<!--
	University of Toronto

	For problematic rules, see University_of_Toronto-problematic.xml.


	Nonfunctional subdomains:

		- adcomms			(shows default H-Sphere page; mismatched, CN: *.hspheredns.com)
		- (www.)adfg
		- www.adm
		- (www.)alumni			(shows default H-Sphere page; mismatched, CN: *.hspheredns.com)
		- my.alumni
		- apply
		- www.arts			(times out)
		- m.bluebook			(shows blank page; expired 2012-01-27, self-signed)
		- boundless			(shows default H-Sphere page; mismatched, CN: *.hspheredns.com)
		- (www.)cpah
		- cs				(Refused)
		- compbio.cs			(Refused)
		- www.ctep			(shows oise; mismatched, CN: *.oise.utoronto.ca)
		- (www.)discover		(shows lamp2; mismatched, CN: lamp2.utoronto.ca)
		- (www.)food-beverage		(shows lamp; mismatched, CN: lamp.utoronto.ca)
		- (www.)give			(shows default H-Sphere page; mismatched, CN: *.hspheredns.com)
		- www.governingcouncil
		- www.gradschool		(times out)
		- (www.)graduationandbeyond	(shows lamp2; mismatched, CN: lamp2.utoronto.ca)
		- www.hrandequity		(Dropped)
		- caf.icicle			(shows support.icicle; mismatched, CN: support.icicle.utoronto.ca)
		- staff.its			(shows lamp; mismatched, CN: lamp.utoronto.ca)
		- www.its			(times out)
		- (www.)learn			(shows RHEL test page, expired 2012-10-11)
		- english.learn			(shows RHEL test page, expired 2012-10-11)

		- library subdomains:

			- (www.)		(http & https data differ)
			- content		(causes mixed content for myaccount.library)
			- onesearch
			- resource		(http & https data differ)
			- search		(record_too_long)
			- searchdev		(record_too_long)
			- toroprod
			- (www.)utsc		(record_too_long)
			- webcat		(times out)

		- (www.)life			(shows lamp2; mismatched, CN: lamp2.utoronto.ca)
		- (www.)magazine		(shows default H-Sphere page; mismatched, CN: *.hspheredns.com)
		- my				(redirects to www; mismatched, CN: www.utoronto.ca)
		- namethenewrosi		(record_too_long)
		- (www.)ngsis			(shows lamp; mismatched, CN: lamp.utoronto.ca)
		- www.provost			(times out)
		- (www.)research		(shows lamp; mismatched, CN: lamp.utoronto.ca)
		- (www.)start			(shows lamp2; mismatched, CN: lamp2.utoronto.ca)
		- (www.)students		(shows lamp2; mismatched, CN: lamp2.utoronto.ca)
		- (www.)systemstatus		(shows lampstatus)
		- (www.)ueat			(shows lamp; mismatched, CN: lamp.utoronto.ca)
		- labstats.utm			(times out)
		- www.viceprovoststudents	(times out)
		- (www.)wireless		(500; mismatched, CN: connect.utoronto.ca)


	Problematic subdomains:

		- inbox.alumni		(interrupted)
		- www.donate		(cert only matches ^donate)
		- www.erin		(mismatched, CN: *.utm.utoronto.ca)
		- family		(cert only matches www.family)
		- www.family		(works, expired 2011-07-23, self-signed)
		- fnh			(cert only matches www.fnh)
		- www.fnh		(works; expired 2011-12-23, self-signed)
		- (www.)lampstatus	(works, self-signed)
		- main.library		(works; expired 2008-07-21, self-signed)
		- map			(Expired)
		- (www.)sa		(record_too_long)
		- www.systemstatus	(StatusPage)
		- utcc			(Mismatched, CN: cns.utoronto.ca)
		- www.library.utm	(depth mismatched)
		- roundcube.utsc	(works; mismatched, CN: webmail.utsc.utoronto.ca)
		- squirrelmail.utsc	(mismatched, CN: webmail.utsc.utoronto.ca)
		- www.vpstudentsblog	(works; expired 2012-08-21, mismatched, CN: *.sa.utoronto.ca)


	Partially covered subdomains:

