From a1b45417538af97f8c1cc117d7155257c8666920 Mon Sep 17 00:00:00 2001
From: Jacob Hoffman-Andrews <github@hoffman-andrews.com>
Date: Thu, 18 Jun 2015 18:04:14 -0700
Subject: [PATCH 01/58] Disable rules that failed automated ruleset test.

---
 src/chrome/content/rules/0x539.se.xml         |  8 +++++-
 src/chrome/content/rules/123-reg.xml          |  8 +++++-
 src/chrome/content/rules/1WT.eu.xml           |  9 ++++++-
 src/chrome/content/rules/256.com.xml          |  7 ++++-
 src/chrome/content/rules/2PipFixed.xml        |  6 ++++-
 src/chrome/content/rules/48months.ie.xml      |  7 ++++-
 src/chrome/content/rules/4RunnerForex.com.xml |  8 +++++-
 src/chrome/content/rules/500px.com.xml        |  6 ++++-
 src/chrome/content/rules/500px.org.xml        |  6 ++++-
 src/chrome/content/rules/6Scan.com.xml        |  6 ++++-
 src/chrome/content/rules/80s_Purple.com.xml   |  6 ++++-
 src/chrome/content/rules/A.fsdn.com.xml       |  6 ++++-
 .../content/rules/A1-Telekom-Austria.xml      |  6 ++++-
 src/chrome/content/rules/A1A_Fast_Cash.xml    |  8 +++++-
 .../content/rules/ADP_Retirement_Services.xml |  8 +++++-
 src/chrome/content/rules/ALDI.xml             |  7 ++++-
 src/chrome/content/rules/AS112.net.xml        |  8 +++++-
 src/chrome/content/rules/ATBank.xml           |  9 ++++++-
 src/chrome/content/rules/AXA.xml              |  6 ++++-
 .../content/rules/A_Bigger_Society.com.xml    |  6 ++++-
 src/chrome/content/rules/AccesstoJustice.xml  |  8 +++++-
 src/chrome/content/rules/Accuen.xml           |  6 ++++-
 src/chrome/content/rules/Actel.com.xml        |  9 ++++++-
 .../content/rules/Action-Auto-Wreckers.xml    |  9 ++++++-
 src/chrome/content/rules/Active_Melody.xml    |  8 +++++-
 .../content/rules/Acxiom-online.com.xml       |  6 ++++-
 src/chrome/content/rules/Adap.TV.xml          |  6 ++++-
 .../content/rules/Adaptive_Computing.xml      |  9 ++++++-
 src/chrome/content/rules/Addictech.xml        |  9 ++++++-
 src/chrome/content/rules/Addison_Lee.xml      |  8 +++++-
 src/chrome/content/rules/Adnet.xml            |  6 ++++-
 src/chrome/content/rules/Adobe.xml            |  6 ++++-
 src/chrome/content/rules/AeXp-static.com.xml  |  7 ++++-
 src/chrome/content/rules/Aereo.com.xml        |  6 ++++-
 .../content/rules/Aftonbladet-CDN.se.xml      |  7 ++++-
 src/chrome/content/rules/Aftonbladet.xml      |  7 ++++-
 src/chrome/content/rules/Afx.ms.xml           |  7 ++++-
 src/chrome/content/rules/AgKn.com.xml         |  6 ++++-
 src/chrome/content/rules/Agora_Voting.com.xml |  6 ++++-
 .../content/rules/Alfa-Media-Partner.xml      |  6 ++++-
 src/chrome/content/rules/Alibaba.xml          |  6 ++++-
 src/chrome/content/rules/Alipay.com.xml       | 11 +++++++-
 src/chrome/content/rules/AllThingsD.xml       |  7 ++++-
 src/chrome/content/rules/Allizom.org.xml      |  6 ++++-
 src/chrome/content/rules/Ally_Financial.xml   |  6 ++++-
 .../content/rules/Alternatif_Bilisim.org.xml  |  6 ++++-
 .../content/rules/Alternativeto.net.xml       |  8 +++++-
 src/chrome/content/rules/AmazonAWS.xml        |  6 ++++-
 .../rules/American-Chemical-Society.xml       |  6 ++++-
 src/chrome/content/rules/AmericanExpress.xml  |  6 ++++-
 .../content/rules/Amnesty-International.xml   |  6 ++++-
 src/chrome/content/rules/Anonbox.net.xml      |  8 +++++-
 src/chrome/content/rules/Ansible.com.xml      |  6 ++++-
 .../content/rules/Appseccalifornia.org.xml    |  8 ++++--
 src/chrome/content/rules/Arachnys.xml         |  8 +++++-
 .../content/rules/Arte_do_Lar.com.br.xml      |  6 ++++-
 .../AustralianEducationInternational.xml      |  8 +++++-
 src/chrome/content/rules/Auto_VPS.net.xml     |  8 +++++-
 src/chrome/content/rules/Autobytel.com.xml    |  7 ++++-
 src/chrome/content/rules/Automatak.net.xml    |  9 ++++++-
 src/chrome/content/rules/Avropa.se.xml        |  9 ++++++-
 src/chrome/content/rules/Awe.sm.xml           |  6 ++++-
 src/chrome/content/rules/BTCZone.xml          |  9 ++++++-
 src/chrome/content/rules/BW.com.xml           |  8 +++++-
 src/chrome/content/rules/Backblaze.com.xml    |  8 +++++-
 src/chrome/content/rules/Baker.com.xml        |  9 ++++++-
 .../content/rules/Beacon_Initiative.xml       |  8 +++++-
 src/chrome/content/rules/Berkeley_LUG.com.xml |  7 ++++-
 src/chrome/content/rules/BerryReview.com.xml  |  6 ++++-
 src/chrome/content/rules/Betabeat.com.xml     |  6 ++++-
 src/chrome/content/rules/Biapy.fr.xml         |  6 ++++-
 src/chrome/content/rules/Bigjocker.com.xml    |  9 ++++++-
 src/chrome/content/rules/BioInfo.pl.xml       |  6 ++++-
 src/chrome/content/rules/BioInfoBank.com.xml  |  6 ++++-
 src/chrome/content/rules/BioMed-Central.xml   |  6 ++++-
 src/chrome/content/rules/Biotrim_Labs.com.xml |  8 +++++-
 src/chrome/content/rules/BitFon.pl.xml        |  7 ++++-
 src/chrome/content/rules/BitMEX.com.xml       |  8 +++++-
 src/chrome/content/rules/BitQuick.xml         |  7 ++++-
 src/chrome/content/rules/Bit_Stampede.com.xml |  7 ++++-
 src/chrome/content/rules/Bitnami.com.xml      |  6 ++++-
 src/chrome/content/rules/Blender.org.xml      |  8 +++++-
 src/chrome/content/rules/Blicko.com.xml       |  6 ++++-
 src/chrome/content/rules/Blockchain.info.xml  |  6 ++++-
 .../content/rules/Blockchainbdgpzk.onion.xml  |  6 ++++-
 src/chrome/content/rules/Blocket.com.xml      |  7 ++++-
 src/chrome/content/rules/Blocket.se.xml       |  7 ++++-
 src/chrome/content/rules/Blossom.in.xml       |  7 ++++-
 src/chrome/content/rules/Bob131.so.xml        |  8 +++++-
 src/chrome/content/rules/BoldChat.com.xml     |  7 ++++-
 src/chrome/content/rules/Bookacourse.xml      |  7 ++++-
 src/chrome/content/rules/BountyOSS.com.xml    |  9 ++++++-
 src/chrome/content/rules/Bourgeois.me.xml     |  8 +++++-
 .../content/rules/Braintreepayments.com.xml   |  6 ++++-
 src/chrome/content/rules/Brevado.xml          |  8 +++++-
 src/chrome/content/rules/Bridgeways.com.xml   |  8 +++++-
 src/chrome/content/rules/BrightTALK.com.xml   |  6 ++++-
 src/chrome/content/rules/Brightidea.xml       |  7 ++++-
 src/chrome/content/rules/Brilig.xml           |  6 ++++-
 src/chrome/content/rules/Broadcom.xml         |  6 ++++-
 src/chrome/content/rules/BtcTrade.com.xml     |  7 ++++-
 src/chrome/content/rules/BundanonTrust.xml    |  8 +++++-
 src/chrome/content/rules/Buttercoin.com.xml   | 15 ++++++++++-
 src/chrome/content/rules/BuyBoard.xml         |  8 +++++-
 src/chrome/content/rules/C-Base.xml           | 11 +++++++-
 src/chrome/content/rules/CDT.xml              |  7 ++++-
 src/chrome/content/rules/CERIT.cz.xml         |  6 ++++-
 src/chrome/content/rules/CERT-Polska.xml      |  6 ++++-
 src/chrome/content/rules/CMSWire.xml          |  9 ++++++-
 src/chrome/content/rules/CWSPOD.com.xml       |  6 ++++-
 src/chrome/content/rules/CXense.xml           |  7 ++++-
 src/chrome/content/rules/Cake_Central.com.xml |  6 ++++-
 src/chrome/content/rules/Car.com.xml          |  7 ++++-
 .../content/rules/Casper_og_Frank.dk.xml      |  6 ++++-
 src/chrome/content/rules/Cdnads.com.xml       |  6 ++++-
 src/chrome/content/rules/CertiVox.com.xml     |  6 ++++-
 .../rules/Chicken_Soup_for_the_Soul.xml       |  8 +++++-
 src/chrome/content/rules/Chromium.org.xml     |  6 ++++-
 src/chrome/content/rules/CineStar.xml         |  9 ++++++-
 src/chrome/content/rules/Cinfu.com.xml        |  6 ++++-
 src/chrome/content/rules/Cir.ca.xml           |  6 ++++-
 .../content/rules/Cirtex_Hosting.com.xml      |  9 ++++++-
 src/chrome/content/rules/CiteULike.xml        |  8 +++++-
 src/chrome/content/rules/Citi.com.xml         |  9 ++++++-
 src/chrome/content/rules/City-Link.xml        |  9 ++++++-
 .../content/rules/ClevelandClinic.org.xml     |  6 ++++-
 .../content/rules/Click_and_Pledge.com.xml    |  6 ++++-
 src/chrome/content/rules/Clickberry.xml       |  8 +++++-
 src/chrome/content/rules/Climate-Central.xml  |  7 ++++-
 src/chrome/content/rules/CloudFlare.xml       |  6 ++++-
 src/chrome/content/rules/Cloud_Proven.net.xml |  8 +++++-
 .../rules/Cloudsecurityalliance.org.xml       |  9 +++++--
 .../content/rules/Club_Red_Gaming.com.xml     |  6 ++++-
 src/chrome/content/rules/Cnchost.com.xml      |  7 ++++-
 src/chrome/content/rules/Codefund.io.xml      |  6 ++++-
 src/chrome/content/rules/Compete.org.xml      |  7 ++++-
 .../Conseil_National_du_Num\303\251rique.xml" |  6 ++++-
 .../rules/ControllerMAX.com-falsemixed.xml    |  6 ++++-
 .../content/rules/ControllerMAX.com.xml       |  7 ++++-
 src/chrome/content/rules/Coop.ch.xml          | 10 ++++++-
 src/chrome/content/rules/Costco.xml           |  7 ++++-
 .../content/rules/CourtListener.com.xml       |  9 ++++++-
 src/chrome/content/rules/Coveralls.io.xml     |  6 ++++-
 src/chrome/content/rules/CraveOnline.com.xml  |  6 ++++-
 src/chrome/content/rules/Crazy-Egg.xml        |  6 ++++-
 .../rules/Creativeskills.be-falsemixed.xml    |  6 ++++-
 .../content/rules/Creativeskills.be.xml       |  7 ++++-
 .../rules/CreditDisputeProgram.com.xml        |  8 +++++-
 src/chrome/content/rules/Crikey.xml           |  6 ++++-
 .../content/rules/CryptoCoinTalk.com.xml      |  6 ++++-
 src/chrome/content/rules/Cuusoo.xml           |  6 ++++-
 src/chrome/content/rules/DMflex.xml           |  6 ++++-
 src/chrome/content/rules/DNA_Serum.xml        |  8 +++++-
 src/chrome/content/rules/DR.com.tr.xml        |  9 ++++++-
 src/chrome/content/rules/DataDirect.com.xml   |  7 ++++-
 src/chrome/content/rules/Datatilsynet.xml     |  9 ++++++-
 src/chrome/content/rules/Datemas.de.xml       |  6 ++++-
 src/chrome/content/rules/Dealnews.com.xml     |  9 ++++++-
 src/chrome/content/rules/Debian.xml           |  9 ++++++-
 src/chrome/content/rules/Debuggify.net.xml    |  8 +++++-
 src/chrome/content/rules/Demandware.xml       |  7 ++++-
 .../content/rules/DemocracyInAction.xml       |  8 +++++-
 src/chrome/content/rules/Depot.BY.xml         |  9 ++++++-
 src/chrome/content/rules/Der_Keiler.com.xml   |  6 ++++-
 src/chrome/content/rules/Diasp.de.xml         |  8 +++++-
 src/chrome/content/rules/Dice.xml             |  6 ++++-
 .../content/rules/Digital-Future.it.xml       |  7 ++++-
 .../content/rules/Digital_News_Agency.com.xml |  6 ++++-
 .../rules/Digitaliseringsstyrelsen.xml        |  8 +++++-
 src/chrome/content/rules/Dirty.ru.xml         |  6 ++++-
 src/chrome/content/rules/Disconnect.me.xml    |  6 ++++-
 src/chrome/content/rules/Dizzcloud.com.xml    |  6 ++++-
 src/chrome/content/rules/Downloadster.xml     |  6 ++++-
 src/chrome/content/rules/Drivee.xml           |  8 +++++-
 src/chrome/content/rules/Drupal.xml           |  6 ++++-
 .../rules/Duke-Energy-Convention-Center.xml   |  6 ++++-
 src/chrome/content/rules/Dydx.io.xml          |  6 ++++-
 src/chrome/content/rules/E-food.gr.xml        |  8 ++++--
 src/chrome/content/rules/EFTPlus.asia.xml     |  6 ++++-
 src/chrome/content/rules/ENTP.xml             |  7 ++++-
 src/chrome/content/rules/EPrize.xml           |  8 +++++-
 src/chrome/content/rules/EchoEnabled.xml      |  8 +++++-
 src/chrome/content/rules/Echoplex.us.xml      |  8 +++++-
 src/chrome/content/rules/Eclipse.xml          |  6 ++++-
