<!--
	Problematic subdomains:

		- (www.)?
		- blog ²
		- web ²

	¹ 502
	² Mismatched


	Fully covered subdomains:

		- auth
		- images
		- na2
		- support


	Insecure cookies are set for these domains:

		- .brightidea.com
		- web.brightidea.com


	Mixed content:

		- iframe on blog from www.brightidea.com ¹
		- css on blog from www.brightidea.com ¹

		- Images, on:

			- blog from $self ²
			- blog from www.brightidea.com ³
			- web from cdn2.hubspot.net ¹

		- favicon on blog from www.brightidea.com ¹

		- Ads/bugs, on:

			- blog from www.googleadservices.com
			- blog from pixel.quantserve.com ¹
			- blog from ad.retargeter.com ¹
			- blog from b.scorecardresearch.com ¹

	¹ Secured by us
	² Not secured by us <= mismatched
	³ Unsecurable <= 502

-->
<ruleset name="Brightidea.com (partial)">

	<!--	Direct rewrites:
				-->
	<target host="auth.brightidea.com" />
	<!--target host="blog.brightidea.com" /-->
	<target host="images.brightidea.com" />
	<target host="na2.brightidea.com" />
	<target host="support.brightidea.com" />
	<!--target host="web.brightidea.com" /-->


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.brightidea\.com$" name="^(__cfduid|__qca|cf_clearance)$" /-->
	<!--securecookie host="^web\.brightidea\.com$" name="^hsPagesViewedThisSession$" /-->

	<securecookie host="^\.brightidea\.com$" name="^__qca$" />


	<rule from="^http:"
		to="https:" />

</ruleset>
