<!--
	Nonfunctional hosts in *yubico.com:

		- forum *

	* Refused


	Problematic subdomains:

		- static *

	* Works; mismatched, CN: www.yubico.com


	Fully covered subdomains:

		- (www.)?
		- api
		- developers
		- openid
		- static	(→ www)
		- store
		- upload


	These altnames don't exist:

		- www.developers.yubico.com
		- www.store.yubico.com


	Insecure cookies are set for these domains and hosts:

		- yubico.com
		-.store.yubico.com
		- www.yubico.com


	Mixed content:

		- Images on www from $self *

	* Secured by us

-->
<ruleset name="Yubico.com (partial)">

	<!--	Direct rewrites:
				-->
  <target host="yubico.com" />
  <target host="api.yubico.com" />
	<target host="developers.yubico.com" />
  <target host="openid.yubico.com" />
  <target host="store.yubico.com" />
  <target host="upload.yubico.com" />
  <target host="www.yubico.com" />

	<!--	Complications:
				-->
	<target host="static.yubico.com" />

	<!--	Not secured by server:
					-->
	<!--securecookie host="^(www\.)?yubico\.com$" name="^X-Mapping-\w+$" /-->
	<!--securecookie host="^\.store\.yubico\.com$" name="^osCsid$" /-->
	<!--securecookie host="^www\.yubico\.com$" name="^PHPSESSID$" /-->

  <securecookie host="^(?:.+\.)?yubico\.com$" name=".*"/>

	<rule from="^http://static\.yubico\.com/"
		to="https://www.yubico.com/static/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
