<!--
	Other Gumroad rulesets:

		- Gum.co.xml


	CDN buckets:

		- s3.amazonaws.com/gumroad/ | d1wzu4qct23er4.cloudfront.net


	Fully covered hosts:

		- (www.)?
		- api
		- help
		- static-[12]


	Insecure cookies are set for these domains and hosts:

		- gumroad.com
		- .gumroad.com
		- api.gumroad.com

-->
<ruleset name="Gumroad.com">

	<target host="gumroad.com" />
	<target host="api.gumroad.com" />
	<target host="help.gumroad.com" />
	<target host="static-1.gumroad.com" />
	<target host="static-2.gumroad.com" />
	<target host="www.gumroad.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.gumroad\.com$" name="^(__cfduid|cf_clearance)$" /-->
	<!--securecookie host="^(api\.)?gumroad\.com$" name="^ie_warning$" /-->

	<securecookie host="^(?:\.|api\.|www\.)?gumroad\.com$" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