		- (www.) *
		- answers.library	(works; mismatched, CN: *.libanswers.com)
		- guides.library	(redirects to http/404; mismatched, CN: *.libguides.com)
		- (www.)news *
		- campusroomfinder.studentlife *

	* Some pages redirect to http


	Fully covered subdomains:

		- 2learn
		- alert
		- inbox.alumni		(→ mail.google.com)
		- (www.)bluebook
		- (www.)careers
		- www.employers.careers
		- (www.)cns
		- connect
		- www.cs
		- (www.)donate		(www → ^)
		- www.erin		(→ www.utm)
		- (www.)events
		- support.icicle
		- main.its
		- (www.)lamp
		- (www.)lamp2

		- library subdomains:

			- focus
			- link
			- login
			- myaccount
			- payfines
			- tspace

		- m.lms
		- (www.)oise
		- cus.oise
		- (www.)portal
		- www.rosi
		- sws.rosi
		- (www.)sa		(→ www.studentlife)
		- (www.)studentlife
		- blogs.studentlife
		- (www.)ulife
		- utcc			(→ cns)
		- (www.)utorid
		- (www.)library.utm	(www → ^)
		- www.utm

		- utsc subdomains:

			- (www.)
			- ctl
			- intranet
			- joomla
			- squirrelmail	(→ webmail.utsc)
			- webapps
			- webmail

		- voting
		- weblogin
		- webmail


	Partially covered subdomains:

		- answers.library	(→ libanswers.com)
		- guides.library	(→ libguides.com)


	These altnames don't exist:

		- www.main.its.utoronto.ca
		- www.webmail.utoronto.ca

-->
<ruleset name="UToronto.ca (partial)">

	<target host="utoronto.ca" />
	<target host="*.utoronto.ca" />
		<exclusion pattern="^http://(?:www\.)?utoronto\.ca/(?!favicon\.ico|__shared/)" />
		<exclusion pattern="^http://(?:www\.)?news\.utoronto\.ca/(?!sites/)" />
		<exclusion pattern="^http://campusroomfinder\.studentlife\.utoronto\.ca/(?![cC]ontent/|Login|[sS]cripts/)" />


	<securecookie host="^(?!\.library\.|campusroomfinder\.studentlife\.).+\.utoronto\.ca$" name=".+" />
	<!--
		Tracking cookies:
					-->
	<securecookie host="^\.library\.utoronto\.ca$" name="^__utm\w$" />


	<rule from="^http://((?:2learn|alert|(?:www\.)?(?:bluebook|careers|cns|events|lamp2?|news|oise|portal|studentlife|ulife|utorid|utsc)|connect|www\.employers\.careers|www\.cs|support\.icicle|main\.its|(?:focus|link|login|myaccount|payfines|tspace)\.library|m\.lms|cus\.oise|(?:sws|www)\.rosi|(?:blogs|campusroomfinder)\.studentlife|www\.utm|(?:ctl|intranet|joomla|webapps|webmail)\.utsc|voting|weblogin|webmail|www)\.)?utoronto\.ca/"
		to="https://$1utoronto.ca/" />

	<rule from="^http://inbox\.alumni\.utoronto\.ca/(?:.*)"
		to="https://mail.google.com/a/alumni.utoronto.ca" />

	<rule from="^http://(?:www\.)?donate\.utoronto\.ca/"
		to="https://donate.utoronto.ca/" />

	<rule from="^http://www\.erin\.utoronto\.ca/"
		to="https://www.utm.utoronto.ca/" />

	<rule from="^http://(answer|guide)s\.library\.utoronto\.ca/(css\d*|data|js)/"
		to="https://lib$1s.com/$2/" />

	<rule from="^http://(?:www\.)?sa\.utoronto\.ca/"
		to="https://www.studentlife.utoronto.ca/" />

	<rule from="^http://utcc\.utoronto\.ca/"
		to="https://cns.utoronto.ca/" />

	<rule from="^http://(?:www\.)?library\.utm\.utoronto\.ca/"
		to="https://library.utm.utoronto.ca/" />

	<rule from="^http://squirrelmail\.utsc\.utoronto\.ca/"
		to="https://webmail.utsc.utoronto.ca/" />

</ruleset>
