
<!--
Disabled by https-everywhere-checker because:
Fetch error: http://kiva.org/favicon.ico => https://.kiva.org/favicon.ico: label empty or too long
Fetch error: http://www.kiva.org/favicon.ico => https://www..kiva.org/favicon.ico: label empty or too long
Fetch error: http://kiva.org/images/ => https://.kiva.org/images/: label empty or too long
Fetch error: http://www.kiva.org/images/ => https://www..kiva.org/images/: label empty or too long
Fetch error: http://kiva.org/img/ => https://.kiva.org/img/: label empty or too long
Fetch error: http://www.kiva.org/img/ => https://www..kiva.org/img/: label empty or too long
Fetch error: http://kiva.org/js/ => https://.kiva.org/js/: label empty or too long
Fetch error: http://www.kiva.org/js/ => https://www..kiva.org/js/: label empty or too long
Fetch error: http://kiva.org/js-lib/ => https://.kiva.org/js-lib/: label empty or too long
Fetch error: http://www.kiva.org/js-lib/ => https://www..kiva.org/js-lib/: label empty or too long
Fetch error: http://kiva.org/community/teams/my-teams => https://.kiva.org/community/teams/my-teams: label empty or too long
Fetch error: http://www.kiva.org/community/teams/my-teams => https://www..kiva.org/community/teams/my-teams: label empty or too long
Fetch error: http://kiva.org/help/forgot-password => https://.kiva.org/help/forgot-password: label empty or too long
Fetch error: http://www.kiva.org/help/forgot-password => https://www..kiva.org/help/forgot-password: label empty or too long
Fetch error: http://kiva.org/login => https://.kiva.org/login: label empty or too long
Fetch error: http://www.kiva.org/login => https://www..kiva.org/login: label empty or too long
Fetch error: http://kiva.org/oauth/authorize => https://.kiva.org/oauth/authorize: label empty or too long
Fetch error: http://www.kiva.org/oauth/authorize => https://www..kiva.org/oauth/authorize: label empty or too long
Fetch error: http://kiva.org/profile => https://.kiva.org/profile: label empty or too long
Fetch error: http://www.kiva.org/profile => https://www..kiva.org/profile: label empty or too long
Fetch error: http://kiva.org/register => https://.kiva.org/register: label empty or too long
Fetch error: http://www.kiva.org/register => https://www..kiva.org/register: label empty or too long
Fetch error: http://kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfoob-0/ => https://.kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfoob-0/: label empty or too long
Fetch error: http://www.kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfoob-0/ => https://www..kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfoob-0/: label empty or too long
Fetch error: http://kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfooc-0/ => https://.kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfooc-0/: label empty or too long
Fetch error: http://www.kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfooc-0/ => https://www..kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfooc-0/: label empty or too long
Fetch error: http://kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfoob-1/ => https://.kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfoob-1/: label empty or too long
Fetch error: http://www.kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfoob-1/ => https://www..kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfoob-1/: label empty or too long
Fetch error: http://kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfooc-1/ => https://.kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfooc-1/: label empty or too long
Fetch error: http://www.kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfooc-1/ => https://www..kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfooc-1/: label empty or too long
Fetch error: https://cms.kiva.org.s3.amazonaws.com/ => https://s3-us-west-1.amazonaws.com/cms.kiva.org.s3.amazonaws.com/: (51, "SSL: no alternative certificate subject name matches target host name 'cms.kiva.org.s3.amazonaws.com'")

	CDN buckets:

		- s3.amazonaws.com/cms.kiva.org/
		- s3.amazonaws.com/media.zip.kiva.org/
		- s3.amazonaws.com/s3.kiva.org/

		- level3cdn.kiva.org.c.footprint.net

			- l3-[12]
			- level3cdn

		- s3.kiva.org.c.footprint.net

			- s3
			- s3-[12]


	Problematic subdomains:

		- l3-[12] *
		- level3cdn *
		- mail		(interrupted)
		- s3 *
		- s3-[12] *

	* Dropped, footprint.net CDN


	Partially covered subdomains:

		- (www.)	(some pages redirect to http)


	Fully covered subdomains:

