diff --git a/https-everywhere-checker b/https-everywhere-checker
index 6e609cadb874..cd7128999df7 160000
--- a/https-everywhere-checker
+++ b/https-everywhere-checker
@@ -1 +1 @@
-Subproject commit 6e609cadb874c4b746165c712033bc26399c7e83
+Subproject commit cd7128999df7147bb27e2845f0f1d39a8a02b4b8
diff --git a/install-dev-dependencies.sh b/install-dev-dependencies.sh
index b3ee1759f839..c1aa27e84b43 100755
--- a/install-dev-dependencies.sh
+++ b/install-dev-dependencies.sh
@@ -4,7 +4,7 @@
 set -o errexit -o xtrace
 if type apt-get >/dev/null ; then
   sudo apt-get install libxml2-dev libxml2-utils libxslt1-dev python-dev \
-    firefox chromium-browser zip sqlite3 python-pip
+    firefox chromium-browser zip sqlite3 python-pip libcurl4-openssl-dev
 elif type brew >/dev/null ; then
   brew install python libxml2 gnu-sed
   if ! echo $PATH | grep -ql /usr/local/bin ; then
@@ -12,6 +12,9 @@ elif type brew >/dev/null ; then
   fi
 fi
 pip install --user --no-allow-insecure --no-allow-external -r requirements.txt
+cd https-everywhere-checker
+pip install --user -r requirements.txt
+cd -
 # Get the addon SDK submodule
 git submodule init
 git submodule update
diff --git a/src/chrome/content/rules/Royal-Navy.xml b/src/chrome/content/rules/Royal-Navy.xml
index bbdeb6ceb84c..16852658b5f2 100644
--- a/src/chrome/content/rules/Royal-Navy.xml
+++ b/src/chrome/content/rules/Royal-Navy.xml
@@ -2,13 +2,18 @@
 	c69011.r11.cf3.rackcdn.com
 
 -->
-<ruleset name="Royal Navy (partial)" platform="mixedcontent">
+<ruleset name="Royal Navy (partial)" platform="mixedcontent" default_off="ruleset coverage test fails">
 
 	<target host="navynews.co.uk" />
 	<target host="www.navynews.co.uk" />
 	<target host="royalnavy.mod.uk" />
 	<target host="www.royalnavy.mod.uk" />
 
+	<test url="http://www.royalnavy.mod.uk/images/" />
+	<test url="http://www.royalnavy.mod.uk/library/" />
+	<test url="http://www.royalnavy.mod.uk/login/" />
+	<test url="http://www.royalnavy.mod.uk/profile/" />
+	<test url="http://www.royalnavy.mod.uk/ScriptCombiner.axd" />
 
 	<securecookie host="^(?:www\.)?navynews\.co\.uk$" name=".*" />
 
diff --git a/src/chrome/content/rules/Shaklee.xml b/src/chrome/content/rules/Shaklee.xml
index d6ec73f16bf5..41743aa54f53 100644
--- a/src/chrome/content/rules/Shaklee.xml
+++ b/src/chrome/content/rules/Shaklee.xml
@@ -17,14 +17,17 @@
 	* Some pages redirect to http
 
 -->
-<ruleset name="Shaklee (partial)">
+<ruleset name="Shaklee (partial)" default_off="Needs test URLs">
 
 	<target host="myshaklee.com" />
-	<target host="*.myshaklee.com" />
+	<target host="www.myshaklee.com" />
+	<target host="member.myshaklee.com" />
 		<exclusion pattern="^http://member\.myshaklee\.com/\w\w/\w\w/article/" />
 	<target host="shaklee.com" />
-	<target host="*.shaklee.com" />
-		<exclusion pattern="^htpp;//shaklee\.com/(?:/\w\w/\w\w/)?(?:$|\?)" />
+	<target host="content.shaklee.com" />
+	<target host="images.shaklee.com" />
+	<target host="www.shaklee.com" />
+		<exclusion pattern="^http://shaklee\.com/(?:/\w\w/\w\w/)?(?:$|\?)" />
 
 
 	<!--	Tracking cookies:
@@ -37,10 +40,7 @@
 	<rule from="^http://(?:www\.)?myshaklee\.com/"
 		to="https://www.myshaklee.com/" />
 
-	<rule from="^http://member\.myshaklee\.com/"
-		to="https://member.myshaklee.com/" />
+	<rule from="^http:"
+		to="https:" />
 
-	<rule from="^http://(content\.|images\.|www\.)?shaklee\.com/"
-		to="https://$1shaklee.com/" />
-
-</ruleset>
\ No newline at end of file
+</ruleset>
diff --git a/src/chrome/content/rules/Student_Benefits.ca.xml b/src/chrome/content/rules/Student_Benefits.ca.xml
index 60a812f6741c..375042b39d47 100644
--- a/src/chrome/content/rules/Student_Benefits.ca.xml
+++ b/src/chrome/content/rules/Student_Benefits.ca.xml
@@ -9,7 +9,7 @@
 <ruleset name="Student Benefits.ca">
 
