<!--
	For problematic rules, see Pardot-mismatches.xml.


	CDN buckets:

		- s3.amazonaws.com/storage.pardot.com/

		- pi-assets.pardot.netdna-cdn.com

			- -ssl does not exist
			- cdn
			- form-cdn

		- www-cdn.pardot.netdna-cdn.com

			- -ssl does not exist
			- www-cdn
			- www-cdn[1-3]

		- pardot.tenderapp.com

			- developer

		- pardot.uservoice.com

			- ideas


	Problematic subdomains:

		- form-cdn *
		- developer	(works; mismatched, CN: *.tenderapp.com)
		- ideas		(mismatched, CN: *.uservoice.com)
		- www-cdn *
		- www-cdn[1-3] *

	* 404; mismatched, CN: *.netdna-ssl.com


	Fully covered subdomains:

		- (www.)
		- blog
		- cdn		(→ pi)
		- form-cdn	(→ pi)
		- go
		- help
		- pi
		- storage	(→ s3.amazonaws.com)
		- www-cdn	(→ www)
		- www-cdn[1-3]	(→ www)


	pi sets a visitor_id\d{4} tracking cookie on whichever domain it is
	loaded from.

-->
<ruleset name="Pardot">

	<target host="pardot.com" />
	<target host="*.pardot.com" />


	<!--	Tracking cookies:
					-->
	<securecookie host="^\.pardot\.com$" name="^(?:visitor_id\d+|__utm\w)$" />
	<securecookie host="^(?:go|pi|www)\.pardot\.com$" name=".+" />


	<rule from="^http://((?:blog|go|help|pi|www)\.)?pardot\.com/"
		to="https://$1pardot.com/" />

	<rule from="^http://(?:form-)?cdn\.pardot\.com/"
		to="https://pi.pardot.com/" />

	<rule from="^http://storage\.pardot\.com/"
		to="https://s3.amazonaws.com/storage.pardot.com/" />

	<rule from="^http://www-cdn\d?\.pardot\.com/"
		to="https://www.pardot.com/" />

</ruleset>
