<!--
	Association for Progressive Communications


	Nonfunctional hosts in *apc.org:

		- erotics *

	* Shows another domain


	Problematic subdomains:

		- flossprize ¹
		- gn ²

	¹ Redirect differs
	² Cert only matches *.gn


	Insecure cookies are set for these domains:

		- .apc.org


	Mixed content:

		- Images, on:

			- www.gn from $self *
			- www from $self *

	* Secured by us

-->
<ruleset name="APC.org (partial)">

	<!--	Direct rewrites:
				-->
	<target host="apc.org" />
	<target host="www.gn.apc.org" />
	<target host="lists.apc.org" />
	<target host="www.apc.org" />

	<!--	Complications:
				-->
	<target host="flossprize.apc.org" />
	<target host="gn.apc.org" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.apc\.org$" name="^SESS[\da-f]{32}$" /-->

	<securecookie host="^\.(?:www\.gn\.)?apc\.org$" name=".+" />


	<!--	Redirect drops path but not args:
							-->
	<rule from="^http://flossprize\.apc\.org/[^?]*"
		to="https://www.apc.org/en/node/1786" />

		<test url="http://flossprize.apc.org/?" />
		<test url="http://flossprize.apc.org//" />

	<!--	Redirect drops path but not args:
							-->
	<rule from="^http://gn\.apc\.org/[^?]*"
		to="https://www.gn.apc.org/" />

		<test url="http://gn.apc.org/?" />
		<test url="http://gn.apc.org//" />

	<rule from="^http:"
		to="https:" />

</ruleset>
