<!--
	Other HubSpot rulesets:

		- HS-analytics.net.xml
		- HSappstatic.net.xml
		- HSstatic.net.xml
		- HubSpot.net.xml
		- HubSpot_QA.com.xml


	s3.amazonaws.com/css.blog.hubspot.com/
		- s3.amazonaws.com/cdn1.hubspot.com/
	hubspot-marketplace.s3.amazonaws.com

		- hubspot.force.com

			- help.hubspot.com

		- a.performable.com

			- go.hubspot.com


	ideas.hubspot.com is handled in Uservoice-clients.xml.


	Nonfunctional domains:

		- hubspot.com subdomains:

			- cta-redirect ²
			- go *
			- help			(cert: slotmatching8.salesforce.com; redirects to http)
			- hugs			(504, akamai; redirects to www.inboundconference.com over http)
			- learning *
			- university.web11	(times out)

		- (www.)inboundconference.com	(times out)

	² Refused
	* 503, akamai


	Problematic domains:

		- hubspot.com subdomains:

			- ^ ¹
			- academy ²
			- cdn1			(akamai 503, valid cert)
			- dev			(works, akamai)
			- forums ²
			- ideas ¹

		- www.inbound.com	(works, akamai)

	² Mismatched
	¹ Dropped


	Fully covered domains:

		- hubspot.com subdomains:

			- (www.)?	(^ → www)
			- app
			- cdn1		(→ s3.amazonaws.com)
			- cdn2
			- designers
			- forms
			- info
			- knowledge
			- login
			- no-cache
			- sites-auth
			- static2cdn


	Insecure cookies are set for these hosts:

		- designers.hubspot.com


	track sets "hsfirstvisit" and "hubspotutk" wildcard
	cookies on domains from which it is loaded.


	js.hubspot.com sets the following wildcard cookies
	on whichever domains it is loaded from:

		- hsfirstvisit
		- __hssc
		- __hssrc
		- __hstc
		- hubspotutk


	Mixed content:

		- Images, on:

			- academy, designers, developers from cdn[12].hubspot.com

-->
<ruleset name="HubSpot.com">

	<!--	Direct rewrites:
				-->
	<target host="app.hubspot.com" />
	<target host="blog.hubspot.com" />
	<target host="cdn2.hubspot.com" />
	<target host="designers.hubspot.com" />
	<target host="developers.hubspot.com" />
	<target host="forms.hubspot.com" />
	<target host="info.hubspot.com" />
	<target host="js.hubspot.com" />
	<target host="knowledge.hubspot.com" />
	<target host="login.hubspot.com" />
	<target host="marketplace.hubspot.com" />
	<target host="no-cache.hubspot.com" />
	<target host="sites-auth.hubspot.com" />
	<target host="static.hubspot.com" />
	<target host="static2cdn.hubspot.com" />
	<target host="track.hubspot.com" />
	<target host="tracking.hubspot.com" />
	<target host="www.hubspot.com" />

	<!--	Complications:
				-->
	<target host="hubspot.com" />
	<target host="cdn.blog.hubspot.com" />
	<target host="cdn1.hubspot.com" />
	<target host="forums.hubspot.com" />
	<target host="jobs.hubspot.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^designers\.hubspot\.com$" name="^PagesViewedThisSession$" /-->

	<securecookie host="^(?:.*\.)?hubspot\.com$" name=".*" />


	<rule from="^http://hubspot\.com/"
		to="https://www.hubspot.com/" />

	<rule from="^http://cdn\.blog\.hubspot\.com/"
		to="https://s3.amazonaws.com/cdn.hubspot.com/" />

	<rule from="^http://cdn1\.hubspot\.com/"
		to="https://s3.amazonaws.com/cdn1.hubspot.com/" />

	<rule from="^http://forums\.hubspot\.com/"
		to="https://hubspot3.vanillaforums.com/" />

	<!--	- Doesn't work over https
		- Redirects like so over http
					-->
	<rule from="^http://jobs\.hubspot\.com/"
		to="https://www.hubspot.com/jobs/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
