<!--
	For rules that are on by default, see MIT.xml.

-->
<ruleset name="Massachusetts Institute of Technology (problematic)" default_off="expired, mismatched, self-signed">

	<!--	Direct rewrites:
				-->
	<target host="3down.mit.edu" />
	<target host="calendar.mit.edu" />
	<target host="counter.mit.edu" />
	<target host="cluedumps.mit.edu" />
	<target host="executive.mit.edu" />
	<target host="hacks.mit.edu" />
	<target host="libguides.mit.edu" />
	<target host="relate.mit.edu" />
	<!--	Self-signed	-->
	<target host="people.mit.edu" />
	<target host="webmail.mit.edu" />
	<target host="zscore.mit.edu" />

	<!--	Complications:
				-->
	<target host="techtime.mit.edu" />

		<!--	- 403 over https
			- 302s to www.csail.mit.edu/peoplesearch over http
										-->
		<exclusion pattern="^http://people\.mit\.edu/(?:$|\?)" />

			<!--	+ve:
					-->
			<test url="http://people.mit.edu/?f" />
			<test url="http://people.mit.edu/?o" />

		<exclusion pattern="^http://techtime\.mit\.edu/(?!$|\?)" />

			<!--	+ve:
					-->
			<test url="http://techtime.mit.edu/f" />
			<test url="http://techtime.mit.edu/o" />
			<test url="http://techtime.mit.edu/b" />
			<test url="http://techtime.mit.edu/a" />

			<!--	-ve:
					-->
			<test url="http://techtime.mit.edu/?f" />
			<test url="http://techtime.mit.edu/?o" />
			<test url="http://techtime.mit.edu/?b" />


	<securecookie host="^(?:3down|cluedumps|webmail)\.mit\.edu$" name=".+" />


	<rule from="^http://techtime\.mit\.edu/(?:$|\?.*)"
		to="https://calendar.mit.edu/techtime/index.shtml" />

	<rule from="^http:"
		to="https:" />

</ruleset>