 src/chrome/content/rules/EgoPay.com.xml       |  6 ++++-
 src/chrome/content/rules/Elsevier.xml         |  6 ++++-
 .../content/rules/Elsevier_Health.com.xml     |  8 +++++-
 src/chrome/content/rules/Encosia.xml          | 10 ++++++-
 .../content/rules/Encrypt_Everything.ca.xml   |  9 ++++++-
 src/chrome/content/rules/Enphase-Energy.xml   |  6 ++++-
 src/chrome/content/rules/Enthought.com.xml    |  6 ++++-
 src/chrome/content/rules/Entropy_Wave.xml     |  7 ++++-
 src/chrome/content/rules/EoPortal.xml         |  6 ++++-
 src/chrome/content/rules/Es.gy.xml            |  8 +++++-
 src/chrome/content/rules/Eseeky.com.xml       |  8 +++++-
 .../content/rules/Evisa-Vietnam.Com.xml       |  8 +++++-
 src/chrome/content/rules/Evm.dk.xml           |  7 ++++-
 src/chrome/content/rules/Eweka.nl.xml         |  7 ++++-
 src/chrome/content/rules/Exacom.sk.xml        |  9 ++++++-
 .../content/rules/Expanded_Support.com.xml    |  7 ++++-
 src/chrome/content/rules/EyeTech.xml          |  9 ++++++-
 src/chrome/content/rules/FCPA-Blog.xml        |  9 ++++++-
 src/chrome/content/rules/FREECULTR.xml        |  6 ++++-
 .../content/rules/FacebookCoreWWWi.onion.xml  | 14 +++++++++-
 src/chrome/content/rules/Fast-Web-Media.xml   |  8 +++++-
 .../rules/Federal-Bureau-of-Investigation.xml |  6 ++++-
 .../rules/Federation-of-Small-Businesses.xml  |  6 ++++-
 src/chrome/content/rules/FilmBreak.xml        |  6 ++++-
 src/chrome/content/rules/Fimfiction.net.xml   |  9 ++++++-
 .../content/rules/Financial-Cryptography.xml  |  9 ++++++-
 src/chrome/content/rules/FindTheBest.xml      |  6 ++++-
 src/chrome/content/rules/Firedoglake.xml      |  6 ++++-
 .../First_Class_Magazine.se-falsemixed.xml    |  6 ++++-
 src/chrome/content/rules/FoECV_LiaB.com.xml   |  7 ++++-
 src/chrome/content/rules/Forge_Software.xml   |  8 +++++-
 src/chrome/content/rules/FormSanity.com.xml   |  6 ++++-
 src/chrome/content/rules/Freegeoip.net.xml    |  8 +++++-
 src/chrome/content/rules/FrenchTouch.pro.xml  |  7 ++++-
 src/chrome/content/rules/Friendfeed.xml       |  7 ++++-
 .../content/rules/Fundacion_Televisa.org.xml  |  6 ++++-
 .../content/rules/Funky_Android.com.xml       |  7 ++++-
 src/chrome/content/rules/GCaptain.com.xml     |  6 ++++-
 src/chrome/content/rules/GMO_Cloud.com.xml    |  7 ++++-
 src/chrome/content/rules/GMO_Internet.xml     |  6 ++++-
 src/chrome/content/rules/GMO_Registry.com.xml |  7 ++++-
 src/chrome/content/rules/Gaminator.xml        |  8 +++++-
 src/chrome/content/rules/Gannett_Ridge.xml    |  9 ++++++-
 src/chrome/content/rules/GeForce.com.xml      |  6 ++++-
 src/chrome/content/rules/GearSourceEurope.xml |  6 ++++-
 .../content/rules/Geek_Tech_Labs.com.xml      |  6 ++++-
 src/chrome/content/rules/Gemnasium.com.xml    |  6 ++++-
 src/chrome/content/rules/Gentoo.xml           |  9 ++++++-
 .../content/rules/George-Mason-University.xml |  8 +++++-
 .../content/rules/Georgetown_University.xml   |  6 ++++-
 src/chrome/content/rules/Get.CM.xml           |  7 ++++-
 src/chrome/content/rules/GetTraffic.com.xml   |  6 ++++-
 src/chrome/content/rules/GifBook.io.xml       |  6 ++++-
 src/chrome/content/rules/GitBook.io.xml       |  8 +++++-
 src/chrome/content/rules/GoDaddy.xml          | 10 ++++++-
 src/chrome/content/rules/GoGetSSL.com.xml     |  8 +++++-
 src/chrome/content/rules/Go_Lucid.co.xml      |  7 ++++-
 src/chrome/content/rules/GoalWorthy.com.xml   |  9 ++++++-
 src/chrome/content/rules/Gogoyoko.xml         |  7 ++++-
 .../content/rules/Golden_Adventures.xml       |  8 +++++-
 src/chrome/content/rules/Goldenarium.xml      |  9 ++++++-
 .../rules/Goldsboro_Web_Development.xml       |  8 +++++-
 src/chrome/content/rules/Goo.im.xml           |  9 ++++++-
 src/chrome/content/rules/GoogleMaps.xml       |  6 ++++-
 src/chrome/content/rules/GoogleServices.xml   |  6 ++++-
 .../content/rules/Google_App_Engine.xml       |  6 ++++-
 src/chrome/content/rules/Gotland_Ring.com.xml |  8 +++++-
 src/chrome/content/rules/Gov1.info.xml        |  8 +++++-
 src/chrome/content/rules/Gov_Waste.co.uk.xml  |  9 ++++++-
 src/chrome/content/rules/GreenIT-BB.xml       |  8 +++++-
 src/chrome/content/rules/Greenpeace.de.xml    |  6 ++++-
 .../rules/Grilling_is_Happiness.com.xml       |  6 ++++-
 src/chrome/content/rules/Grit.io.xml          |  9 ++++++-
 src/chrome/content/rules/Grupfoni.xml         |  8 +++++-
 src/chrome/content/rules/HSV.se.xml           |  9 +++++--
 src/chrome/content/rules/HacktionLab.org.xml  |  9 ++++++-
 src/chrome/content/rules/HashTalk.org.xml     |  7 ++++-
 src/chrome/content/rules/Haskell.org.xml      |  6 ++++-
 src/chrome/content/rules/Hastexo.com.xml      |  8 +++++-
 src/chrome/content/rules/Healthfuze.com.xml   |  8 +++++-
 src/chrome/content/rules/Hello.tokyo.xml      |  7 ++++-
 src/chrome/content/rules/Hideme.today.xml     |  7 ++++-
 src/chrome/content/rules/Highwebmedia.com.xml |  8 +++++-
 src/chrome/content/rules/Hivos.org.xml        |  6 ++++-
 .../content/rules/Hollywood_Life.com.xml      |  6 ++++-
 .../content/rules/Hope.net-falsemixed.xml     |  6 ++++-
 .../content/rules/Hornstra_Farms.com.xml      |  7 ++++-
 src/chrome/content/rules/Hotel_Wifi.com.xml   |  6 ++++-
 src/chrome/content/rules/HubSpot.xml          |  6 ++++-
 src/chrome/content/rules/I2P.xml              |  6 ++++-
 src/chrome/content/rules/IAS.edu.xml          |  6 ++++-
 src/chrome/content/rules/IIS.se.xml           |  6 ++++-
 src/chrome/content/rules/INaturalist.org.xml  |  6 ++++-
 src/chrome/content/rules/IOSPP.xml            |  8 +++++-
 src/chrome/content/rules/ISOC.org.br.xml      |  7 ++++-
 src/chrome/content/rules/ISPID.nl.xml         |  7 ++++-
 src/chrome/content/rules/IT_Works.xml         |  8 +++++-
 src/chrome/content/rules/IiBuy.com.au.xml     |  8 +++++-
 src/chrome/content/rules/Ikoula.com.xml       |  6 ++++-
 .../content/rules/Influencers_Conference.xml  |  8 +++++-
 src/chrome/content/rules/InfoWar.com.xml      |  6 ++++-
 src/chrome/content/rules/Infogroup.xml        |  7 ++++-
 .../content/rules/Informa_Healthcare.xml      |  6 ++++-
 src/chrome/content/rules/Inria.fr.xml         |  9 ++++++-
 src/chrome/content/rules/Integrity.pt.xml     |  6 ++++-
 .../rules/Interactive-Media-Awards.xml        |  9 ++++++-
 src/chrome/content/rules/Interclick.xml       |  6 ++++-
 .../content/rules/Intermundo_Media.com.xml    |  6 ++++-
 .../content/rules/Ionic_Framework.com.xml     |  6 ++++-
 src/chrome/content/rules/Ireeco.com.xml       |  8 +++++-
 src/chrome/content/rules/Isocket.xml          |  7 ++++-
 src/chrome/content/rules/Jabber.ru.xml        |  6 ++++-
 src/chrome/content/rules/Jabberd.org.xml      |  8 +++++-
 src/chrome/content/rules/Jamie-Oliver.xml     |  7 ++++-
 src/chrome/content/rules/Jappix.net.xml       |  7 ++++-
 src/chrome/content/rules/Jappix.pro.xml       |  7 ++++-
 src/chrome/content/rules/Jdeslip.com.xml      |  9 ++++++-
 .../content/rules/Jolexa.net-cacert.xml       |  7 ++++-
 src/chrome/content/rules/JuicyAds.com.xml     |  6 ++++-
 src/chrome/content/rules/KDE.xml              |  8 +++++-
 src/chrome/content/rules/KISSmetrics.xml      |  6 ++++-
 src/chrome/content/rules/KSA_Glass.xml        |  8 +++++-
 src/chrome/content/rules/Karagarga.xml        |  9 ++++++-
 src/chrome/content/rules/Kargo.com.xml        |  6 ++++-
 src/chrome/content/rules/Kart_Fighter.com.xml |  6 ++++-
 .../content/rules/KarwansarayPublishers.xml   |  7 ++++-
 .../Karwansaray_Publishers.com-falsemixed.xml |  6 ++++-
 .../rules/Katholieke-Universiteit-Leuven.xml  | 13 ++++++++-
 src/chrome/content/rules/Kimberly-Clark.xml   |  7 ++++-
 src/chrome/content/rules/KnCMiner.com.xml     |  6 ++++-
 src/chrome/content/rules/KnightSwarm.xml      |  6 ++++-
 src/chrome/content/rules/Kohls.xml            |  9 ++++++-
 src/chrome/content/rules/Kpopstage.co.xml     |  6 ++++-
 src/chrome/content/rules/Kuonamaoni.com.xml   |  8 +++++-
 src/chrome/content/rules/Kura.io.xml          |  9 ++++++-
 src/chrome/content/rules/Kyani.net.xml        |  6 ++++-
 src/chrome/content/rules/LFAIT.com.xml        |  7 ++++-
 src/chrome/content/rules/LaPatilla.com.xml    |  6 ++++-
 src/chrome/content/rules/LayerVault.com.xml   |  6 ++++-
 src/chrome/content/rules/LeadSpend.com.xml    |  8 +++++-
 src/chrome/content/rules/Leet_Media.com.xml   |  8 +++++-
 src/chrome/content/rules/Leetway.com.xml      |  6 ++++-
 src/chrome/content/rules/Lenovo.xml           | 13 ++++++++-
 src/chrome/content/rules/Levels.io.xml        |  6 ++++-
 src/chrome/content/rules/LibreOffice.xml      |  8 +++++-
 src/chrome/content/rules/Linguee.xml          |  8 +++++-
 src/chrome/content/rules/LinkedIn.xml         |  8 +++++-
 .../content/rules/Linux-Magazin-Online.xml    |  7 ++++-
 src/chrome/content/rules/LinuxFoundation.xml  | 27 ++++++++++++++++++-
 src/chrome/content/rules/Linuxslut.net.xml    |  8 +++++-
 src/chrome/content/rules/Liquidmatrix.org.xml |  6 ++++-
 .../content/rules/Listener_Approved.xml       |  8 +++++-
 src/chrome/content/rules/LiveCorp.xml         |  8 +++++-
 src/chrome/content/rules/LiveRamp.xml         |  8 +++++-
 src/chrome/content/rules/Livestream.xml       |  6 ++++-
 src/chrome/content/rules/Loanliner.com.xml    |  7 ++++-
 src/chrome/content/rules/LogMeIn.xml          |  6 ++++-
 src/chrome/content/rules/Lolicore.ch.xml      |  8 ++++--
 .../content/rules/Lynch_Interactive.com.xml   |  8 +++++-
 src/chrome/content/rules/MAAWG.xml            |  8 +++++-
 src/chrome/content/rules/MIT.xml              | 12 ++++++++-
 src/chrome/content/rules/MSDN.xml             | 14 +++++++++-
 src/chrome/content/rules/Makezine.com.xml     |  7 ++++-
 src/chrome/content/rules/Malcovery.com.xml    |  6 ++++-
 .../content/rules/Mandriva.com-falsemixed.xml |  7 ++++-
 src/chrome/content/rules/Mandriva.com.xml     |  6 ++++-
 src/chrome/content/rules/Manta.xml            |  6 ++++-
 src/chrome/content/rules/Marin_Software.xml   |  6 ++++-
 src/chrome/content/rules/MateLife.xml         |  8 +++++-
 src/chrome/content/rules/Matt_Wilcox.net.xml  |  9 ++++++-
 src/chrome/content/rules/Max_Kitap.com.xml    |  8 +++++-
 src/chrome/content/rules/Mcssl.com.xml        |  7 ++++-
 src/chrome/content/rules/McxNOW.com.xml       |  9 ++++++-
 src/chrome/content/rules/Medgadget.xml        |  6 ++++-
 src/chrome/content/rules/Mediacru.sh.xml      |  6 ++++-
 .../rules/MediciGlobal.com-falsemixed.xml     |  7 ++++-
 src/chrome/content/rules/Mercy_Ships.xml      |  8 +++++-
 src/chrome/content/rules/MereThis.com.xml     |  8 +++++-
 src/chrome/content/rules/Mibbit.xml           |  6 ++++-
 src/chrome/content/rules/Micro_Focus.com.xml  |  6 ++++-
 src/chrome/content/rules/MicropartsUSA.xml    |  9 ++++++-
 src/chrome/content/rules/Microsoft-Atlas.xml  |  8 +++++-
 src/chrome/content/rules/Microsoft.xml        | 25 ++++++++++++++++-
 .../content/rules/Microsoft_Ventures.com.xml  |  6 ++++-
 src/chrome/content/rules/Mike_Masin.xml       |  8 +++++-
 src/chrome/content/rules/Mixxx.org.xml        |  6 ++++-
 src/chrome/content/rules/Mjanja.ch.xml        |  8 +++++-
