<!--
	For other Amazon coverage, see Amazon.xml.


	CDN buckets:

		- associates-amazon.s3.amazonaws.com


	Nonfunctional domains:

		- affiliate-blog.amazon.de	(hosted on Typepad)


	Certs also cover:

		- ws.amazon.cn


	amazonassociates.typepad.com


	Problematic domains:

		- rcm.amazon.ca ¹
		- rcm-jp.amazon.co.jp *
		- rcm-uk.amazon.co.uk *
		- rcm-de.amazon.de *

	¹ Expired 2013-10-08
	* Expired 2013-08-23


	Fully covered domains:

		- rcm-ca.amazon.ca

		- amazon.co.uk subdomains:

			- completion
			- payments

		- widgets.amazon.com


	Insecure cookies are set for these domains and hosts:

		- .amazon.com
		- widgets.amazon.com

-->
<ruleset name="Amazon Associates">

	<!--	Direct rewrites:
					-->
	<target host="rcm-ca.amazon.ca" />
	<target host="ws.amazon.ca" />

	<target host="affiliate-program.amazon.com" />
	<target host="pda-bes.amazon.com" />
	<target host="rcm.amazon.com" />
	<target host="sellercentral.amazon.com" />
	<target host="widgets.amazon.com" />
	<target host="ws.amazon.com" />

	<target host="completion.amazon.co.uk" />
	<target host="payments.amazon.co.uk" />
	<target host="rcm-uk.amazon.co.uk" />
	<target host="sellercentral.amazon.co.uk" />
	<target host="ws.amazon.co.uk" />

	<target host="partnernet.amazon.de" />
	<target host="ws.amazon.de" />

	<target host="ws.amazon.fr" />

	<!--	Special cases:
				-->
	<target host="rcm-images.amazon.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.amazon\.com$" name="^(ap-fid|session-id|session-id-time|session-token|ubid-main)$" /-->
	<!--securecookie host="^widgets\.amazon\.com$" name="^AmazonWidgetsCentral$" /-->

	<securecookie host="^widgets\.amazon\.com$" name=".+" />


	<rule from="^http://rcm-images\.amazon\.com/"
		to="https://images-na.ssl-images-amazon.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