		- fellowsblog
		- l3-[12]	(→ www)
		- level3cdn	(→ www)
		- mail		(→ mail.google.com)
		- pages
		- s3		(→ s3.amazonaws.com)
		- s3-[12]	(→ s3.amazonaws.com)
		- zip


	Mixed content:

		- images on fellowsblog from pages *

	* Secured by us

-->
<ruleset name="Kiva.org (partial)" default_off='failed ruleset test'>

	<target host="kiva.org" />
	<target host="www.kiva.org" />
	<target host="mail.kiva.org" />
	<target host="l3-1.kiva.org" />
	<target host="l3-2.kiva.org" />
	<target host="level3cdn.kiva.org" />
	<target host="zip.kiva.org" />
	<target host="fellowsblog.kiva.org" />
	<target host="pages.kiva.org" />

	<target host="cms.kiva.org.s3.amazonaws.com" />

	<exclusion pattern="^http://(www\.)?kiva\.org/$" />

	<rule from="^http://(www\.)?kiva\.org/(?=favicon\.ico|images/|img/|js/|js-lib/|(?:community/teams/my-teams|help/forgot-password|login|oauth/authorize|profile|register)(?:$|\?|/)|rgit\w{40}-\d/)"
			to="https://$1.kiva.org/" />
		<test url="http://kiva.org/favicon.ico" />
		<test url="http://www.kiva.org/favicon.ico" />
		<test url="http://kiva.org/images/" />
		<test url="http://www.kiva.org/images/" />
		<test url="http://kiva.org/img/" />
		<test url="http://www.kiva.org/img/" />
		<test url="http://kiva.org/js/" />
		<test url="http://www.kiva.org/js/" />
		<test url="http://kiva.org/js-lib/" />
		<test url="http://www.kiva.org/js-lib/" />
		<test url="http://kiva.org/community/teams/my-teams" />
		<test url="http://www.kiva.org/community/teams/my-teams" />
		<test url="http://kiva.org/help/forgot-password" />
		<test url="http://www.kiva.org/help/forgot-password" />
		<test url="http://kiva.org/login" />
		<test url="http://www.kiva.org/login" />
		<test url="http://kiva.org/oauth/authorize" />
		<test url="http://www.kiva.org/oauth/authorize" />
		<test url="http://kiva.org/profile" />
		<test url="http://www.kiva.org/profile" />
		<test url="http://kiva.org/register" />
		<test url="http://www.kiva.org/register" />
		<test url="http://kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfoob-0/" />
		<test url="http://www.kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfoob-0/" />
		<test url="http://kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfooc-0/" />
		<test url="http://www.kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfooc-0/" />
		<test url="http://kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfoob-1/" />
		<test url="http://www.kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfoob-1/" />
		<test url="http://kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfooc-1/" />
		<test url="http://www.kiva.org/rgitfoobarfoobarfoobarfoobarfoobarfoobarfooc-1/" />

	<!--	Not secured by server:
					-->
	<!--securecookie host="^zip\.kiva\.org$" name="^_session_id$" /-->

	<securecookie host="^(?:\.?pages|zip)\.kiva\.org$" name=".+" />


	<!--	Protocol-relative links from fellowsblog:
								-->
	<rule from="^https?://cms\.kiva\.org\.s3\.amazonaws\.com/"
		to="https://s3-us-west-1.amazonaws.com/cms.kiva.org.s3.amazonaws.com/" />
		<test url="https://cms.kiva.org.s3.amazonaws.com/" />

	<rule from="^http://(fellowsblog\.|pages\.)kiva\.org/"
		to="https://$1kiva.org/" />

	<rule from="^http://(l3-[12]|level3cdn|zip)\.kiva\.org/"
		to="https://www.kiva.org/" />

	<rule from="^http://mail\.kiva\.org/"
			to="https://mail.google.com/a/kiva.org" />

	<rule from="^http://s3(-[12])?\.kiva\.org/"
			to="https://s3.amazonaws.com/s3.kiva.org/" />
		<test url="http://s3.kiva.org/" />
		<test url="http://s3-1.kiva.org/" />
		<test url="http://s3-2.kiva.org/" />
</ruleset>