 src/chrome/content/rules/Moat_ads.com.xml     |  7 ++++-
 src/chrome/content/rules/Mobclix.com.xml      |  6 ++++-
 src/chrome/content/rules/Mollom.xml           |  6 ++++-
 src/chrome/content/rules/MonkeyGuts.com.xml   |  9 ++++++-
 src/chrome/content/rules/Monty_Program.xml    |  6 ++++-
 src/chrome/content/rules/Moreinterop.com.xml  |  7 ++++-
 src/chrome/content/rules/Mozilla.com.xml      |  7 ++++-
 src/chrome/content/rules/Mozilla.net.xml      |  6 ++++-
 .../content/rules/Mozilla_Ignite.org.xml      |  7 ++++-
 src/chrome/content/rules/Mozilla_Labs.com.xml |  7 ++++-
 src/chrome/content/rules/Mozilla_Persona.xml  |  6 ++++-
 src/chrome/content/rules/MultiVPN.xml         |  8 +++++-
 .../content/rules/Multicore-DevCon.com.xml    |  9 ++++++-
 src/chrome/content/rules/MusicBrainz.xml      |  6 ++++-
 .../content/rules/Mutual_of_America.xml       |  6 ++++-
 .../content/rules/My_Aloe_Cleanse.com.xml     |  8 +++++-
 .../content/rules/My_Portable_World.com.xml   |  6 ++++-
 src/chrome/content/rules/NASA.gov.xml         | 12 ++++++++-
 src/chrome/content/rules/NHN-Corporation.xml  |  9 ++++++-
 src/chrome/content/rules/NTP.org.xml          |  7 ++++-
 .../rules/NYK_Europe.com-falsemixed.xml       |  6 ++++-
 src/chrome/content/rules/NYSE_Euronext.xml    |  6 ++++-
 src/chrome/content/rules/Nabers.com.xml       |  6 ++++-
 src/chrome/content/rules/Naked_citizens.xml   |  9 ++++++-
 .../Nanyang-Technological-University.xml      |  6 ++++-
 ...-Institute-of-Standards-and-Technology.xml |  6 ++++-
 .../rules/National_Abortion_Federation.xml    |  7 ++++-
 .../Natl-Childrens-Leukemia-Foundation.xml    |  9 ++++++-
 src/chrome/content/rules/Neave.tv.xml         |  8 +++++-
 .../content/rules/NegotiatingSalary.com.xml   |  8 +++++-
 src/chrome/content/rules/NetApp.xml           |  6 ++++-
 src/chrome/content/rules/NetFronts.xml        |  6 ++++-
 src/chrome/content/rules/Net_Mundial.net.xml  |  9 ++++++-
 src/chrome/content/rules/Netistrar.com.xml    |  6 ++++-
 src/chrome/content/rules/Netpol.org.xml       |  6 ++++-
 src/chrome/content/rules/Network23.org.xml    |  8 +++++-
 src/chrome/content/rules/NeuStar.xml          |  6 ++++-
 src/chrome/content/rules/Neustar.com.xml      |  6 ++++-
 .../content/rules/New-Moon-Girls-Online.xml   |  9 ++++++-
 src/chrome/content/rules/Nexus_Pay.xml        |  8 +++++-
 src/chrome/content/rules/Nightcode.info.xml   |  6 ++++-
 src/chrome/content/rules/Nightweb.net.xml     |  6 ++++-
 src/chrome/content/rules/Nitro_Cloud.com.xml  |  6 ++++-
 src/chrome/content/rules/Nodejs.org.xml       |  6 ++++-
 src/chrome/content/rules/Norton.xml           |  7 ++++-
 .../rules/Number-Resource-Organization.xml    |  8 +++++-
 src/chrome/content/rules/OCCRP.org.xml        |  6 ++++-
 src/chrome/content/rules/OTR.im.xml           |  6 ++++-
 src/chrome/content/rules/Octoshape.xml        |  9 ++++++-
 src/chrome/content/rules/Oh-So-Cool.xml       |  8 +++++-
 .../content/rules/Old_Pirate_Bay.org.xml      |  8 +++++-
 src/chrome/content/rules/Omniref.com.xml      |  8 +++++-
 src/chrome/content/rules/OnLive.com.xml       |  6 ++++-
 .../content/rules/OneCloudSecurity.com.xml    |  8 +++++-
 .../content/rules/One_Green_Planet.org.xml    |  6 ++++-
 src/chrome/content/rules/Ooyala.xml           |  6 ++++-
 src/chrome/content/rules/OpenAFS.org.xml      |  7 ++++-
 src/chrome/content/rules/OpenBSD.org.xml      |  6 ++++-
 src/chrome/content/rules/OpenDaylight.xml     |  8 +++++-
 src/chrome/content/rules/OpenHatch.org.xml    |  6 ++++-
 src/chrome/content/rules/OpenSVC.xml          |  6 ++++-
 src/chrome/content/rules/OpenX.org.xml        |  9 ++++++-
 src/chrome/content/rules/OpenX.xml            |  8 +++++-
 src/chrome/content/rules/Open_Farm_Game.xml   |  7 ++++-
 src/chrome/content/rules/Open_Mesh.xml        |  7 ++++-
 .../Open_Virtualization_Alliance.org.xml      |  7 ++++-
 src/chrome/content/rules/Openfiler.xml        |  7 ++++-
 src/chrome/content/rules/Openprinting.xml     |  7 ++++-
 src/chrome/content/rules/Openswan.xml         |  6 ++++-
 .../content/rules/Operating_Systems.io.xml    |  8 +++++-
 .../rules/Optical-Society-of-America.xml      |  7 ++++-
 src/chrome/content/rules/Oracle.xml           | 13 ++++++++-
 src/chrome/content/rules/Orbital_Sciences.xml |  9 ++++++-
 src/chrome/content/rules/Orez_Praw.com.xml    |  9 ++++++-
 src/chrome/content/rules/OurCommonPlace.xml   |  8 +++++-
 src/chrome/content/rules/Owner.io.xml         |  6 ++++-
 src/chrome/content/rules/PDF.yt.xml           |  8 +++++-
 src/chrome/content/rules/PNAS_First_Look.xml  |  6 ++++-
 src/chrome/content/rules/PRQ.se.xml           |  9 ++++++-
 .../rules/Packet_Storm_Security.com.xml       |  7 ++++-
 src/chrome/content/rules/Palm.com.xml         |  6 ++++-
 .../rules/Pan-Islamic_Malaysian_Party.xml     |  8 +++++-
 .../content/rules/Parameter_Security.com.xml  |  6 ++++-
 src/chrome/content/rules/Pashm.com.xml        |  6 ++++-
 src/chrome/content/rules/Passport.net.xml     |  6 ++++-
 .../content/rules/Pay_Dirt_Gold.com.xml       |  8 +++++-
 src/chrome/content/rules/Paymo.xml            |  8 +++++-
 src/chrome/content/rules/Pbsrc.com.xml        |  7 ++++-
 src/chrome/content/rules/Pcp.ch.xml           | 11 +++++++-
 src/chrome/content/rules/PeopleFluent.com.xml |  6 ++++-
 src/chrome/content/rules/Peopleclick.com.xml  |  6 ++++-
 src/chrome/content/rules/Pepperfish.xml       |  6 ++++-
 src/chrome/content/rules/Perry_Ellis.com.xml  |  7 ++++-
 src/chrome/content/rules/Petrogen.com.xml     |  9 ++++++-
 .../rules/Phillips_Academy_Andover.xml        |  8 +++++-
 src/chrome/content/rules/PicoStocks.com.xml   |  7 ++++-
 src/chrome/content/rules/PirateParty.xml      | 10 ++++++-
 src/chrome/content/rules/PlanetRomeo.xml      |  9 ++++++-
 .../rules/PlantSolution.de-falsemixed.xml     |  6 ++++-
 src/chrome/content/rules/PlantSolution.de.xml |  7 ++++-
 .../rules/Plantappstore.com-falsemixed.xml    |  6 ++++-
 src/chrome/content/rules/Pogamay.ru.xml       |  6 ++++-
 src/chrome/content/rules/Post.ch.xml          |  9 ++++++-
 src/chrome/content/rules/Price.ua.xml         |  6 ++++-
 src/chrome/content/rules/PriceGrabber.xml     |  6 ++++-
 src/chrome/content/rules/Printink.si.xml      |  8 +++++-
 src/chrome/content/rules/PrivatePaste.xml     |  8 +++++-
 src/chrome/content/rules/Pro_Ultra_Trim.xml   |  8 +++++-
 src/chrome/content/rules/ProfitUnion.org.xml  |  8 +++++-
 src/chrome/content/rules/ProgrammableWeb.xml  |  9 ++++++-
 src/chrome/content/rules/Progress.com.xml     |  7 ++++-
 src/chrome/content/rules/Project_Meshnet.xml  |  6 ++++-
 src/chrome/content/rules/Prosidy.im.xml       |  6 ++++-
 src/chrome/content/rules/Psychology_Today.xml |  8 +++++-
 src/chrome/content/rules/Pubkey.is.xml        |  9 ++++++-
 .../rules/PublicSectorManagementProgram.xml   |  8 +++++-
 .../content/rules/Pure_Ultra_Cleanse.xml      |  8 +++++-
 src/chrome/content/rules/PyPIP.in.xml         |  7 ++++-
 src/chrome/content/rules/QQ.xml               |  7 ++++-
 src/chrome/content/rules/Qt.xml               |  6 ++++-
 .../content/rules/Qualaris.com-falsemixed.xml |  6 ++++-
 src/chrome/content/rules/Qualaris.com.xml     |  6 ++++-
 src/chrome/content/rules/Quitter.no.xml       |  6 ++++-
 src/chrome/content/rules/R-kom.xml            |  8 +++++-
 src/chrome/content/rules/RCKing.xml           |  8 +++++-
 src/chrome/content/rules/REWAG.xml            |  9 ++++++-
 src/chrome/content/rules/ROCKZi.com.xml       |  6 ++++-
 src/chrome/content/rules/RSPCA_shop.co.uk.xml |  6 ++++-
 src/chrome/content/rules/RTP.vc.xml           |  6 ++++-
 src/chrome/content/rules/Railscloud.de.xml    |  7 ++++-
 src/chrome/content/rules/Rambler.xml          | 10 ++++++-
 src/chrome/content/rules/RapidShare.xml       |  6 ++++-
 src/chrome/content/rules/RavenDB.net.xml      |  7 ++++-
 src/chrome/content/rules/Rawstudio.org.xml    |  6 ++++-
 src/chrome/content/rules/Red_Hat.xml          |  6 ++++-
 src/chrome/content/rules/Reddit_media.com.xml |  6 ++++-
 src/chrome/content/rules/Reed-Exhibitions.xml |  7 ++++-
 .../content/rules/Reef_LED_Lights.com.xml     |  9 ++++++-
 src/chrome/content/rules/Reklamport.com.xml   |  8 +++++-
 src/chrome/content/rules/Rem.co.xml           |  9 ++++++-
 src/chrome/content/rules/Resin.io.xml         |  8 +++++-
 src/chrome/content/rules/Responsys.com.xml    |  7 ++++-
 src/chrome/content/rules/Resus.org.uk.xml     |  8 +++++-
 src/chrome/content/rules/RevSci.net.xml       |  7 ++++-
 src/chrome/content/rules/Revolet.xml          |  8 +++++-
 src/chrome/content/rules/Revolt_Games.xml     |  6 ++++-
 src/chrome/content/rules/Rfihub.com.xml       |  6 ++++-
 src/chrome/content/rules/Rigzone.xml          |  6 ++++-
 src/chrome/content/rules/Riverbed.xml         |  7 ++++-
 src/chrome/content/rules/Robin_Rabard.xml     |  7 ++++-
 src/chrome/content/rules/Rooof.xml            |  6 ++++-
 src/chrome/content/rules/RoundCube.net.xml    |  6 ++++-
 src/chrome/content/rules/Rpmfusion.org.xml    |  6 ++++-
 src/chrome/content/rules/Rubicon-Project.xml  |  9 ++++++-
 src/chrome/content/rules/RugsHD.com.xml       |  8 +++++-
 src/chrome/content/rules/Ruskey_Biz.xml       |  7 ++++-
 src/chrome/content/rules/SANS.edu.xml         |  6 ++++-
 src/chrome/content/rules/SK_hynix.com.xml     |  6 ++++-
 src/chrome/content/rules/SNSBank.xml          |  6 ++++-
 src/chrome/content/rules/SRB2.org.xml         |  6 ++++-
 src/chrome/content/rules/SWCA.org.xml         |  8 +++++-
 src/chrome/content/rules/SWISSCEX.com.xml     |  7 ++++-
 src/chrome/content/rules/Sbarmen.no.xml       |  6 ++++-
 src/chrome/content/rules/Sbucciami.xml        |  8 +++++-
 src/chrome/content/rules/SceneTap.xml         |  8 +++++-
 src/chrome/content/rules/Scooter-Attack.xml   |  6 ++++-
 src/chrome/content/rules/Scriptfodder.com.xml |  8 +++++-
 .../content/rules/Seafile-Server.de.xml       |  7 ++++-
 src/chrome/content/rules/Seals-with-Clubs.xml |  9 ++++++-
 src/chrome/content/rules/Secure-u.de.xml      |  9 ++++++-
 .../content/rules/SecurePro_Software.xml      |  7 ++++-
 src/chrome/content/rules/Securepaynet.net.xml |  6 ++++-
 src/chrome/content/rules/Secureserver.net.xml |  6 ++++-
 .../content/rules/Security-Research-Labs.xml  |  6 ++++-
 src/chrome/content/rules/Selangorku.xml       |  8 +++++-
 src/chrome/content/rules/Sencha.xml           |  6 ++++-
 src/chrome/content/rules/SeoWizard.ru.xml     |  6 ++++-
 src/chrome/content/rules/Serverdensity.io.xml |  8 ++++--
 src/chrome/content/rules/ShareThis.xml        |  7 ++++-
 src/chrome/content/rules/Sharedvue.net.xml    |  8 +++++-
 src/chrome/content/rules/ShortList.xml        |  6 ++++-
 src/chrome/content/rules/Shwyz.ca.xml         |  9 ++++++-
 .../content/rules/Silent_Sender.com.xml       |  9 ++++++-
 src/chrome/content/rules/SilverRush_Style.xml |  6 ++++-
 src/chrome/content/rules/Silvertunnel.org.xml |  7 ++++-
 src/chrome/content/rules/SitePoint.xml        |  6 ++++-
 src/chrome/content/rules/Site_Blindado.xml    |  6 ++++-
 src/chrome/content/rules/Sitizens.xml         |  6 ++++-