 	<target host="studentbenefits.ca" />
-	<target host="*.studentbenefits.ca" />
+	<target host="www.studentbenefits.ca" />
 
 
 	<securecookie host="^\.studentbenefits\.ca$" name=".+" />
diff --git a/src/chrome/content/rules/TDC.dk.xml b/src/chrome/content/rules/TDC.dk.xml
index f92fc9453777..bbbd58c73908 100644
--- a/src/chrome/content/rules/TDC.dk.xml
+++ b/src/chrome/content/rules/TDC.dk.xml
@@ -50,11 +50,21 @@
 <ruleset name="TDC.dk (partial)">
 
 	<target host="tdc.dk" />
-	<target host="*.tdc.dk" />
+	<target host="erhverv.tdc.dk" />
+	<target host="fly.tdc.dk" />
+	<target host="kundeservice.tdc.dk" />
+	<target host="mail.tdc.dk" />
+	<target host="om.tdc.dk" />
+	<target host="privat.tdc.dk" />
+	<target host="privatalarm.tdc.dk" />
+	<target host="selfcare.tdc.dk" />
+	<target host="shop.tdc.dk" />
+	<target host="wholesale.tdc.dk" />
+	<target host="www.tdc.dk" />
+	<target host="forum.tdc.dk" />
 	<target host="tdc-wholesale.com" />
 	<target host="www.tdc-wholesale.com" />
 
-
 	<!--	Set by shop:
 				-->
 	<securecookie host="^\.tdc\.dk$" name="^salg_dwbc$" />
@@ -65,16 +75,16 @@
 	<securecookie host="^(?:privatalarm|shop)\.tdc\.dk$" name=".+" />
 
 
-	<rule from="^http://((?:erhverv|fly|kundeservice|mail|om|privat|privatalarm|selfcare|shop|wholesale|www)\.)?tdc\.dk/"
-		to="https://$1tdc.dk/" />
-
-	<rule from="^http://forum\.tdc\.tk/"
+	<rule from="^http://forum\.tdc\.dk/"
 		to="https://tdc.i.lithium.com/" />
 
 	<!--	- //+ redirects to http://$
 		- \w+ 404s
 				-->
-	<rule from="^http://(?:www\.)?tdc-wholesale\.com/(?:[?.][?./]*)?"
+	<rule from="^http://(?:www\.)?tdc-wholesale\.com/"
 		to="https://wholesale.tdc.dk/nordic/" />
 
+	<rule from="^http:"
+		to="https:" />
+
 </ruleset>
diff --git a/src/chrome/content/rules/ThePermitStore.com.xml b/src/chrome/content/rules/ThePermitStore.com.xml
index 8477702b7229..e473d9cb4d14 100644
--- a/src/chrome/content/rules/ThePermitStore.com.xml
+++ b/src/chrome/content/rules/ThePermitStore.com.xml
@@ -1,9 +1,10 @@
 <ruleset name="ThePermitStore.com">
 	<target host="thepermitstore.com" />
 	<target host="*.thepermitstore.com" />
+	<test url="http://www.thepermitstore.com" />
 
 	<securecookie host="^(?:[a-zA-Z0-9\-]*\.)?thepermitstore\.com$" name=".+" />
 
-	<rule from="^http://thepermitstore\.com/" to="https://thepermitstore.com/" />
-	<rule from="^http://([a-zA-Z0-9\-]+)\.thepermitstore\.com/" to="https://$1.thepermitstore.com/" />
+	<rule from="^http:"
+		to="https:" />
 </ruleset>
diff --git a/src/chrome/content/rules/University-of-Southern-California.xml b/src/chrome/content/rules/University-of-Southern-California.xml
index a97581426850..21bc4e797d4b 100644
--- a/src/chrome/content/rules/University-of-Southern-California.xml
+++ b/src/chrome/content/rules/University-of-Southern-California.xml
@@ -21,12 +21,15 @@
 <ruleset name="University of Southern California (partial)">
 
 	<target host="usc.edu" />
-	<target host="*.usc.edu" />
-
+	<target host="dornsifecms.usc.edu" />
+	<target host="dornsife.usc.edu" />
+	<target host="www.dornsife.usc.edu" />
+	<target host="news.usc.edu" />
+	<target host="vsoeapp1.vsoe.usc.edu" />
+	<target host="www.usc.edu" />
 
 	<securecookie host="^.*\.usc\.edu$" name=".*" />
 
-
 	<!--	- !www doesn't work over https
 		- Redirects as so	-->
 	<rule from="^http://(?:www\.)?usc\.edu/"
@@ -38,8 +41,7 @@
 	<rule from="^http://(?:www\.)?dornsife\.usc\.edu/"
 		to="https://dornsife.usc.edu/" />
 
