<ruleset name="Helmet.fi">
  <target host="*.helmet.fi" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.helmet\.fi$" name="^(III_ENCORE_PATRON|III_EXPT_FILE|III_SESSION_ID|SESSION_LANGUAGE)$" /-->
	<!--securecookie host="^haku\.helmet\.fi$" name="^(ENCORE_INITIAL_PROTOCOL|jcontainerId)$" /-->
	<!--securecookie host="^luettelo\.helmet\.fi$" name="^SESSION_SCOPE$" /-->
	<!--securecookie host="^www\.helmet\.fi$" name="^(ASP\.NET_SessionId|HelmetLanguage)$" /-->

	<securecookie host="^(?:haku|luettelo|www)?\.helmet\.fi$" name=".+" />


  <rule from="^http://(www|luettelo|haku)\.helmet\.fi/" to="https://$1.helmet.fi/" />
</ruleset>