 src/chrome/content/rules/Skat.dk.xml          |  8 +++++-
 .../content/rules/Skyrider_GraalOnline.xml    |  8 +++++-
 src/chrome/content/rules/Slick_Products.xml   |  9 ++++++-
 src/chrome/content/rules/SlideShare.xml       |  6 ++++-
 src/chrome/content/rules/SmartPlanet.com.xml  |  7 ++++-
 src/chrome/content/rules/SnapEngage.xml       | 10 ++++++-
 src/chrome/content/rules/SnugNote.xml         |  6 ++++-
 src/chrome/content/rules/SoSci-Survey.xml     |  8 +++++-
 .../content/rules/Social_Reader.com.xml       |  6 ++++-
 .../content/rules/Sony_Latin_America.xml      |  6 ++++-
 .../content/rules/Source-Elements.com.xml     |  8 +++++-
 src/chrome/content/rules/Sourcefire.com.xml   |  6 ++++-
 src/chrome/content/rules/Spendbitcoins.xml    |  8 +++++-
 src/chrome/content/rules/Spiceworks.xml       |  6 ++++-
 src/chrome/content/rules/SplatF.xml           |  6 ++++-
 src/chrome/content/rules/Spontex.org.xml      | 15 ++++++++++-
 .../rules/Squirrel-webmail.surftown.com.xml   |  8 +++++-
 .../content/rules/Stadt-bremerhaven.de.xml    |  8 +++++-
 src/chrome/content/rules/Stalkr.net.xml       |  7 ++++-
 .../content/rules/Standish-Management.xml     |  8 +++++-
 src/chrome/content/rules/StartCom.xml         |  8 +++++-
 src/chrome/content/rules/StatusPage.io.xml    |  6 ++++-
 src/chrome/content/rules/StaySmartOnline.xml  |  8 +++++-
 src/chrome/content/rules/Stpeter.im.xml       |  6 ++++-
 .../content/rules/Street_Art_Utopia.xml       |  8 +++++-
 src/chrome/content/rules/Strimoid.pl.xml      |  9 ++++++-
 src/chrome/content/rules/Strugee.net.xml      |  6 ++++-
 src/chrome/content/rules/Stunnish.com.xml     |  6 ++++-
 src/chrome/content/rules/Subrosa.io.xml       |  8 +++++-
 .../content/rules/Sunbeltsoftware.com.xml     |  9 ++++++-
 src/chrome/content/rules/SunoSanuo.com.xml    |  6 ++++-
 .../content/rules/SuperGuarantee.com.xml      |  6 ++++-
 src/chrome/content/rules/SuperMedia.xml       |  6 ++++-
 src/chrome/content/rules/Superpages.com.xml   |  6 ++++-
 src/chrome/content/rules/Sweet_and_Sour.xml   |  9 ++++++-
 .../content/rules/Swiss-Federal-Railways.xml  | 16 ++++++++++-
 src/chrome/content/rules/Swiss.xml            |  8 +++++-
 src/chrome/content/rules/Swissabroad.ch.xml   |  8 +++++-
 src/chrome/content/rules/Switch.ch.xml        |  6 ++++-
 src/chrome/content/rules/Syncthing.net.xml    |  6 ++++-
 src/chrome/content/rules/Synergist_SCADA.xml  |  8 +++++-
 src/chrome/content/rules/T3.io.xml            |  8 +++++-
 src/chrome/content/rules/TAG_Online.com.xml   |  6 ++++-
 src/chrome/content/rules/TLS.so.xml           |  6 ++++-
 src/chrome/content/rules/TRUSTe.xml           |  7 ++++-
 src/chrome/content/rules/TTIP-Stoppen.at.xml  |  7 ++++-
 src/chrome/content/rules/TankaFetast.com.xml  |  6 ++++-
 src/chrome/content/rules/Tesco_Diets.com.xml  |  7 ++++-
 .../rules/Tesco_Share_and_Earn.com.xml        |  8 +++++-
 .../content/rules/Texas-Instruments.xml       |  9 ++++++-
 src/chrome/content/rules/ThankYou.com.xml     |  6 ++++-
 src/chrome/content/rules/The-Best-Hosting.xml |  9 ++++++-
 src/chrome/content/rules/The-Diplomat.xml     |  9 ++++++-
 src/chrome/content/rules/The_109.xml          |  8 +++++-
 src/chrome/content/rules/Thefind.xml          |  9 ++++++-
 .../content/rules/Themes_and_Co.com.xml       |  6 ++++-
 src/chrome/content/rules/Thijs_Alkema.de.xml  |  7 ++++-
 .../rules/Thompson_Hotels.com-falsemixed.xml  |  6 ++++-
 src/chrome/content/rules/Tires_N_Wheels.xml   |  8 +++++-
 src/chrome/content/rules/Titanshare.to.xml    |  6 ++++-
 src/chrome/content/rules/Toolbox.com.xml      |  6 ++++-
 src/chrome/content/rules/Translink.xml        |  6 ++++-
 src/chrome/content/rules/Trendin.com.xml      |  8 +++++-
 src/chrome/content/rules/Troveread.com.xml    |  6 ++++-
 src/chrome/content/rules/Tube4.me.xml         |  6 ++++-
 src/chrome/content/rules/TubeOffline.com.xml  |  7 ++++-
 src/chrome/content/rules/Tucows.xml           |  6 ++++-
 src/chrome/content/rules/Turn_On_Social.xml   |  6 ++++-
 src/chrome/content/rules/Twimg.com.xml        | 10 ++++++-
 src/chrome/content/rules/Twitter.xml          |  7 ++++-
 src/chrome/content/rules/UBS.xml              | 10 ++++++-
 src/chrome/content/rules/UOL.xml              |  9 ++++++-
 src/chrome/content/rules/Udemy.com.xml        |  6 ++++-
 src/chrome/content/rules/Udistrital.xml       |  9 ++++++-
 src/chrome/content/rules/Uguu.se.xml          | 10 ++++++-
 src/chrome/content/rules/Uhub.xml             |  8 +++++-
 src/chrome/content/rules/UltraNature_Lean.xml |  8 +++++-
 .../content/rules/Ultra_Facil.com.br.xml      |  8 +++++-
 src/chrome/content/rules/Umbel.com.xml        |  6 ++++-
 .../content/rules/Umea_Hackerspace.se.xml     | 10 ++++++-
 src/chrome/content/rules/Unbit.it.xml         |  8 +++++-
 ...versalist_Association_of_Congregations.xml |  6 ++++-
 src/chrome/content/rules/Universite_Laval.xml | 14 +++++++++-
 .../University-of-California-Berkeley.xml     | 11 +++++++-
 .../content/rules/University-of-Maryland.xml  |  6 ++++-
 .../content/rules/University-of-Michigan.xml  | 10 ++++++-
 src/chrome/content/rules/Uppsalahem.se.xml    |  8 +++++-
 src/chrome/content/rules/Userium.com.xml      |  9 ++++++-
 src/chrome/content/rules/UsplusU.com.xml      |  8 +++++-
 .../content/rules/Utah-Education-Network.xml  |  8 ++++--
 src/chrome/content/rules/VMware.xml           | 13 ++++++++-
 src/chrome/content/rules/Valve.xml            |  7 ++++-
 .../content/rules/Variety_Latino.com.xml      |  8 +++++-
 .../content/rules/Vegas_Deal_Hunter.xml       |  6 ++++-
 .../content/rules/VersionHistory.io.xml       |  7 ++++-
 src/chrome/content/rules/Vesess.xml           |  6 ++++-
 src/chrome/content/rules/Vice.xml             |  6 ++++-
 src/chrome/content/rules/Victorias_Secret.xml |  6 ++++-
 src/chrome/content/rules/VideoHub.tv.xml      |  7 ++++-
 src/chrome/content/rules/Videodroid.org.xml   |  8 +++++-
 .../content/rules/Vidup.me-falsemixed.xml     |  6 ++++-
 src/chrome/content/rules/Vie_Pratique.fr.xml  |  6 ++++-
 ...technic-Institute-and-State-University.xml |  8 +++++-
 .../content/rules/Virtual_News_Center.xml     |  7 ++++-
 src/chrome/content/rules/Vitamin_Shoppe.xml   |  6 ++++-
 src/chrome/content/rules/Vox_Media.com.xml    |  6 ++++-
 src/chrome/content/rules/WLxrs.com.xml        |  6 ++++-
 src/chrome/content/rules/WTFismyIP.xml        |  6 ++++-
 .../content/rules/WalletGenerator.net.xml     |  8 +++++-
 src/chrome/content/rules/Wash_Post.com.xml    |  6 ++++-
 src/chrome/content/rules/Wauland.de.xml       |  9 ++++++-
 src/chrome/content/rules/WeGotEd.com.xml      |  7 ++++-
 src/chrome/content/rules/WeGotWax.com.xml     |  8 +++++-
 src/chrome/content/rules/WebINK.com.xml       |  6 ++++-
 src/chrome/content/rules/WebSanity.xml        |  6 ++++-
 .../content/rules/WebShopRevolution.com.xml   |  8 +++++-
 src/chrome/content/rules/WebTrust.xml         |  7 ++++-
 .../content/rules/Web_Foundation.org.xml      |  9 ++++++-
 src/chrome/content/rules/Webento.xml          |  8 +++++-
 src/chrome/content/rules/Weboolu.xml          |  6 ++++-
 src/chrome/content/rules/Webroot.com.xml      |  6 ++++-
 .../content/rules/WebsiteGrowers.com.xml      |  8 +++++-
 src/chrome/content/rules/Webtrends.com.xml    | 11 +++++++-
 src/chrome/content/rules/Western_Union.xml    |  7 ++++-
 src/chrome/content/rules/Wikimedia.xml        |  7 ++++-
 .../content/rules/Wildcard_Corp.com.xml       |  6 ++++-
 .../content/rules/Wilde_Beuger_Solmecke.xml   |  6 ++++-
 src/chrome/content/rules/Wiley.xml            |  6 ++++-
 src/chrome/content/rules/William-Hill.xml     |  6 ++++-
 src/chrome/content/rules/WinTieWin.xml        |  8 +++++-
 src/chrome/content/rules/Windows.net.xml      |  6 ++++-
 src/chrome/content/rules/Windows_Phone.xml    |  6 ++++-
 src/chrome/content/rules/Winoptions.com.xml   |  6 ++++-
 src/chrome/content/rules/WiredSafety.org.xml  | 13 ++++++++-
 src/chrome/content/rules/Wistia.xml           |  8 +++++-
 src/chrome/content/rules/Wza.us.xml           |  9 ++++++-
 src/chrome/content/rules/XFCE.org.xml         |  6 ++++-
 .../content/rules/XILO-Communications.xml     |  6 ++++-
 src/chrome/content/rules/XMission.xml         |  6 ++++-
 src/chrome/content/rules/Xapo.com.xml         |  7 ++++-
 src/chrome/content/rules/Xavisys.xml          |  8 +++++-
 src/chrome/content/rules/Xbox.xml             |  7 ++++-
 src/chrome/content/rules/Xetra.com.xml        |  7 ++++-
 src/chrome/content/rules/Xfire.xml            |  7 ++++-
 .../content/rules/Xplosion_interactive.xml    |  6 ++++-
 .../content/rules/Y6xjgkgwj47us5ca.onion.xml  |  6 ++++-
 src/chrome/content/rules/YIFY_Torrents.xml    |  8 +++++-
 src/chrome/content/rules/Ya.ru.xml            | 15 ++++++++++-
 src/chrome/content/rules/Yahoo_Japan.xml      |  9 ++++++-
 src/chrome/content/rules/Yammer.xml           |  8 +++++-
 src/chrome/content/rules/Yandex.by.xml        | 11 +++++++-
 src/chrome/content/rules/Yandex.com.tr.xml    | 14 +++++++++-
 src/chrome/content/rules/Yandex.com.ua.xml    | 11 +++++++-
 src/chrome/content/rules/Yandex.com.xml       | 13 ++++++++-
 src/chrome/content/rules/Yandex.kz.xml        | 12 ++++++++-
 src/chrome/content/rules/Yandex.ua.xml        |  9 ++++++-
 src/chrome/content/rules/Yannick.net.xml      |  8 +++++-
 src/chrome/content/rules/YieldSelect.com.xml  |  7 ++++-
 src/chrome/content/rules/Youm7.com.xml        |  7 ++++-
 src/chrome/content/rules/Young-Pirates.Eu.xml |  6 ++++-
 .../content/rules/Young_Rewired_State.org.xml |  8 +++++-
 src/chrome/content/rules/YourBittorrent.xml   |  6 ++++-
 src/chrome/content/rules/Yunbi.com.xml        |  7 ++++-
 src/chrome/content/rules/ZZounds.com.xml      |  8 +++++-
 src/chrome/content/rules/Zap_Lab.xml          |  8 +++++-
 src/chrome/content/rules/ZeHosting.xml        |  6 ++++-
 src/chrome/content/rules/Zen-Internet.xml     |  6 ++++-
 src/chrome/content/rules/Zenspider.com.xml    |  8 +++++-
 src/chrome/content/rules/Zerzar.xml           |  9 ++++++-
 src/chrome/content/rules/Zeusclicks.com.xml   |  6 ++++-
 src/chrome/content/rules/Zoho.jp.xml          |  6 ++++-
 src/chrome/content/rules/Zoho.xml             | 17 +++++++++++-
 src/chrome/content/rules/Zugaina.xml          |  8 +++++-
 src/chrome/content/rules/Zumzi.xml            | 11 +++++++-
 src/chrome/content/rules/anibis.ch.xml        |  8 +++++-
 src/chrome/content/rules/avoinministerio.xml  |  9 ++++++-
 src/chrome/content/rules/divShare.xml         |  8 +++++-
 src/chrome/content/rules/eHarmony.xml         |  8 ++++--
 src/chrome/content/rules/kantonalbanken.xml   | 18 ++++++++++++-
 src/chrome/content/rules/migros.xml           | 12 ++++++++-
 src/chrome/content/rules/srg-ssr.xml          |  9 +++++--
 src/chrome/content/rules/swissgov.xml         | 14 +++++++++-
 src/chrome/content/rules/tldrio.xml           |  8 +++++-
 src/chrome/content/rules/tmall.com.xml        |  8 +++++-
 src/chrome/content/rules/upc-cablecom.xml     |  9 +++++--
 744 files changed, 4769 insertions(+), 754 deletions(-)

