<!--
	United Airlines


	Nonfunctional hosts in *united.com:

		- hotels *

	* Redirects to http


	Fully covered hosts in *united.com:

		- (www.)?
		- cruises
		- hub
		- mobile
		- pss


	travel: Dropped over http & https


	Insecure cookies are set for these hosts:

		- .united.com
		- cruises.united.com
		- .cruises.united.com
		- hub.united.com
		- mobile.united.com
		- www.united.com


	Mixed content:

		- Image on www from $self *

	* Secured by us

-->
<ruleset name="United.com (partial)">

	<!--	Direct rewrites:
				-->
  <target host="united.com" />
	<target host="cruises.united.com" />
	<target host="hub.united.com" />
	<target host="mobile.united.com" />
  <target host="pss.united.com" />
  <target host="www.united.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.united\.com$" name="^(1stSID|ChaseICLastPage|IP|TLTSID|TLTUID|WB03|akaau|cocom|culture|dnn|v1st)$" /-->
	<!--securecookie host="^cruises\.united\.com$" name="^ASPSESSIONID[A-Z]{8}$" /-->
	<!--securecookie host="^\.cruises\.united\.com$" name="^WD[UV]ID$" /-->
	<!--securecookie host="^hub\.united\.com$" name="^hub lb$" /-->
	<!--securecookie host="^mobile\.united\.com$" name="^(ASP\.NET_SessionId|AspxAutoDetectCookieSupport)$" /-->
	<!--securecookie host="^www\.united\.com$" name="^(VanityURL|akaau)$" /-->

	<securecookie host="^\.united\.com$" name="^v1st$" />
	<securecookie host="^(?:\.?cruises|hub|mobile|www)\.united\.com$" name=".+" />


	<rule from="^http:"
		to="https:" />
</ruleset>
