<!--
	Nonfunctional hosts in anpost.ie:

		- locator *
		- postage *
		- track *

	* Handshake fails


	^: cert only matches www


	Fully covered hosts in *anpost.ie:

		- (www.)?	(^ → www)
		- edocket


	Mixed content:

		- favicons on edocket and www from www *

		- Ads/bugs, on:

			- www from s7.addthis.com *
			- www from www.tripadvisor.com *

	* Secured by us

-->
<ruleset name="An Post.ie (partial)">

	<!--	Direct rewrites:
				-->
	<target host="edocket.anpost.ie" />
	<target host="www.anpost.ie" />

	<!--	Complications:
				-->
	<target host="anpost.ie" />

	<!--	Not secured by server:
					-->
	<!--securecookie host="^(edocket|www)\.anpost\.ie$" name="^ASP\.NET_SessionId$" /-->
	<!--securecookie host="^www\.anpost\.ie$" name="^ASPSESSIONID\w{8}$" /-->

	<securecookie host="^(?:edocket|www)\.anpost\.ie$" name=".+" />


	<rule from="^http://anpost\.ie/"
		to="https://www.anpost.ie/" />

	<rule from="^http:"
		to="https:" />
</ruleset>
