<!--
Disabled by https-everywhere-checker because:
Non-2xx HTTP code: http://offensive-security.com/ (200) => https://offensive-security.com/ (403)
-->
<ruleset name="Offensive-Security.com" default_off='failed ruleset test'>

	<target host="offensive-security.com" />
	<target host="*.offensive-security.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^forums\.offensive-security\.com$" name="^bb_sessionhash$" /-->

	<securecookie host="^\.offensive-security\.com$" name="^__utm\w$" />
	<securecookie host="^forums\.offensive-security\.com$" name=".+" />


	<rule from="^http://(forums\.|www\.)?offensive-security\.com/"
		to="https://$1offensive-security.com/" />

</ruleset>
