<!--
	For other Neustar coverage, see NeuStar.xml.


	CDN buckets:

		- d37f3s04rhujtb.cloudfront.net

			- content.aggregateknowledge.com


	Nonfunctional aggregateknowledge.com subdomains:

		- cust
		- demo		(times out)
		- docs
		- mail
		- sjc[12]


	Problematic aggregateknowledge.com subdomains:

		- ^ *
		- creative *
		- www-stage *

	* Mismatched


	images: Drop


	Insecure cookies are set for these domains:

		- .aggregateknowledge.com

-->
<ruleset name="Aggregate Knowledge.com">

	<target host="content.aggregateknowledge.com" />
	<target host="dashboard.aggregateknowledge.com" />
	<target host="data.aggregateknowledge.com" />
	<target host="ui.aggregateknowledge.com" />
	<target host="www.aggregateknowledge.com" />

	<!--	Complications:
				-->
	<target host="aggregateknowledge.com" />
	<target host="creative.aggregateknowledge.com" />
	<target host="www-stage.aggregateknowledge.com" />

		<!--	$ redirects to www.404.html, so appease fetch tester.

			Obviously this makes us stand out more, but
			preventing @jsha from disabling the ruleset is
			more important than blending in.
									-->
		<exclusion pattern="^http://data\.aggregateknowledge\.com/$" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.aggregateknowledge\.com$" name="(?:u|uuid)$" /-->

	<securecookie host="^\.aggregateknowledge\.com$" name=".+" />


	<!--	Redirect keeps path and args,
		but not forward slash:
					-->
	<rule from="^http://aggregateknowledge\.com/+"
		to="https://www.aggregateknowledge.com/" />

		<test url="http://aggregateknowledge.com//" />

	<rule from="^http://(?:creative|www-stage)\.aggregateknowledge\.com/"
		to="https://www.aggregateknowledge.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