diff --git a/src/chrome/content/rules/0x539.se.xml b/src/chrome/content/rules/0x539.se.xml
index 6f72cb8c907f..43c02ab07547 100644
--- a/src/chrome/content/rules/0x539.se.xml
+++ b/src/chrome/content/rules/0x539.se.xml
@@ -1,4 +1,10 @@
-<ruleset name="0x539.se">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.0x539.se/ => https://www.0x539.se/: (51, "SSL: no alternative certificate subject name matches target host name 'www.0x539.se'")
+
+-->
+<ruleset name="0x539.se" default_off='failed ruleset test'>
 
 	<target host="0x539.se" />
 	<target host="www.0x539.se" />
diff --git a/src/chrome/content/rules/123-reg.xml b/src/chrome/content/rules/123-reg.xml
index 5e8237ea0185..803ae98ae177 100644
--- a/src/chrome/content/rules/123-reg.xml
+++ b/src/chrome/content/rules/123-reg.xml
@@ -1,4 +1,10 @@
-<ruleset name="123-reg">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://ssllin1.123-secure.com/ (200) => https://ssllin1.123-secure.com/ (404)
+
+-->
+<ruleset name="123-reg" default_off='failed ruleset test'>
 
 	<target host="123-reg.co.uk" />
 	<target host="*.123-reg.co.uk" />
diff --git a/src/chrome/content/rules/1WT.eu.xml b/src/chrome/content/rules/1WT.eu.xml
index 4105beeb0cc7..882453f877d7 100644
--- a/src/chrome/content/rules/1WT.eu.xml
+++ b/src/chrome/content/rules/1WT.eu.xml
@@ -1,4 +1,11 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://1wt.eu/ => https://1wt.eu/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://demo.1wt.eu/ => https://demo.1wt.eu/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://static.1wt.eu/ => https://1wt.eu/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.1wt.eu/ => https://1wt.eu/: (60, 'SSL certificate problem: certificate has expired')
+
 	Problematic subdomains:
 
 		- haproxy ¹
@@ -25,7 +32,7 @@
 	* Secured by us
 
 -->
-<ruleset name="1WT.eu (partial)">
+<ruleset name="1WT.eu (partial)" default_off='failed ruleset test'>
 
 	<target host="1wt.eu" />
 	<target host="demo.1wt.eu" />
diff --git a/src/chrome/content/rules/256.com.xml b/src/chrome/content/rules/256.com.xml
index 0fa1a7e03583..7ae10ec2ebac 100644
--- a/src/chrome/content/rules/256.com.xml
+++ b/src/chrome/content/rules/256.com.xml
@@ -1,10 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://256.com/ => https://256.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.256.com/ => https://256.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Problematic subdomains:
 
 		- www	(cert only matches ^256.com)
 
 -->
-<ruleset name="256.com">
+<ruleset name="256.com" default_off='failed ruleset test'>
 
 	<target host="256.com" />
 	<target host="www.256.com" />
diff --git a/src/chrome/content/rules/2PipFixed.xml b/src/chrome/content/rules/2PipFixed.xml
index 0b23ac4eb093..afe44c8b9b4a 100644
--- a/src/chrome/content/rules/2PipFixed.xml
+++ b/src/chrome/content/rules/2PipFixed.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://2pipfixed.com/ => https://2pipfixed.com/: (35, 'Unknown SSL protocol error in connection to 2pipfixed.com:443 ')
+
 	Mixed content:
 
 		- css on ^ from ^ *
@@ -11,7 +15,7 @@
 	* Secured by us
 
 -->
-<ruleset name="2PipFixed (false MCB)" platform="mixedcontent">
+<ruleset name="2PipFixed (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="2pipfixed.com" />
 	<target host="*.2pipfixed.com" />
diff --git a/src/chrome/content/rules/48months.ie.xml b/src/chrome/content/rules/48months.ie.xml
index 4e7bea2a9cbe..bc0d5864ca2a 100644
--- a/src/chrome/content/rules/48months.ie.xml
+++ b/src/chrome/content/rules/48months.ie.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://48months.ie/ => https://48months.ie/: Too many redirects while fetching 'https://48months.ie/'
+Fetch error: http://www.48months.ie/ => https://www.48months.ie/: Too many redirects while fetching 'https://www.48months.ie/'
+
 	Mixed content:
 
 		- Images on community from i.imgur.com
@@ -9,7 +14,7 @@
 		- community.48months.ie
 
 -->
-<ruleset name="48months.ie">
+<ruleset name="48months.ie" default_off='failed ruleset test'>
 
 	<target host="48months.ie" />
 	<target host="community.48months.ie" />
diff --git a/src/chrome/content/rules/4RunnerForex.com.xml b/src/chrome/content/rules/4RunnerForex.com.xml
index 5b5fbee8ac54..344954b45e83 100644
--- a/src/chrome/content/rules/4RunnerForex.com.xml
+++ b/src/chrome/content/rules/4RunnerForex.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="4RunnerForex.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://4runnerforex.com/ (200) => https://4runnerforex.com/ (521)
+
+-->
+<ruleset name="4RunnerForex.com" default_off='failed ruleset test'>
 
 	<target host="4runnerforex.com" />
 	<target host="*.4runnerforex.com" />
diff --git a/src/chrome/content/rules/500px.com.xml b/src/chrome/content/rules/500px.com.xml
index 39507278cb21..65321f65c15e 100644
--- a/src/chrome/content/rules/500px.com.xml
+++ b/src/chrome/content/rules/500px.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://developers.500px.com/ => https://developers.500px.com/: (51, "SSL: no alternative certificate subject name matches target host name 'developers.500px.com'")
+
 	Other 500px rulesets:
 
 		- 500px.org.xml
@@ -25,7 +29,7 @@
 		- developers.500px.com
 
 -->
-<ruleset name="500px.com">
+<ruleset name="500px.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/500px.org.xml b/src/chrome/content/rules/500px.org.xml
index efbb317c9473..059a149ba983 100644
--- a/src/chrome/content/rules/500px.org.xml
+++ b/src/chrome/content/rules/500px.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://assetcdn.500px.org/ (200) => https://assetcdn.500px.org/ (404)
+
 	For other 500px coverage, see 500px.com.xml.
 
 
@@ -18,7 +22,7 @@
 		- primecdn
 
 -->
-<ruleset name="500px.org">
+<ruleset name="500px.org" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/6Scan.com.xml b/src/chrome/content/rules/6Scan.com.xml
index ed18b739034c..1c85cd8fbb7a 100644
--- a/src/chrome/content/rules/6Scan.com.xml
+++ b/src/chrome/content/rules/6Scan.com.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://api.wp.6scan.com/ => https://api.wp.6scan.com/: (7, 'Failed to connect to api.wp.6scan.com port 443: Connection refused')
+
 	These altnames don't exist:
 
 		- www.api.wp.6scan.com
 
 -->
-<ruleset name="6Scan.com (partial)">
+<ruleset name="6Scan.com (partial)" default_off='failed ruleset test'>
 
 	<target host="api.wp.6scan.com" />
 
diff --git a/src/chrome/content/rules/80s_Purple.com.xml b/src/chrome/content/rules/80s_Purple.com.xml
index bda1a0ece3bd..02569ef9067a 100644
--- a/src/chrome/content/rules/80s_Purple.com.xml
+++ b/src/chrome/content/rules/80s_Purple.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://80spurple.com/ => https://80spurple.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	CDN buckets:
 
 		- smhttp.11993.nexcesscdn.net
@@ -25,7 +29,7 @@
 		- .www
 
 -->
-<ruleset name="80s Purple.com">
+<ruleset name="80s Purple.com" default_off='failed ruleset test'>
 
 	<target host="80spurple.com" />
 	<target host="*.80spurple.com" />
diff --git a/src/chrome/content/rules/A.fsdn.com.xml b/src/chrome/content/rules/A.fsdn.com.xml
index 8339d01eb007..2591a5aba454 100644
--- a/src/chrome/content/rules/A.fsdn.com.xml
+++ b/src/chrome/content/rules/A.fsdn.com.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://a.fsdn.com/ (200) => https://a.fsdn.com/ (500)
+
 	Slashdot stores most of their stuff here.
 
 -->
-<ruleset name="FSDN.com">
+<ruleset name="FSDN.com" default_off='failed ruleset test'>
 
 	<target host="a.fsdn.com" />
 	<target host="c.fsdn.com" />
diff --git a/src/chrome/content/rules/A1-Telekom-Austria.xml b/src/chrome/content/rules/A1-Telekom-Austria.xml
index 2156650e1484..a5d038dfd279 100644
--- a/src/chrome/content/rules/A1-Telekom-Austria.xml
+++ b/src/chrome/content/rules/A1-Telekom-Austria.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://a1community.net/ => https://a1community.net/: (60, 'SSL certificate problem: certificate has expired')
+
 	a1net.i.lithium.com
 
 
@@ -19,7 +23,7 @@
 		- (www.)?telekom.at	(→ www.a1.net)
 
 -->
-<ruleset name="A1 Telekom Austria">
+<ruleset name="A1 Telekom Austria" default_off='failed ruleset test'>
 	<target host="asmp.a1.net" />
 	<target host="cdn1.a1.net" />
 	<target host="cdn2.a1.net" />
diff --git a/src/chrome/content/rules/A1A_Fast_Cash.xml b/src/chrome/content/rules/A1A_Fast_Cash.xml
index 6132f206d634..7e89dbff7dfd 100644
--- a/src/chrome/content/rules/A1A_Fast_Cash.xml
+++ b/src/chrome/content/rules/A1A_Fast_Cash.xml
@@ -1,4 +1,10 @@
-<ruleset name="A1A Fast Cash">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://a1afastcash.com/ => https://a1afastcash.com/: Too many redirects while fetching 'https://a1afastcash.com/'
+
+-->
+<ruleset name="A1A Fast Cash" default_off='failed ruleset test'>
 
 	<target host="a1afastcash.com" />
 	<target host="*.a1afastcash.com" />
diff --git a/src/chrome/content/rules/ADP_Retirement_Services.xml b/src/chrome/content/rules/ADP_Retirement_Services.xml
index f365e2d9f44e..01d77d07689a 100644
--- a/src/chrome/content/rules/ADP_Retirement_Services.xml
+++ b/src/chrome/content/rules/ADP_Retirement_Services.xml
@@ -1,4 +1,10 @@
-<ruleset name="ADP Retirement Services">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mykplan.com/ => https://mykplan.com/: (51, "SSL: no alternative certificate subject name matches target host name 'mykplan.com'")
+
+-->
+<ruleset name="ADP Retirement Services" default_off='failed ruleset test'>
 	<target host="mykplan.com" />
 	<target host="www.mykplan.com" />
 
diff --git a/src/chrome/content/rules/ALDI.xml b/src/chrome/content/rules/ALDI.xml
index df5b278d0b70..3caa4ae92c3e 100644
--- a/src/chrome/content/rules/ALDI.xml
+++ b/src/chrome/content/rules/ALDI.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.aldi.us/ => https://www.aldi.us/: (28, 'Operation timed out after 0 milliseconds with 0 out of 0 bytes received')
+Fetch error: http://hofer.si/ => https://hofer.si/: (51, "SSL: no alternative certificate subject name matches target host name 'hofer.si'")
+
 Missmatch:
 	- games.aldi-sued.de
 	- games.aldi-suisse.ch
@@ -23,7 +28,7 @@ Refused:
 	- transparenz.aldi-nord.de
 	- *aldi.com
 -->
-<ruleset name="Aldi">
+<ruleset name="Aldi" default_off='failed ruleset test'>
 	<target host="aldi-mobile.ch"/>
 	<target host="www.aldi-mobile.ch"/>
 	<target host="mypages.aldi-mobile.ch"/>
diff --git a/src/chrome/content/rules/AS112.net.xml b/src/chrome/content/rules/AS112.net.xml
index 1f7de1c42da0..83852921a26c 100644
--- a/src/chrome/content/rules/AS112.net.xml
+++ b/src/chrome/content/rules/AS112.net.xml
@@ -1,4 +1,10 @@
-<ruleset name="AS112.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://as112.net/ => https://as112.net/: (51, "SSL: no alternative certificate subject name matches target host name 'as112.net'")
+
+-->
+<ruleset name="AS112.net" default_off='failed ruleset test'>
 
 	<target host="as112.net" />
 	<target host="www.as112.net" />
diff --git a/src/chrome/content/rules/ATBank.xml b/src/chrome/content/rules/ATBank.xml
index 29625fe0ea3c..1067657aea48 100644
--- a/src/chrome/content/rules/ATBank.xml
+++ b/src/chrome/content/rules/ATBank.xml
@@ -1,4 +1,11 @@
-<ruleset name="ATBank">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.atbank.nl/ => https://www.atbank.nl/: (28, 'Resolving timed out after 10518 milliseconds')
+Fetch error: http://atbank.nl/ => https://atbank.nl/: (28, 'Resolving timed out after 10517 milliseconds')
+
+-->
+<ruleset name="ATBank" default_off='failed ruleset test'>
 	<!-- Rule created by Jeroen van der Gun -->
 
 	<target host="www.atbank.nl" />
diff --git a/src/chrome/content/rules/AXA.xml b/src/chrome/content/rules/AXA.xml
index 30448946e7a0..e21329c7aaff 100644
--- a/src/chrome/content/rules/AXA.xml
+++ b/src/chrome/content/rules/AXA.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://creativegallery.axa.com/ => https://creativegallery.axa.com/: (6, 'Could not resolve host: creativegallery.axa.com')
+
 	Nonfunctional subdomains:
 
 		- (www.) *
@@ -9,7 +13,7 @@
 	* Times out
 
 -->
-<ruleset name="AXA (partial)">
+<ruleset name="AXA (partial)" default_off='failed ruleset test'>
 
