<!--
	Insecure cookies are set for these domains:

		- myapm
		- www

-->
<ruleset name="APM.com">

	<target host="apm.com" />
	<target host="*.apm.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^(myapm|www)\.apm\.com$" name="^(exp_last_activity|exp_last_visit|exp_tracker)$" /-->
	<!--securecookie host="^myapm\.apm\.com$" name="^PHPSESSID$" /-->
	<!--securecookie host="^www\.apm\.com$" name="^exp_stashid$" /-->

	<securecookie host="^(?:myapm|www)\.apm\.com$" name=".+" />


	<rule from="^http://(myapm\.|www\.)?apm\.com/"
		to="https://$1apm.com/" />

</ruleset>
