruleset test'>

	<!--	Direct rewrites:
				-->
	<target host="ft.com" />
	<target host="accounts.ft.com" />
	<target host="alphaville.ft.com" />
	<target host="alphaville-cdn.ft.com" />
	<!--target host="announce.ft.com" /-->
	<target host="buildservice.ft.com" />
	<target host="force.ft.com" />
	<target host="ftepaper.ft.com" />
	<target host="h2.ft.com" />
	<target host="howtospendit.ft.com" />
	<target host="markets.ft.com" />
	<target host="cdn.markets.ft.com" />
	<target host="media.ft.com" />
	<target host="live.ft.com" />
	<target host="myaccount.ft.com" />
	<target host="next.ft.com" />
	<target host="next-geebee.ft.com" />
	<target host="build.origami.ft.com" />
	<target host="origami-build.ft.com" />
	<target host="propertylistings.ft.com" />
	<target host="register.ft.com" />
	<target host="registration.ft.com" />
	<target host="s3o.ft.com" />
	<target host="spoor-api.ft.com" />
	<target host="stats.ft.com" />
	<target host="sub.ft.com" />
	<target host="subscribe.ft.com" />
	<target host="track.ft.com" />
	<target host="image.webservices.ft.com" />
	<target host="www.ft.com" />

	<!--	Complications:
				-->
	<target host="im.media.ft.com" />
	<target host="s4.media.ft.com" />

		<!--	Redirects to http:
						-->
		<!--exclusion pattern="^http://markets\.ft\.com/research/Markets/Overview$" /-->
		<!--
			Exceptions:
					-->
		<exclusion pattern="^http://markets\.ft\.com/(?!favicon\.ico|RESEARCH/uploadhandler/)" />

			<!--	+ve:
					-->
			<test url="http://markets.ft.com/research/Markets/Currencies" />
			<test url="http://markets.ft.com/research/Markets/Overview" />

			<!--	-ve:
					-->
			<test url="http://markets.ft.com/favicon.ico" />

		<!--exclusion pattern="^http://registration\.ft\.com/(?!Common/|favicon\.ico|registration/barrier)" /-->

		<!--	Set cookie without Secure:
							-->
		<!--test url="http://h2.ft.com/image/v1/images/raw/fticon:brand-ft-masthead?format=svg&amp;source=memb-header" /-->
		<!--test url="http://spoor-api.ft.com/px.gif?data=%7B%22category%22%3A%22page%22%2C%22action%22%3A%22view%22%2C%22system%22%3A%7B%22api_key%22%3A%22qUb9maKfKbtpRsdp0p2J7uWxRPGJEP%22%2C%22source%22%3A%22o-tracking%22%2C%22version%22%3A%221.0.5%22%7D%2C%22context%22%3A%7B%22url%22%3A%22https%3A%2F%2Fsubscription.ft.com%2F%22%2C%22product%22%3A%22ft.com%22%2C%22funnel%22%3A%7B%22funnel_name%22%3A%22Subs%20sign-up%22%2C%22funnel_steps%22%3A3%2C%22step_name%22%3A%22start%22%2C%22step_number%22%3A1%7D%7D%7D" /-->

		<test url="http://ftalphaville-cdn.ft.com/wp-content/uploads/2012/10/100_57_Murphy.jpg" /><!--	2789 -->
		<test url="http://ig.ft.com/static/widgets/story-collection-widget/brexit.png" />
		<test url="http://cdn.markets.ft.com/Research/ResourceManager/KNjVD_ltbtze6itZMl4bnQ2/u/f/635575616825479587/Research/Content/Images/Tabs.Sprite.png" />
		<test url="http://next.ft.com/__opt-in?optedvia=clippingshelp&amp;referrer=https%3A%2F%2Fnext.ft.com%2Fmyft%2Fsaved-articles" />
		<test url="http://next-geebee.ft.com/hashed-assets/myft-page/53451626/main.css" />
		<test url="http://next-geebee.ft.com/image/v1/images/raw/http%3A%2F%2Fnext-geebee.ft.com%2Fassets%2Ficons%2Fhamburger.svg?source=next&amp;tint=%23FFFFFF,%23FFFFFF&amp;format=svg" />
		<test url="http://origami-build.ft.com/files/o-footer@5.0.3/img/nikkei_logo.svg" /><!--	1516 -->
		<test url="http://registration.ft.com/registration/subscription-service/bpsp" />
		<test url="http://registration.ft.com/registration/subscription-service/signuppsp" />
		<test url="http://image.webservices.ft.com/v1/images/raw/http%3A%2F%2Fassets1.howtospendit.ft-static.com%2Fimages%2Fa6%2F9e%2F9c%2Fa69e9c7b-781a-492d-bc7c-637b35a7fbe4_grid_crop.jpg?width=125&amp;height=125&amp;dpr=2&amp;format=jpg&amp;source=howtospendit" /><!--	4547 -->


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.ft\.com$" name="^(?:\d+_\d|AYSC|AYSC_C|FT_SITE|FTAllocation|FTUserTrack|anon-opt-in|h2_rtt|h2_spd|spoor-id)$" /-->
	<!--securecookie host="^(?:announce|cdn\.markets)\.ft\.com$" name="^GZIP$" /-->
	<!--securecookie host="^ftepaper\.ft\.com$" name="^FTEpaper$" /-->
	<!--securecookie host="^myaccount\.ft\.com$" name="^AWSELB$" /-->
	<!--securecookie host="^propertylistings\.ft\.com$" name="^(?:ASP\.NET_SessionId|PropGoLuxuryCookie_Lang)$" /-->
	<!--securecookie host="^sub\.ft\.com$" name="^PHPSESSID$" /-->
	<!--securecookie host="^\.sub\.ft\.com$" name="^mb_sessid_/\w+$" /-->

	<!--	Tracking cookies set by track:
						-->
	<securecookie host="^\." name="^(?:_ga|AYSC$|AYSC_C$|FTUserTrack$)" />


	<rule from="^http://(im|s4)\.media\.ft\.com/"
		to="https://$1.ft-static.com/" />

		<test url="http://im.media.ft.com/m/img/masthead_print.gif" />
		<test url="http://s4.media.ft.com/opentag/opentag-27295-31253.js" />

	<rule from="^http:"
		to="https:" />

</ruleset>