 	<target host="creativegallery.axa.com" />
 
diff --git a/src/chrome/content/rules/A_Bigger_Society.com.xml b/src/chrome/content/rules/A_Bigger_Society.com.xml
index a38b913cb568..8832b7732b0a 100644
--- a/src/chrome/content/rules/A_Bigger_Society.com.xml
+++ b/src/chrome/content/rules/A_Bigger_Society.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://abiggersociety.com/ => https://abiggersociety.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	Mixed content:
 
 		- css from fonts.googleapis.com *
@@ -6,7 +10,7 @@
 	* Secured by us
 
 -->
-<ruleset name="A Bigger Society.com">
+<ruleset name="A Bigger Society.com" default_off='failed ruleset test'>
 
 	<target host="abiggersociety.com" />
 	<target host="*.abiggersociety.com" />
diff --git a/src/chrome/content/rules/AccesstoJustice.xml b/src/chrome/content/rules/AccesstoJustice.xml
index bf525365e7dd..7b134c781098 100644
--- a/src/chrome/content/rules/AccesstoJustice.xml
+++ b/src/chrome/content/rules/AccesstoJustice.xml
@@ -1,4 +1,10 @@
-<ruleset name="Access to Justice">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://accesstojustice.gov.au/ => https://www.accesstojustice.gov.au/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Access to Justice" default_off='failed ruleset test'>
 	<target host="accesstojustice.gov.au" />
 	<target host="*.accesstojustice.gov.au" />
 
diff --git a/src/chrome/content/rules/Accuen.xml b/src/chrome/content/rules/Accuen.xml
index 4116a0fca2da..f97ed5bb1530 100644
--- a/src/chrome/content/rules/Accuen.xml
+++ b/src/chrome/content/rules/Accuen.xml
@@ -1,7 +1,11 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://d.p-td.com/ => https://d.p-td.com/: (28, 'Connection timed out after 10000 milliseconds')
+
 	For problematic rules, see Accuen-problematic.xml.
 -->
-<ruleset name="Accuen (partial)">
+<ruleset name="Accuen (partial)" default_off='failed ruleset test'>
 
 	<target host="d.p-td.com" />
 
diff --git a/src/chrome/content/rules/Actel.com.xml b/src/chrome/content/rules/Actel.com.xml
index 955ed878b640..d4844bc5571d 100644
--- a/src/chrome/content/rules/Actel.com.xml
+++ b/src/chrome/content/rules/Actel.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="Actel.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://actel.com/ => https://www.actel.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.actel.com/ => https://www.actel.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Actel.com" default_off='failed ruleset test'>
   <target host="actel.com" />
   <target host="www.actel.com" />
 
diff --git a/src/chrome/content/rules/Action-Auto-Wreckers.xml b/src/chrome/content/rules/Action-Auto-Wreckers.xml
index 584a4a736e26..3c6d02371169 100644
--- a/src/chrome/content/rules/Action-Auto-Wreckers.xml
+++ b/src/chrome/content/rules/Action-Auto-Wreckers.xml
@@ -1,4 +1,11 @@
-<ruleset name="Action Auto Wreckers">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://actionsalvage.com/ => https://www.actionsalvage.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.actionsalvage.com'")
+Fetch error: http://www.actionsalvage.com/ => https://www.actionsalvage.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.actionsalvage.com'")
+
+-->
+<ruleset name="Action Auto Wreckers" default_off='failed ruleset test'>
 
 	<target host="actionsalvage.com" />
 	<target host="www.actionsalvage.com" />
diff --git a/src/chrome/content/rules/Active_Melody.xml b/src/chrome/content/rules/Active_Melody.xml
index 5c3a8feb6f50..72849c9ce12f 100644
--- a/src/chrome/content/rules/Active_Melody.xml
+++ b/src/chrome/content/rules/Active_Melody.xml
@@ -1,4 +1,10 @@
-<ruleset name="Active Melody">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://activemelody.com/ => https://activemelody.com/: Too many redirects while fetching 'https://activemelody.com/'
+
+-->
+<ruleset name="Active Melody" default_off='failed ruleset test'>
 
 	<target host="activemelody.com" />
 	<target host="*.activemelody.com" />
diff --git a/src/chrome/content/rules/Acxiom-online.com.xml b/src/chrome/content/rules/Acxiom-online.com.xml
index 9f6d57d013a7..5944f25eab19 100644
--- a/src/chrome/content/rules/Acxiom-online.com.xml
+++ b/src/chrome/content/rules/Acxiom-online.com.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://p.acxiom-online.com/ => https://p.acxiom-online.com/: (6, 'Could not resolve host: p.acxiom-online.com')
+
 	(www.) do not exist.
 
 
 	Web bugs.
 
 -->
-<ruleset name="Acxiom-online.com">
+<ruleset name="Acxiom-online.com" default_off='failed ruleset test'>
 
 	<target host="p.acxiom-online.com" />
 
diff --git a/src/chrome/content/rules/Adap.TV.xml b/src/chrome/content/rules/Adap.TV.xml
index 1302b1c370b6..616d5dba7cd1 100644
--- a/src/chrome/content/rules/Adap.TV.xml
+++ b/src/chrome/content/rules/Adap.TV.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.adap.tv/ => https://www.adap.tv/: (51, "SSL: no alternative certificate subject name matches target host name 'www.adap.tv'")
+
 	For other AOL coverage, see AOL.xml.
 
 
@@ -12,7 +16,7 @@
 		- sync
 
 -->
-<ruleset name="Adap.TV">
+<ruleset name="Adap.TV" default_off='failed ruleset test'>
 
 	<target host="adap.tv" />
 	<target host="ads.adap.tv" />
diff --git a/src/chrome/content/rules/Adaptive_Computing.xml b/src/chrome/content/rules/Adaptive_Computing.xml
index f756ba54f1c9..0547f9571d75 100644
--- a/src/chrome/content/rules/Adaptive_Computing.xml
+++ b/src/chrome/content/rules/Adaptive_Computing.xml
@@ -1,4 +1,11 @@
-<ruleset name="Adaptive Computing">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://adaptivecomputing.com/ => https://adaptivecomputing.com/: Too many redirects while fetching 'https://adaptivecomputing.com/'
+Fetch error: http://www.adaptivecomputing.com/ => https://www.adaptivecomputing.com/: Too many redirects while fetching 'https://www.adaptivecomputing.com/'
+
+-->
+<ruleset name="Adaptive Computing" default_off='failed ruleset test'>
 
 	<target host="adaptivecomputing.com" />
 	<target host="www.adaptivecomputing.com" />
diff --git a/src/chrome/content/rules/Addictech.xml b/src/chrome/content/rules/Addictech.xml
index d5c6a6306b3d..32b04ad0a6c4 100644
--- a/src/chrome/content/rules/Addictech.xml
+++ b/src/chrome/content/rules/Addictech.xml
@@ -1,4 +1,11 @@
-<ruleset name="Addictech">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://addictech.com/ => https://www.addictech.com/: Too many redirects while fetching 'https://www.addictech.com/'
+Fetch error: http://www.addictech.com/ => https://www.addictech.com/: Too many redirects while fetching 'https://www.addictech.com/'
+
+-->
+<ruleset name="Addictech" default_off='failed ruleset test'>
   <target host="addictech.com" />
   <target host="www.addictech.com" />
   <target host="assets.musicwindow.com" />
diff --git a/src/chrome/content/rules/Addison_Lee.xml b/src/chrome/content/rules/Addison_Lee.xml
index cc25d80edca5..473435c895b4 100644
--- a/src/chrome/content/rules/Addison_Lee.xml
+++ b/src/chrome/content/rules/Addison_Lee.xml
@@ -1,4 +1,10 @@
-<ruleset name="Addison Lee">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://addisonlee.com/ => https://www.addisonlee.com/: Too many redirects while fetching 'https://www.addisonlee.com/'
+
+-->
+<ruleset name="Addison Lee" default_off='failed ruleset test'>
     <target host="addisonlee.com" />
     <target host="*.addisonlee.com" />
 
diff --git a/src/chrome/content/rules/Adnet.xml b/src/chrome/content/rules/Adnet.xml
index 7bac98e8e5ab..d7a4a9c5e997 100644
--- a/src/chrome/content/rules/Adnet.xml
+++ b/src/chrome/content/rules/Adnet.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cdn.adnet-media.net/ => https://cdn.adnet-media.net/: (6, 'Could not resolve host: cdn.adnet-media.net')
+
 	Nonfunctional domains:
 
 		- (www.)adnetdigitalmedia.com
 
 -->
-<ruleset name="Adnet (partial)">
+<ruleset name="Adnet (partial)" default_off='failed ruleset test'>
 
 	<target host="cdn.adnet-media.net" />
 
diff --git a/src/chrome/content/rules/Adobe.xml b/src/chrome/content/rules/Adobe.xml
index d89b0ddf6802..05d539caca76 100644
--- a/src/chrome/content/rules/Adobe.xml
+++ b/src/chrome/content/rules/Adobe.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://aihdownload.adobe.com/ => https://aihdownload.adobe.com/: (6, 'Could not resolve host: aihdownload.adobe.com')
+
 	For problematic rules, see Adobe-mismatches.xml.
 
 
@@ -187,7 +191,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Adobe.com">
+<ruleset name="Adobe.com" default_off='failed ruleset test'>
 
 	<target host="adobe.com" />
 	<target host="aihdownload.adobe.com" />
diff --git a/src/chrome/content/rules/AeXp-static.com.xml b/src/chrome/content/rules/AeXp-static.com.xml
index 1f0bfd2a4504..f1ffc24199db 100644
--- a/src/chrome/content/rules/AeXp-static.com.xml
+++ b/src/chrome/content/rules/AeXp-static.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://qwww.aexp-static.com/ (200) => https://qwww.aexp-static.com/ (404)
+Non-2xx HTTP code: http://www.aexp-static.com/ (200) => https://www.aexp-static.com/ (404)
+
 	For other American Express coverage, see AmericanExpress.xml.
 
 
@@ -10,7 +15,7 @@
 		- www
 
 -->
-<ruleset name="AeXp-static.com">
+<ruleset name="AeXp-static.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Aereo.com.xml b/src/chrome/content/rules/Aereo.com.xml
index 9867aa88563d..e9ab5436a2ac 100644
--- a/src/chrome/content/rules/Aereo.com.xml
+++ b/src/chrome/content/rules/Aereo.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://aereo.com/ => https://aereo.com/: (6, 'Could not resolve host: aereo.com')
+
 	For problematic rules, see Aereo.com-problematic.xml.
 
 
@@ -17,7 +21,7 @@
 		- blog		(works; expired 2013-04-08; mismatched, CN: *.bamboom.com)
 
 -->
-<ruleset name="Aereo.com (partial)">
+<ruleset name="Aereo.com (partial)" default_off='failed ruleset test'>
 
 	<target host="aereo.com" />
 	<target host="*.aereo.com" />
diff --git a/src/chrome/content/rules/Aftonbladet-CDN.se.xml b/src/chrome/content/rules/Aftonbladet-CDN.se.xml
index b946578074e7..7c809ecf0332 100644
--- a/src/chrome/content/rules/Aftonbladet-CDN.se.xml
+++ b/src/chrome/content/rules/Aftonbladet-CDN.se.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://gfx.aftonbladet-cdn.se/ => https://www.aftonbladet.se/: Too many redirects while fetching 'https://www.aftonbladet.se/'
+Fetch error: http://gfx2.aftonbladet-cdn.se/ => https://www.aftonbladet.se/: Too many redirects while fetching 'https://www.aftonbladet.se/'
+
 	For other Aftonbladet coverage, see Aftonbladet.xml.
 
 
@@ -16,7 +21,7 @@
 		- gfx2.aftonbladet-cdn.se	(→ www.aftonbladet.se)
 
 -->
-<ruleset name="Aftonbladet-CDN.se">
+<ruleset name="Aftonbladet-CDN.se" default_off='failed ruleset test'>
 
 	<!--	Special cases:
 				-->
diff --git a/src/chrome/content/rules/Aftonbladet.xml b/src/chrome/content/rules/Aftonbladet.xml
index 6f64a501c14c..2bab922d04c1 100644
--- a/src/chrome/content/rules/Aftonbladet.xml
+++ b/src/chrome/content/rules/Aftonbladet.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.aftonbladet.se/ => https://www.aftonbladet.se/: Too many redirects while fetching 'https://www.aftonbladet.se/'
+Fetch error: http://aftonbladet.se/ => https://www.aftonbladet.se/: Too many redirects while fetching 'https://www.aftonbladet.se/'
+
 	Other Aftonbladet rulesets:
 
 		- Aftonbladet-CDN.se.xml
@@ -35,7 +40,7 @@
 		- ads.aftonbladet.se
 
 -->
-<ruleset name="Aftonbladet.se (partial)">
+<ruleset name="Aftonbladet.se (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Afx.ms.xml b/src/chrome/content/rules/Afx.ms.xml
index 3a1d37544415..5bacf5ee902b 100644
--- a/src/chrome/content/rules/Afx.ms.xml
+++ b/src/chrome/content/rules/Afx.ms.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://dub002.afx.ms/ => https://dub002.afx.ms/: (35, 'Unknown SSL protocol error in connection to dub002.afx.ms:443 ')
+Fetch error: http://dub101.afx.ms/ => https://dub101.afx.ms/: (28, 'Connection timed out after 10000 milliseconds')
+
 	For other Microsoft coverage, see Microsoft.xml.
 
 
@@ -12,7 +17,7 @@
 			- dub12[0-4]
 
 -->
-<ruleset name="afx.ms">
+<ruleset name="afx.ms" default_off='failed ruleset test'>
 
 	<target host="*.afx.ms" />
 
diff --git a/src/chrome/content/rules/AgKn.com.xml b/src/chrome/content/rules/AgKn.com.xml
index 09a53b46d2e5..f3997903e774 100644
--- a/src/chrome/content/rules/AgKn.com.xml
+++ b/src/chrome/content/rules/AgKn.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://d.agkn.com/ => https://d.agkn.com/: (6, 'Could not resolve host: www.404.html')
+
 	For other Neustar coverage, see NeuStar.xml.
 
