<!--
	CDN buckets:

		- s3.amazonaws.com/newshour/photos/yyyy/mm/dd/
		- s3.amazonaws.com/pbs.merlin.cdn.prod/

		- d2nu96cf2r9spk.cloudfront.net

			- gchrome.cdn.pbs.org

		- d2rb2ymyzshpad.cloudfront.net

			- www-tc.pbs.org

		- dnn506yrbagrg.cloudfront.net


	Nonfunctional domains:

		- pbs.org *
		- chrome.pbs.org
		- urs.pbs.org
		- www.pbs.org					(homepage redirects to http, other paths 403)
		- www-tc.pbs.org(/cove-media|/images|/video)	(400, mismatched, CN: *.hs.llnwd.net)
		- (www.)pbskids.org *

	* Times out

-->
<ruleset name="Public Broadcasting Service (partial)" platform="mixedcontent">

	<target host="video.pbs.org" />
	<target host="www-tc.pbs.org" />
	<target host="shoppbs.org" />
	<target host="www.shoppbs.org" />


	<securecookie host="^www\.shoppbs\.org$" name=".+" />


	<!--	This broke Washington Week videos, like http://www.pbs.org/weta/washingtonweek/watch/watch%20the%20show/34039

		Presumably caused by livepassdl.conviva.com/crossdomain.xml forbidding https. (FUU!)

		https://trac.torproject.org/projects/tor/ticket/7180 

	<rule from="^http://video\.pbs\.org/"
		to="https://video.pbs.org/" /-->

	<rule from="^http://www-tc\.pbs\.org/s3/pbs\.(merlin\.cdn\.prod|pbsorg-prod\.mediafiles)/"
		to="https://s3.amazonaws.com/pbs.$1/" />

	<rule from="^https?://gchrome\.cdn\.pbs\.org/"
		to="https://d2nu96cf2r9spk.cloudfront.net/" />

	<rule from="^http://(www\.)?shoppbs\.org/"
		to="https://$1shoppbs.org/" />

</ruleset>
