<!--
	Problematic subdomains:

		- ^		(times out)
		- world2012	(mismatched, CN: serving.portal.dmflex.com)


	Partially covered subdomains:

		- (www.)	(at least en/Pages/default.aspx redirects to CookieAuth.dll)

-->
<ruleset name="ITU (partial)">

	<target host="itu.int" />
	<target host="*.itu.int" />


	<securecookie host="^(?:erecruit|itunews)\.itu\.int$" name=".+" />


	<rule from="^http://(?:www\.)?itu\.int/(CookieAuth\.dll|favicon\.ico|lib/|net/)"
		to="https://www.itu.int/$1" />

	<rule from="^http://(erecruit|itunews)\.itu\.int/"
		to="https://$1.itu.int/" />

</ruleset>