 
@@ -7,7 +11,7 @@
 		- .agkn.com
 
 -->
-<ruleset name="AgKn.com">
+<ruleset name="AgKn.com" default_off='failed ruleset test'>
 
 	<target host="d.agkn.com" />
 
diff --git a/src/chrome/content/rules/Agora_Voting.com.xml b/src/chrome/content/rules/Agora_Voting.com.xml
index 980779cb837b..ec8536288a29 100644
--- a/src/chrome/content/rules/Agora_Voting.com.xml
+++ b/src/chrome/content/rules/Agora_Voting.com.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://www.agoravoting.com/ (200) => https://www.agoravoting.com/ (520)
+
 	Insecure cookies are set for these domains:
 
 		- .agoravoting.com
 
 -->
-<ruleset name="Agora Voting.com">
+<ruleset name="Agora Voting.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Alfa-Media-Partner.xml b/src/chrome/content/rules/Alfa-Media-Partner.xml
index 5a67a725de97..d714661433dd 100644
--- a/src/chrome/content/rules/Alfa-Media-Partner.xml
+++ b/src/chrome/content/rules/Alfa-Media-Partner.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://sso.alfa-openmedia.de/ => https://sso.alfa-openmedia.de/: (7, 'Failed to connect to sso.alfa-openmedia.de port 443: Connection refused')
+
 	Nonfunctional domains:
 
 		- www-ecms.alfa.de	(cert: sso.alfa-openmedia.de; shows that domain's data)
 
 -->
-<ruleset name="alfa Media Partner (partial)">
+<ruleset name="alfa Media Partner (partial)" default_off='failed ruleset test'>
 
 	<target host="owa.alfa.de" />
 	<target host="sso.alfa-openmedia.de" />
diff --git a/src/chrome/content/rules/Alibaba.xml b/src/chrome/content/rules/Alibaba.xml
index 6d756d382f3c..6110ee1c00f6 100644
--- a/src/chrome/content/rules/Alibaba.xml
+++ b/src/chrome/content/rules/Alibaba.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://escrow.alibaba.com/ => https://escrow.alibaba.com/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Other Alibaba rulesets:
 
 		- AliCDN.com.xml
@@ -81,7 +85,7 @@
 		- stylessl
 
 -->
-<ruleset name="Alibaba.com (partial)">
+<ruleset name="Alibaba.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Alipay.com.xml b/src/chrome/content/rules/Alipay.com.xml
index 13e7ce542393..a80586335256 100644
--- a/src/chrome/content/rules/Alipay.com.xml
+++ b/src/chrome/content/rules/Alipay.com.xml
@@ -1,4 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://alipay.com/ => https://www.alipay.com/: (28, 'Operation timed out after 15000 milliseconds with 32013 bytes received')
+Fetch error: http://ccprod.alipay.com/ => https://ccprod.alipay.com/: (6, 'Could not resolve host: ccprod.alipay.com')
+Fetch error: http://mbuf.alipay.com/ => https://mbuf.alipay.com/: (6, 'Could not resolve host: mbuf.alipay.com')
+Fetch error: http://mobile.alipay.com/ => https://mobile.alipay.com/: Too many redirects while fetching 'https://mobile.alipay.com/'
+Fetch error: http://shanghu.alipay.com/ => https://shanghu.alipay.com/: (28, 'Operation timed out after 0 milliseconds with 0 out of 0 bytes received')
+Fetch error: http://zht.alipay.com/ => https://zht.alipay.com/: (28, 'Operation timed out after 0 milliseconds with 0 out of 0 bytes received')
+
 	For rules subject to javascript redirect loops, see Alipay.com-noscript.xml.
 
 	For other Alibaba coverage, see Alibaba.xml.
@@ -23,7 +32,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Alipay.com (partial)">
+<ruleset name="Alipay.com (partial)" default_off='failed ruleset test'>
 	<target host="alipay.com" />
 	<target host="www.alipay.com" />
 	<target host="110.alipay.com" />
diff --git a/src/chrome/content/rules/AllThingsD.xml b/src/chrome/content/rules/AllThingsD.xml
index 1e7eb65a98c2..ee4fa749132c 100644
--- a/src/chrome/content/rules/AllThingsD.xml
+++ b/src/chrome/content/rules/AllThingsD.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mediamemo.allthingsd.com/ => https://mediamemo.allthingsd.com/: (51, "SSL: no alternative certificate subject name matches target host name 'mediamemo.allthingsd.com'")
+Fetch error: http://profiles.allthingsd.com/ => https://profiles.allthingsd.com/: (6, 'Could not resolve host: profiles.allthingsd.com')
+
 	For problematic rules, see AllThingsD.com-problematic.xml.
 
 
@@ -24,7 +29,7 @@
 		- profiles
 
 -->
-<ruleset name="AllThingsD (partial)">
+<ruleset name="AllThingsD (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Allizom.org.xml b/src/chrome/content/rules/Allizom.org.xml
index 4b6bbccc8777..2ad64ea38503 100644
--- a/src/chrome/content/rules/Allizom.org.xml
+++ b/src/chrome/content/rules/Allizom.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://developer-dev.allizom.org/ (200) => https://developer-dev.allizom.org/ (403)
+
 	For other Mozilla coverage, see Mozilla.xml.
 
 
@@ -24,7 +28,7 @@
 	* Not secured by us <= mismatched
 
 -->
-<ruleset name="Allizom.org">
+<ruleset name="Allizom.org" default_off='failed ruleset test'>
 
 	<target host="allizom.org" />
 	<target host="bugzilla-dev.allizom.org" />
diff --git a/src/chrome/content/rules/Ally_Financial.xml b/src/chrome/content/rules/Ally_Financial.xml
index be3babaed1b5..18026d13e29f 100644
--- a/src/chrome/content/rules/Ally_Financial.xml
+++ b/src/chrome/content/rules/Ally_Financial.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.smartauction.biz/ => https://www.smartauction.biz/: (60, 'SSL certificate problem: certificate has expired')
+
 	For problematic rules, see Ally_Financial-problematic.xml.
 
 
@@ -29,7 +33,7 @@
 		- www.smartauction.biz
 
 -->
-<ruleset name="Ally Financial (partial)">
+<ruleset name="Ally Financial (partial)" default_off='failed ruleset test'>
 
 	<target host="ally.com" />
 	<target host="*.ally.com" />
diff --git a/src/chrome/content/rules/Alternatif_Bilisim.org.xml b/src/chrome/content/rules/Alternatif_Bilisim.org.xml
index 7816e1501742..eea3f86d5883 100644
--- a/src/chrome/content/rules/Alternatif_Bilisim.org.xml
+++ b/src/chrome/content/rules/Alternatif_Bilisim.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://alternatifbilisim.org/ => https://alternatifbilisim.org/: (60, 'SSL certificate problem: certificate has expired')
+
 	Mixed content:
 
 		- Images on www from $self *
@@ -8,7 +12,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Alternatif Bilisim.org">
+<ruleset name="Alternatif Bilisim.org" default_off='failed ruleset test'>
 
 	<target host="alternatifbilisim.org" />
 	<target host="*.alternatifbilisim.org" />
diff --git a/src/chrome/content/rules/Alternativeto.net.xml b/src/chrome/content/rules/Alternativeto.net.xml
index d91ae9f885ff..3c8f11bda039 100644
--- a/src/chrome/content/rules/Alternativeto.net.xml
+++ b/src/chrome/content/rules/Alternativeto.net.xml
@@ -1,4 +1,10 @@
-<ruleset name="Alternativeto.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.alternativeto.net/ => https://www.alternativeto.net/: (51, "SSL: no alternative certificate subject name matches target host name 'www.alternativeto.net'")
+
+-->
+<ruleset name="Alternativeto.net" default_off='failed ruleset test'>
   <target host="alternativeto.net" />
   <target host="www.alternativeto.net" />
 
diff --git a/src/chrome/content/rules/AmazonAWS.xml b/src/chrome/content/rules/AmazonAWS.xml
index 4691dddbc368..4a38202c4fa6 100644
--- a/src/chrome/content/rules/AmazonAWS.xml
+++ b/src/chrome/content/rules/AmazonAWS.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://ec2.images-amazon.com/ (200) => https://images-na.ssl-images-amazon.com/ (403)
+
 	Note: This rule generates incorrect "Cycle detected" errors
 	from https-everywhere-checker, because forums.aws.amazon.com
 	will go into a redirect loop if a client does not handle
@@ -95,7 +99,7 @@
 		- z-ak.images-amazon.com
 
 -->
-<ruleset name="Amazon Web Services">
+<ruleset name="Amazon Web Services" default_off='failed ruleset test'>
 
 	<target host="fls-eu.amazon.co.uk" />
 	<target host="aws.amazon.com" />
diff --git a/src/chrome/content/rules/American-Chemical-Society.xml b/src/chrome/content/rules/American-Chemical-Society.xml
index 97bf751f2fe5..8b44cebf6ce1 100644
--- a/src/chrome/content/rules/American-Chemical-Society.xml
+++ b/src/chrome/content/rules/American-Chemical-Society.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://acs.org/ => https://acs.org/: Too many redirects while fetching 'https://acs.org/'
+
 	American Chemical Society
 
 	For problematic rules, see American_Chemical_Society-problematic.xml.
@@ -66,7 +70,7 @@
 		- www.yellowbook
 
 -->
-<ruleset name="ACS.org (partial)">
+<ruleset name="ACS.org (partial)" default_off='failed ruleset test'>
 
 	<target host="acs.org" />
 	<target host="*.acs.org" />
diff --git a/src/chrome/content/rules/AmericanExpress.xml b/src/chrome/content/rules/AmericanExpress.xml
index 9c00e113a67e..b0f3849db0d6 100644
--- a/src/chrome/content/rules/AmericanExpress.xml
+++ b/src/chrome/content/rules/AmericanExpress.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://axptravel.americanexpress.com/ (200) => https://axptravel.americanexpress.com/ (404)
+
 	Other American Express rulesets:
 
 		- AeXp-static.com.xml
@@ -85,7 +89,7 @@
 <!-- Thanks to ForceTLS -->
 <!-- Note that there are lots of subdomains and some are still unprotected,
      but some don't work properly in HTTPS anyway.  This is kind of a mess. -->
-<ruleset name="AmericanExpress.com (partial)">
+<ruleset name="AmericanExpress.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Amnesty-International.xml b/src/chrome/content/rules/Amnesty-International.xml
index 99d949adad69..9deda55a2687 100644
--- a/src/chrome/content/rules/Amnesty-International.xml
+++ b/src/chrome/content/rules/Amnesty-International.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://files.amnesty.org/ => https://files.amnesty.org/: (7, 'Failed to connect to files.amnesty.org port 443: Connection refused')
+
 	Other Amnesty International rulesets:
 
 		- Amnesty.fr.xml
@@ -33,7 +37,7 @@
 		- .www.amnesty.org
 
 -->
-<ruleset name="Amnesty.org (partial)">
+<ruleset name="Amnesty.org (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Anonbox.net.xml b/src/chrome/content/rules/Anonbox.net.xml
index ff0e73bac035..15ed7e2fc3c6 100644
--- a/src/chrome/content/rules/Anonbox.net.xml
+++ b/src/chrome/content/rules/Anonbox.net.xml
@@ -1,4 +1,10 @@
-<ruleset name="anonbox.net" platform="cacert">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://anonbox.net/ => https://anonbox.net/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
+-->
+<ruleset name="anonbox.net" platform="cacert" default_off='failed ruleset test'>
 	<target host="anonbox.net" />
 
 	<rule from="^http:"
diff --git a/src/chrome/content/rules/Ansible.com.xml b/src/chrome/content/rules/Ansible.com.xml
index 8a1cd6cdfeaa..4eef9e108325 100644
--- a/src/chrome/content/rules/Ansible.com.xml
+++ b/src/chrome/content/rules/Ansible.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ansible.com/ => https://ansible.com/: (28, 'Connection timed out after 10000 milliseconds')
+
 	For problematic rules, see Ansible.com-problematic.xml.
 
 
@@ -41,7 +45,7 @@
 	² Secured by us
 
 -->
-<ruleset name="Ansible.com (partial)">
+<ruleset name="Ansible.com (partial)" default_off='failed ruleset test'>
 
 	<target host="ansible.com" />
 	<target host="*.ansible.com" />
diff --git a/src/chrome/content/rules/Appseccalifornia.org.xml b/src/chrome/content/rules/Appseccalifornia.org.xml
index 17e472a2ebc6..88344c5fd114 100644
--- a/src/chrome/content/rules/Appseccalifornia.org.xml
+++ b/src/chrome/content/rules/Appseccalifornia.org.xml
@@ -1,4 +1,8 @@
-<!-- This rule was automatically generated based on an HSTS
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://appseccalifornia.org/ => https://appseccalifornia.org/: (7, 'Failed to connect to appseccalifornia.org port 443: Connection refused')
+ This rule was automatically generated based on an HSTS
      preload rule in the Chromium browser.  See
      https://src.chromium.org/viewvc/chrome/trunk/src/net/http/transport_security_state_static.h
      for the list of preloads.  Sites are added to the Chromium HSTS
@@ -7,7 +11,7 @@
 
      Because Chromium and derived browsers automatically force HTTPS for
      every access to this site, this rule applies only to Firefox. -->
-<ruleset name="Appseccalifornia.org" platform="firefox">
+<ruleset name="Appseccalifornia.org" platform="firefox" default_off='failed ruleset test'>
 <target host="appseccalifornia.org" />
 
 <securecookie host="^appseccalifornia\.org$" name=".+" />
diff --git a/src/chrome/content/rules/Arachnys.xml b/src/chrome/content/rules/Arachnys.xml
index a7a09395536e..7c422d19ae78 100644
--- a/src/chrome/content/rules/Arachnys.xml
+++ b/src/chrome/content/rules/Arachnys.xml
@@ -1,4 +1,10 @@
-<ruleset name="Arachnys">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://arachnys.com/ => https://arachnys.com/: (35, 'Unknown SSL protocol error in connection to arachnys.com:443 ')
+
+-->
+<ruleset name="Arachnys" default_off='failed ruleset test'>
 
 	<target host="arachnys.com" />
 	<target host="*.arachnys.com" />
diff --git a/src/chrome/content/rules/Arte_do_Lar.com.br.xml b/src/chrome/content/rules/Arte_do_Lar.com.br.xml
index 516a4b0799e8..9c22fc502928 100644
--- a/src/chrome/content/rules/Arte_do_Lar.com.br.xml
+++ b/src/chrome/content/rules/Arte_do_Lar.com.br.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://artedolar.com.br/ => https://artedolar.com.br/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Mixed content:
 
