<!--
	to.pbs.org is handled in Bit.ly_vanity_domains.xml.


	CDN buckets:

		- s3.amazonaws.com/newshour/photos/yyyy/mm/dd/
		- s3.amazonaws.com/pbs.merlin.cdn.prod/

		- d2nu96cf2r9spk.cloudfront.net

			- gchrome.cdn.pbs.org

		- d2rb2ymyzshpad.cloudfront.net

			- www-tc.pbs.org

		- d3i6fh83elv35t.cloudfront.net

			- newshour-tc.pbs.org

		- dnn506yrbagrg.cloudfront.net


	Nonfunctional domains:

		- pbs.org *
		- chrome.pbs.org
		- urs.pbs.org
		- www.pbs.org					(homepage redirects to http, other paths 403)
		- www-tc.pbs.org(/cove-media|/images|/video)	(400, mismatched, CN: *.hs.llnwd.net)
		- (www.)pbskids.org *

	* Times out

-->
<ruleset name="Public Broadcasting Service (partial)" platform="mixedcontent">

	<target host="newshour-tc.pbs.org" />
	<target host="www-tc.pbs.org" />
	<target host="gchrome.cdn.pbs.org" />
	<target host="shoppbs.org" />
	<target host="www.shoppbs.org" />


	<securecookie host="^www\.shoppbs\.org$" name=".+" />


	<rule from="^http://newshour-tc\.pbs\.org/"
		to="https://d3i6fh83elv35t.cloudfront.net/" />

	<!--	This broke Washington Week videos, like http://www.pbs.org/weta/washingtonweek/watch/watch%20the%20show/34039

		Presumably caused by livepassdl.conviva.com/crossdomain.xml forbidding https. (FUU!)

		https://trac.torproject.org/projects/tor/ticket/7180

	<rule from="^http://video\.pbs\.org/"
		to="https://video.pbs.org/" /-->

	<rule from="^http://www-tc\.pbs\.org/s3/pbs\.(?=merlin\.cdn\.prod/|pbsorg-prod\.mediafiles/)"
		to="https://s3.amazonaws.com/pbs." />

	<rule from="^http://gchrome\.cdn\.pbs\.org/"
		to="https://d2nu96cf2r9spk.cloudfront.net/" />

	<rule from="^http://(www\.)?shoppbs\.org/"
		to="https://$1shoppbs.org/" />

</ruleset>
