<!--
	^: Refused
	www: Cloudfront


	Insecure cookies are set for these domains:

		- www.bitcoin.com


	Mixed content:

		- css on www from img.okcoin.com *
		- Images on www from img.okcoin.com *

	* Secured by us

-->
<ruleset name="Bitcoin.com" default_off="mismatched" platform="mixedcontent">

	<!--	Direct rewrites:
				-->
	<target host="www.bitcoin.com" />

	<!--	Complications:
				-->
	<target host="bitcoin.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^www\.bitcoin\.com$" name="^JSESSIONID$" /-->

	<securecookie host="^(?:www)?\.bitcoin\.com$" name=".+" />


	<rule from="^http://bitcoin\.com/"
		to="https://www.bitcoin.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
