<!--
	Server sends no certificate chain *

	* See https://whatsmychaincert.com


	Insecure cookies are set for these hosts:

		- www.openrce.org

-->
<ruleset name="OpenRCE.org" default_off="expired, missing certificate chain">

	<!--	Direct rewrites:
				-->
	<target host="openrce.org" />
	<target host="www.openrce.org" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^www\.openrce\.org$" name="^OPENRCESESSIONID$" /-->

	<securecookie host="^www\.openrce\.org$" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
