<!--
	Insecure cookies are set for these domains:

		- you

-->
<ruleset name="38degrees">
    <target host="you.38degrees.org.uk" />

	<!--	Not secured by server:
					-->
	<!--securecookie host="^you\.38degrees\.org\.uk$" name="^_agra_session$" /-->

    <securecookie host="^(?:.*\.)?38degrees\.org\.uk$" name=".+" />

    <rule from="^http://([^/:@]+)?\.38degrees\.org\.uk/"
        to="https://$1.38degrees.org.uk/" />
</ruleset>
