<!--
	Nonfunctional subdomains:

		- developer *

	* Github


	^: Handshake fails


	Fully covered subdomains:

		- (www.)?	(^ → www)
		- advent-hub
		- community
		- support


	Insecure cookies are set for these hosts:

		- advent-hub.okta.com
		- community.okta.com
		- support.okta.com
		- www.okta.com

-->
<ruleset name="Okta.com (partial)">

	<!--	Direct rewrites:
				-->
	<target host="advent-hub.okta.com" />
	<target host="community.okta.com" />
	<target host="support.okta.com" />
	<target host="www.okta.com" />

	<!--	Complications:
				-->
	<target host="okta.com" />


	<!--	Not secured by server:
					-->
	<!--ecurecookie host="^advent-hub\.okta\.com$" name="^(JSESSIONID|sid|t)$" /-->
	<!--ecurecookie host="^community\.okta\.com$" name="^(BIGipServer\w+-\d+-pool|JSESSIONID|jive\.login\.ts|jive\.security\.context)$" /-->
	<!--ecurecookie host="^support\.okta\.com$" name="^apex__\w+SessionId$" /-->
	<!--ecurecookie host="^www\.okta\.com$" name="^(ip2l|ret_okta_\w+_\w+)$" /-->

	<securecookie host="^(?:advent-hub|community|support|www)\.okta\.com$" name=".+" />


	<rule from="^http://okta\.com/"
		to="https://www.okta.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
