University-of-California.xml

<!--
	Nonfunctional domains:

		- ftp.ics.uci.edu

		- ucsb.edu subdomains:

			- news.wepawet.cs	(dropped)
			- www.ia		(reset)
			- www.presidency	(mismatched, CN: secure.lsit.ucsb.edu)


	Problematic domains:

		- cs.ucsb.edu *

	* Cert only matches www.cs.ucsb.edu


	Fully covered domains:

		- ucsb.edu subdomains:

			- wepawet.cs
			- apps.education
			- secure.lsit
			- analytics.oist

-->
<ruleset name="University of California (partial)">

	<target host="*.uci.edu" />
	<target host="*.ucsb.edu" />
		<exclusion pattern="^http://extension\.ucsb\.edu/(?!css/|images/|portal/)" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^analytics\.oist\.ucsb\.edu$" name="^TRACKID$" /-->

	<securecookie host="^(?:.*\.)?ics\.uci\.edu$" name=".+" />
	<securecookie host="^(?:www\.admissions|analytics\.oist)\.ucsb\.edu$" name=".+" />
	<securecookie host="^wepawet\.cs\.ucsb\.edu$" name=".+" />


	<rule from="^http://(archive\.|www\.)?ics\.uci\.edu/"
		to="https://$1ics.uci.edu/" />

	<rule from="^http://(?:www\.)?admissions\.ucsb\.edu/"
		to="https://www.admissions.ucsb.edu/" />

	<rule from="^http://(wepawet\.cs|www\.cs|apps\.education|extension|ftp|secure\.lsit|analytics\.oist)\.ucsb\.edu/"
		to="https://$1.ucsb.edu/" />

	<rule from="^http://login\.proxy\.library\.ucsb\.edu(?::\d+)?/"
		to="https://login.proxy.library.ucsb.edu/" />

</ruleset>