<!--
	Almost everything on europa.eu is missconfigured, but there are some exceptions.


	Nonfunctional subdomains:

		- ^ ¹
		- curia ¹
		- eacea.ec ²
		- trade.ec ⁴
		- eur-lex ⁵
		- m.europarl ⁶
		- www.europarl ⁶
		- (www.)ombudsman ⁶

	¹ 403, valid cert
	² Redirect to http, valid cert
	⁴ 403; mismatched, CN: europa.eu
	⁵ Shows ^; mismatched, CN: europa.eu
	⁶ Dropped


	Partially covered subdomains:

		- cordis *
		- ec ²

	* Some pages redirect to http
	² $ 403s


	Fully covered subdomains:

		- www.eba
		- (www.)enisa
		- www.europol


	Insecure cookies are set for these domains:

		- www.ecb.europa.eu


	Mixed content:

		- Image on www.europol from www.europol *
	
	* Secured by us

-->
<ruleset name="Europa.eu (partial)">

	<target host="www.ecb.eu" />
	<target host="*.europa.eu" />
		<!--exclusion pattern="^http://cordis\.europa\.eu/+($|\?|css/|erawatch/css/|erawatch/icons/|favicon\.ico|guidance/icons/|live-edit/css/)" /-->
		<exclusion pattern="^http://cordis\.europa\.eu/+(?!icons/|js/|wel/template-)" />
		<!--
			403:
				-->
		<!--exclusion pattern="^http://ec\.europa\.eu/$" /-->
		<!--
			Exceptions:
					-->
		<exclusion pattern="^http://ec\.europa\.eu/+(?!commission(?:$|[?/]))" />
		<exclusion pattern="^https://oami\.europa\.eu/knowledge/" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^www\.ecb\.europa\.eu$" name="^BIGipServerPOOL\.www\.ecb\.europa\.eu_HTTPS$" /-->

	<!--securecookie host="^\.europol\.europa\.eu$" name="^SESS\w32$" /-->

	<securecookie host="^www\.ecb\.europa\.eu$" name=".+" />


	<rule from="^http://www\.ecb(?:\.europa)?\.eu/"
		to="https://www.ecb.europa.eu/" />

	<rule from="^http://(?:www\.)?(consilium|easa|enisa)\.europa\.eu/"
		to="https://www.$1.europa.eu/" />

	<rule from="^http://(cordis|www\.eba|ec|joinup\.ec|(?:www\.)?enisa|www\.europol|oami)\.europa\.eu/"
		to="https://$1.europa.eu/" />

</ruleset>
