<!--
	ETH Zürich

	For problematic rules, see ETHZ.ch-problematic.xml.


	Other ETH Zürich rulesets:

		- DARCH.ch.xml
		- Untergeschoss.ch


	Nonfunctional subdomains:

		- addis2050 *
		- www.alumni ²

		- arch subdomains:

			- aaa *
			- ambitus *
			- angelil *
			- baudok *
			- www.baudok **
			- archiv.gta *
			- ausstellungen.gta *

		- www.arch ²
		- www.ee ²
		- e-collection.ethbib ³
		- www.ethbib ⁴
		- laser.inf ***
		- se.inf ***
		- e-collection.library ³
		- www.vvz ⁵

	* Redirects to http, mismatched, CN: webgta.ethz.ch
	² Redirects to www.ethz.ch
	** Redirects to http, mismatched, CN: webita.ethz.ch
	³ Redirects to wayf.switch.ch
	⁴ Redirects to www.library.ethz.ch
	*** "Website not found"
	⁵ Refused


	Problematic subdomains:

		- ^			(times out)
		- e-citations.ethbib ²
		- ethlife		(cert only matches www.ethlife)
		- www.ethlife ⁴
		- wiki.se.inf ⁵
		- piwik ⁵

	² Insecure renegotiation
	⁴ Expired
	⁵ Server sends no certificate chain, see https://whatsmychaincert.com


	Fully covered subdomains:

		- ^			(→ www)

		- (www.)bilddb.arch
		- (www.)bilddb.gta.arch
		- (www.)media.gta.arch
		- (www.)intern.arch
		- (www.)it.arch
		- (www.)tg

		- e-citations.ethbib
		- people.inf

		- login.library
		- www.library

		- stat
		- webgta
		- webita
		- wtsdc
		- www1


	Insecure cookies are set for these hosts:

		- e-citations.ethbib.ethz.ch
		- www.library.ethz.ch
		- wtsdc.ethz.ch
		- www.ethz.ch
		- www1.ethz.ch

-->
<ruleset name="ETHZ.ch (partial)">

	<!--	Direct rewrites:
				-->
	<target host="bilddb.arch.ethz.ch" />
	<target host="www.bilddb.arch.ethz.ch" />
	<target host="bilddb.gta.arch.ethz.ch" />
	<target host="www.bilddb.gta.arch.ethz.ch" />
	<target host="media.gta.arch.ethz.ch" />
	<target host="www.media.gta.arch.ethz.ch" />
	<target host="intern.arch.ethz.ch" />
	<target host="www.intern.arch.ethz.ch" />
	<target host="it.arch.ethz.ch" />
	<target host="www.it.arch.ethz.ch" />
	<target host="tg.ethz.ch" />
	<target host="www.tg.ethz.ch" />

	<target host="e-citations.ethbib.ethz.ch" />
	<!--target host="ethlife.ethz.ch" /-->
	<!--target host="www.ethlife.ethz.ch" /-->
	<target host="people.inf.ethz.ch" />
	<target host="login.library.ethz.ch" />
	<target host="www.library.ethz.ch" />
	<!--target host="piwik.ethz.ch" /-->
	<target host="stat.ethz.ch" />
	<target host="webgta.ethz.ch" />
	<target host="webita.ethz.ch" />
	<target host="wtsdc.ethz.ch" />
	<target host="www.ethz.ch" />
	<target host="www1.ethz.ch" />

	<!--	Complications:
				-->
	<target host="ethz.ch" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^e-citations\.ethbib\.ethz\.ch$" name="^PHPSESSID$" /-->
	<!--securecookie host="^www\.library\.ethz\.ch$" name="^amfID$" /-->
	<!--securecookie host="^wtsdc\.ethz\.ch$" name="^(ACOOKIE|WEBTRENDS_ID)$" /-->
	<!--securecookie host="^www\.ethz\.ch$" name="^_shibstate_\d+_\d+$" /-->
	<!--securecookie host="^www1\.ethz\.ch$" name="^vcmp-p16-cookie$" /-->

	<securecookie host="^(?:wtsdc|www)\.ethz\.ch$" name=".+" />


	<rule from="^http://ethz\.ch/"
		to="https://www.ethz.ch/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
