<!--
	CDN buckets:

		- landing.newsinc.com.s3.amazonaws.com | landing.newsinc.com.edgesuite.net

			- a1742.g1.akamai.net

		- assets.newsinc.com.s3.amazonaws.com | assets.newsinc.com.edgesuite.net

			- a1683.g.akamai.net

		- widget.newsinc.com.s3.amazonaws.com

		- dme-prod-1955759440.us-east-1.elb.amazonaws.com

			- pp-serve

		- dmeserv.newsinc.com.edgesuite.net


	Nonfunctional subdomains:

		- (www.) *
		- control **
		- dashboard **
		- dmeserv	(503, akamai)
		- pp-serve *

	* Refused
	** Reset


	Problematic subdomains:

		- assets ¹
		- autodiscover	(refused)
		- landing ¹
		- widget ³

	¹ Works, akamai
	³ amazonaws


	Fully covered subdomains:

		- assets	(→ s3.amazonaws.com)
		- autodiscover	(→ autodiscover-s.outlook.com)
		- embed
		- landing	(→ s3.amazonaws.com)
		- launch
		- mail
		- mailfire
		- widget	(→ s3.amazonaws.com)


	Mixed content:

		- css on embed from assets *

		- Web bugs on embed from pixel.quantcast.com *

	* Secured by us

-->
<ruleset name="News Distribution Network (partial)">

	<target host="*.newsinc.com" />


	<securecookie host="^mail(?:fire)?\.newsinc\.com$" name=".+" />


	<rule from="^http://(assets|landing|widget)\.newsinc\.com/"
		to="https://s3.amazonaws.com/$1.newsinc.com/" />

	<rule from="^http://autodiscover\.newsinc\.com/"
		to="https://autodiscover-s.outlook.com/" />

	<rule from="^http://(embed|mail|launch|mailfire)\.newsinc\.com/"
		to="https://$1.newsinc.com/" />

</ruleset>
