<!--
	Fully covered subdomains:

		- (www.)?
		- dash
		- sample-default
		- sample-solid
		- sample-threes


	Insecure cookies are set for these domains and hosts:

		- .readme.io
		- dash.readme.io

-->
<ruleset name="ReadMe.io">

	<target host="readme.io" />
	<target host="dash.readme.io" />
	<target host="sample-default.readme.io" />
	<target host="sample-solid.readme.io" />
	<target host="sample-threes.readme.io" />
	<target host="www.readme.io" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.readme\.io$" name="^(__cfduid|cf_clearance)$" /-->
	<!--securecookie host="^(?:dash|sample-threes|...)\.readme\.io$" name="^(XSRF-TOKEN|connect\.sid)" /-->

	<securecookie host=".*\.readme\.io$" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