-	<!--	www.news doesn't exist.	-->
-	<rule from="^http://(dornsifecms|news|vsoeapp1\.vsoe)\.usc\.edu/"
-		to="https://$1.usc.edu/" />
+	<rule from="^http:"
+		to="https:" />
 
 </ruleset>
diff --git a/src/chrome/content/rules/Van_Lanschot.com.xml b/src/chrome/content/rules/Van_Lanschot.com.xml
index 07075e974d57..1ccd2228109c 100644
--- a/src/chrome/content/rules/Van_Lanschot.com.xml
+++ b/src/chrome/content/rules/Van_Lanschot.com.xml
@@ -10,7 +10,6 @@
 -->
 <ruleset name="Van Lanschot.com">
 
-	<target host="vanlanschot.com" />
 	<target host="www.vanlanschot.com" />
 
 
@@ -24,8 +23,7 @@
 
 	<securecookie host="^(?:www\.)?vanlanschot\.com$" name=".+" />
 
-
-	<rule from="^http://(?:www\.)?vanlanschot\.com/"
-		to="https://www.vanlanschot.com/" />
+	<rule from="^http:"
+		to="https:" />
 
 </ruleset>
diff --git a/src/chrome/content/rules/WHATWG.org.xml b/src/chrome/content/rules/WHATWG.org.xml
index e17e4195411a..bb421c3f8ac0 100644
--- a/src/chrome/content/rules/WHATWG.org.xml
+++ b/src/chrome/content/rules/WHATWG.org.xml
@@ -30,10 +30,21 @@
 <ruleset name="WHATWG.org">
 
 	<target host="whatwg.org" />
-	<target host="*.whatwg.org" />
-
-
-	<rule from="^http://((?:developers|html-differences|images|resources|\w+\.spec|wiki|www)\.)?whatwg\.org/"
-		to="https://$1whatwg.org/" />
+	<target host="developers.whatwg.org" />
+	<target host="html-differences.whatwg.org" />
+	<target host="images.whatwg.org" />
+	<target host="resources.whatwg.org" />
+	<target host="*.spec.whatwg.org" />
+	<target host="wiki.whatwg.org" />
+	<target host="www.whatwg.org" />
+
+	<test url="http://html.spec.whatwg.org/" />
+	<test url="http://fetch.spec.whatwg.org/" />
+
+	<rule from="^http://whatwg\.org/"
+		to="https://whatwg.org/" />
+
+	<rule from="^http:"
+		to="https:" />
 
 </ruleset>
diff --git a/test-ruleset-coverage.sh b/test-ruleset-coverage.sh
index 671200636187..ac8bbe43b6ab 100755
--- a/test-ruleset-coverage.sh
+++ b/test-ruleset-coverage.sh
@@ -8,10 +8,10 @@ TMP=`mktemp`
 trap 'rm "$TMP"' EXIT
 # Git log gives us all changed files. Pipe that through ls to eliminate files
 # that have been deleted.
-if ! git log --name-only --date=local --since=2015-02-05 --pretty=format: \
+if ! git log --name-only --date=local --since="2015-02-11 20:00" --pretty=format: \
       src/chrome/content/rules/ | sort -u | \
       xargs ls 2>/dev/null | xargs python2.7 https-everywhere-checker/src/https_everywhere_checker/check_rules.py \
-      https-everywhere-checker/checker.config.sample ; then
+      https-everywhere-checker/coverage.checker.config ; then
   echo "Ruleset test coverage was insufficient. Please add <test url=...> tags " \
        "to ruleset with additional HTTP URLs to test rewriting and fetching."
   exit 1
diff --git a/utils/relaxng.xml b/utils/relaxng.xml
index b07111c48103..7d7a477cb280 100644
--- a/utils/relaxng.xml
+++ b/utils/relaxng.xml
@@ -55,16 +55,17 @@
             <!-- The from attribute of a rule must start with a caret.
                  It also must contain two slashes (separating the protocol from
                  the hostname), and at least one other slash (terminating the
-                 hostname, and possible beginning a path). -->
-            <param name="pattern">\^.*//.*/.*</param>
+                 hostname, and possible beginning a path). Alternately it can be
+                 the literal string "^http:". -->
+            <param name="pattern">(\^.*//.*/.*|\^http:)</param>
           </data>
         </attribute>
         <attribute name="to">
           <data type="string">
             <!-- The to attribute of a rule must not contain spaces or
                  backslashes. It also must contain at least one slash after the
-                 hostname. -->
-            <param name="pattern">https?://[^ \\]*/[^ \\]*</param>
+                 hostname. Alternately it can be the literal string "https:"-->
+            <param name="pattern">(https?://[^ \\]*/[^ \\]*|https:)</param>
           </data>
         </attribute>
         <optional>