<!--
	Other CZ.NIC rulesets:

		- CSIRT.CZ.xml
		- DNSSEC-Validator.cz.xml
		- Domenovy_prohlizec.cz.xml
		- Knot-DNS.cz.xml
		- MojeID.cz.xml


	Fully covered subdomains:

		- (www.)
		- blog
		- git
		- knihy
		- labs
		- gitlab.labs
		- jenkins.labs
		- lists
		- piwik
		- podpora


	Observed cookie domains:

		- .
		- .labs *
		- stats ¹
		- www ¹

	¹ Not secured by server
	* Tracking cookies only


	Mixed content:

		- Bugs on knihy from i.creativecommons.org *

	* Secured by us

-->
<ruleset name="CZ.NIC">

	<target host="nic.cz" />
	<target host="*.nic.cz" />


	<securecookie host="^(?:(?:www|labs|git|blog)?\.)?nic\.cz$" name=".+" />


	<rule from="^http://((?:www|labs|git|blog|knihy|(?:gitlab|jenkins)\.labs|lists|piwik|podpora)\.)?nic\.cz/"
		to="https://$1nic.cz/" />

</ruleset>