 		- Image from $self *
@@ -6,7 +10,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Arte do Lar.com.br">
+<ruleset name="Arte do Lar.com.br" default_off='failed ruleset test'>
 
 	<target host="artedolar.com.br" />
 	<target host="*.artedolar.com.br" />
diff --git a/src/chrome/content/rules/AustralianEducationInternational.xml b/src/chrome/content/rules/AustralianEducationInternational.xml
index 524ef8fcac77..92e8c939f2d3 100644
--- a/src/chrome/content/rules/AustralianEducationInternational.xml
+++ b/src/chrome/content/rules/AustralianEducationInternational.xml
@@ -1,4 +1,10 @@
-<ruleset name="Australian Education International">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://aei.gov.au/ => https://aei.gov.au/: (28, 'Resolving timed out after 10519 milliseconds')
+
+-->
+<ruleset name="Australian Education International" default_off='failed ruleset test'>
 	<target host="aei.gov.au" />
 	<target host="*.aei.gov.au" />
 
diff --git a/src/chrome/content/rules/Auto_VPS.net.xml b/src/chrome/content/rules/Auto_VPS.net.xml
index 1dd04ed3362b..edf09810a27e 100644
--- a/src/chrome/content/rules/Auto_VPS.net.xml
+++ b/src/chrome/content/rules/Auto_VPS.net.xml
@@ -1,4 +1,10 @@
-<ruleset name="Auto VPS.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://autovps.net/ => https://autovps.net/: (28, 'Connection timed out after 10000 milliseconds')
+
+-->
+<ruleset name="Auto VPS.net" default_off='failed ruleset test'>
 
 	<target host="autovps.net" />
 	<target host="*.autovps.net" />
diff --git a/src/chrome/content/rules/Autobytel.com.xml b/src/chrome/content/rules/Autobytel.com.xml
index b4b6f24ac393..3700dd73ba9a 100644
--- a/src/chrome/content/rules/Autobytel.com.xml
+++ b/src/chrome/content/rules/Autobytel.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://autobytel.com/ => https://autobytel.com/: (35, 'Unknown SSL protocol error in connection to autobytel.com:443 ')
+Fetch error: http://hybrid.autobytel.com/ => https://hybrid.autobytel.com/: (35, 'Unknown SSL protocol error in connection to hybrid.autobytel.com:443 ')
+
 	For rules causing broken MCB, see Autobytel.com-falsemixed.xml.
 
 
@@ -67,7 +72,7 @@
 	² Unsecurable
 
 -->
-<ruleset name="Autobytel.com (partial)">
+<ruleset name="Autobytel.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Automatak.net.xml b/src/chrome/content/rules/Automatak.net.xml
index 099790630968..817708b0ebcb 100644
--- a/src/chrome/content/rules/Automatak.net.xml
+++ b/src/chrome/content/rules/Automatak.net.xml
@@ -1,4 +1,11 @@
-<ruleset name="Automatak.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://automatak.net/ => https://automatak.net/: (51, "SSL: no alternative certificate subject name matches target host name 'automatak.net'")
+Fetch error: http://www.automatak.net/ => https://www.automatak.net/: (51, "SSL: no alternative certificate subject name matches target host name 'www.automatak.net'")
+
+-->
+<ruleset name="Automatak.net" default_off='failed ruleset test'>
 
 	<target host="automatak.net" />
 	<target host="www.automatak.net" />
diff --git a/src/chrome/content/rules/Avropa.se.xml b/src/chrome/content/rules/Avropa.se.xml
index bb6a04919085..4879de012058 100644
--- a/src/chrome/content/rules/Avropa.se.xml
+++ b/src/chrome/content/rules/Avropa.se.xml
@@ -1,4 +1,11 @@
-<ruleset name="Avropa.se">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.avropa.se/ => https://www.avropa.se/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://avropa.se/ => https://avropa.se/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
+-->
+<ruleset name="Avropa.se" default_off='failed ruleset test'>
   <target host="www.avropa.se" />
   <target host="avropa.se" />
   <rule from="^http://www\.avropa\.se/" to="https://www.avropa.se/"/>
diff --git a/src/chrome/content/rules/Awe.sm.xml b/src/chrome/content/rules/Awe.sm.xml
index 914cdf872492..b6b638bb8f89 100644
--- a/src/chrome/content/rules/Awe.sm.xml
+++ b/src/chrome/content/rules/Awe.sm.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://widgets.awe.sm/ => https://widgets.awe.sm/: Too many redirects while fetching 'https://widgets.awe.sm/'
+
 	For other Unified Social coverage, see Unified_Social.com.xml.
 
 
@@ -25,7 +29,7 @@
 		- .awe.sm
 
 -->
-<ruleset name="awe.sm (partial)">
+<ruleset name="awe.sm (partial)" default_off='failed ruleset test'>
 
 	<target host="awe.sm" />
 	<target host="blog.awe.sm" />
diff --git a/src/chrome/content/rules/BTCZone.xml b/src/chrome/content/rules/BTCZone.xml
index 72cdefd8f3af..bc7885f033f9 100644
--- a/src/chrome/content/rules/BTCZone.xml
+++ b/src/chrome/content/rules/BTCZone.xml
@@ -1,4 +1,11 @@
-<ruleset name="BTCZone">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://btczone.com/ => https://btczone.com/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://www.btczone.com/ => https://www.btczone.com/: (28, 'Connection timed out after 10000 milliseconds')
+
+-->
+<ruleset name="BTCZone" default_off='failed ruleset test'>
 
 	<target host="btczone.com" />
 	<target host="www.btczone.com" />
diff --git a/src/chrome/content/rules/BW.com.xml b/src/chrome/content/rules/BW.com.xml
index cbc1033fb4a3..7a2b9e8adb91 100644
--- a/src/chrome/content/rules/BW.com.xml
+++ b/src/chrome/content/rules/BW.com.xml
@@ -1,4 +1,10 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bw.com/ => https://bw.com/: (28, 'Connection timed out after 10000 milliseconds')
+
+-->
+
 <!--
 	^: Dropped
 
@@ -9,7 +15,7 @@
 		- m
 
 -->
-<ruleset name="BW.com">
+<ruleset name="BW.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Backblaze.com.xml b/src/chrome/content/rules/Backblaze.com.xml
index 75a9fc789f95..2e475fd02ebd 100644
--- a/src/chrome/content/rules/Backblaze.com.xml
+++ b/src/chrome/content/rules/Backblaze.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Backblaze.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://backblaze.com/ => https://backblaze.com/: (51, "SSL: no alternative certificate subject name matches target host name 'backblaze.com'")
+
+-->
+<ruleset name="Backblaze.com" default_off='failed ruleset test'>
 
 	<target host="backblaze.com" />
 	<target host="www.backblaze.com" />
diff --git a/src/chrome/content/rules/Baker.com.xml b/src/chrome/content/rules/Baker.com.xml
index b4e90a335679..368c4bb8dc5f 100644
--- a/src/chrome/content/rules/Baker.com.xml
+++ b/src/chrome/content/rules/Baker.com.xml
@@ -1,4 +1,11 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cdn.baker.org/ => https://cdn.baker.org/: (6, 'Could not resolve host: cdn.baker.org')
+Fetch error: http://note-to-self.baker.com/ => https://note-to-self.baker.com/: (7, 'Failed to connect to note-to-self.baker.com port 443: Connection refused')
+Fetch error: http://policies.baker.org/ => https://policies.baker.org/: (7, 'Failed to connect to policies.baker.org port 443: Connection refused')
+Fetch error: http://www.baker.org/ => https://www.baker.org/: (7, 'Failed to connect to www.baker.org port 443: Connection refused')
+
 	Fully covered hosts:
 
 		- cdn
@@ -10,7 +17,7 @@
 	^baker.org doesn't exist
 
 -->
-<ruleset name="Baker.com">
+<ruleset name="Baker.com" default_off='failed ruleset test'>
 
 	<target host="cdn.baker.org" />
 	<target host="note-to-self.baker.com" />
diff --git a/src/chrome/content/rules/Beacon_Initiative.xml b/src/chrome/content/rules/Beacon_Initiative.xml
index 9c1dd64fb42a..8e5ce9f2efae 100644
--- a/src/chrome/content/rules/Beacon_Initiative.xml
+++ b/src/chrome/content/rules/Beacon_Initiative.xml
@@ -1,4 +1,10 @@
-<ruleset name="Beacon Initiative">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://beaconinitiative.com/ => https://beaconinitiative.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
+-->
+<ruleset name="Beacon Initiative" default_off='failed ruleset test'>
 
 	<target host="beaconinitiative.com" />
 	<target host="*.beaconinitiative.com" />
diff --git a/src/chrome/content/rules/Berkeley_LUG.com.xml b/src/chrome/content/rules/Berkeley_LUG.com.xml
index d0e8006f697f..33cd702f180e 100644
--- a/src/chrome/content/rules/Berkeley_LUG.com.xml
+++ b/src/chrome/content/rules/Berkeley_LUG.com.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://berkeleylug.com/ => https://www.berkeleylug.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.berkeleylug.com'")
+Fetch error: http://www.berkeleylug.com/ => https://www.berkeleylug.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.berkeleylug.com'")
+
 	^: mismatched, CN: jdeslip.com
 
 -->
-<ruleset name="Berkeley LUG.com">
+<ruleset name="Berkeley LUG.com" default_off='failed ruleset test'>
 
 	<target host="berkeleylug.com" />
 	<target host="www.berkeleylug.com" />
diff --git a/src/chrome/content/rules/BerryReview.com.xml b/src/chrome/content/rules/BerryReview.com.xml
index 0c3fe5d02712..e27e99562d4e 100644
--- a/src/chrome/content/rules/BerryReview.com.xml
+++ b/src/chrome/content/rules/BerryReview.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://berryreview.com/ => https://berryreview.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Mixed content:
 
 		- css on www from 1-ps.googleusercontent.com *
@@ -12,7 +16,7 @@
 	* Secured by us
 
 -->
-<ruleset name="BerryReview.com (false MCB)" platform="mixedcontent">
+<ruleset name="BerryReview.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="berryreview.com" />
 	<target host="*.berryreview.com" />
diff --git a/src/chrome/content/rules/Betabeat.com.xml b/src/chrome/content/rules/Betabeat.com.xml
index faf1a59aad92..11125451b2a0 100644
--- a/src/chrome/content/rules/Betabeat.com.xml
+++ b/src/chrome/content/rules/Betabeat.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://betabeat.com/ => https://betabeat.com/: (51, "SSL: no alternative certificate subject name matches target host name 'betabeat.com'")
+
 	Mixed content:
 
 		- css from fonts.googleapis.com *
@@ -12,7 +16,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Betabeat.com">
+<ruleset name="Betabeat.com" default_off='failed ruleset test'>
 
 	<target host="betabeat.com" />
 	<target host="*.betabeat.com" />
diff --git a/src/chrome/content/rules/Biapy.fr.xml b/src/chrome/content/rules/Biapy.fr.xml
index 945b1b80ae4f..3bbb6d797ea3 100644
--- a/src/chrome/content/rules/Biapy.fr.xml
+++ b/src/chrome/content/rules/Biapy.fr.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://biapy.fr/ => https://biapy.fr/: (51, "SSL: no alternative certificate subject name matches target host name 'biapy.fr'")
+
 	Fully covered subdomains:
 
 		- (www.)
@@ -13,7 +17,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Biapy.fr">
+<ruleset name="Biapy.fr" default_off='failed ruleset test'>
 
 	<target host="biapy.fr" />
 	<target host="*.biapy.fr" />
diff --git a/src/chrome/content/rules/Bigjocker.com.xml b/src/chrome/content/rules/Bigjocker.com.xml
index 3c1829123c9b..1f7310023485 100644
--- a/src/chrome/content/rules/Bigjocker.com.xml
+++ b/src/chrome/content/rules/Bigjocker.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="bigjocker.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bigjocker.com/ => https://bigjocker.com/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+Fetch error: http://www.bigjocker.com/ => https://www.bigjocker.com/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+
+-->
+<ruleset name="bigjocker.com" default_off='failed ruleset test'>
 
 	<target host="bigjocker.com" />
 	<target host="www.bigjocker.com" />
diff --git a/src/chrome/content/rules/BioInfo.pl.xml b/src/chrome/content/rules/BioInfo.pl.xml
index 09eca35f54e0..ee868145f742 100644
--- a/src/chrome/content/rules/BioInfo.pl.xml
+++ b/src/chrome/content/rules/BioInfo.pl.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bioinfo.pl/ => https://bioinfobank.com/: (60, 'SSL certificate problem: self signed certificate')
+
 	Other BioInfoBank rulesets:
 
 		- BioInfoBank.com.xml
@@ -16,7 +20,7 @@
 		- lib.bioinfo.pl
 
 -->
-<ruleset name="BioInfo.pl">
+<ruleset name="BioInfo.pl" default_off='failed ruleset test'>
 
 	<target host="bioinfo.pl" />
 	<target host="*.bioinfo.pl" />
diff --git a/src/chrome/content/rules/BioInfoBank.com.xml b/src/chrome/content/rules/BioInfoBank.com.xml
index de8d5794d21a..e7549d0b21f6 100644
--- a/src/chrome/content/rules/BioInfoBank.com.xml
+++ b/src/chrome/content/rules/BioInfoBank.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bioinfobank.com/ => https://bioinfobank.com/: (60, 'SSL certificate problem: self signed certificate')
+
 	For other BioInfoBank coverage, see BioInfo.pl.xml.
 
 
@@ -9,7 +13,7 @@
 	* Works; mismatched, CN: mail.bioinfo.pl
 
 -->
-<ruleset name="BioInfoBank.com (partial)">
+<ruleset name="BioInfoBank.com (partial)" default_off='failed ruleset test'>
 
 	<target host="bioinfobank.com" />
 
diff --git a/src/chrome/content/rules/BioMed-Central.xml b/src/chrome/content/rules/BioMed-Central.xml
index 527323c80129..e164607f16d5 100644
--- a/src/chrome/content/rules/BioMed-Central.xml
+++ b/src/chrome/content/rules/BioMed-Central.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://biomedcentral.com/ => https://biomedcentral.com/: (7, 'Failed to connect to biomedcentral.com port 443: Connection timed out')
+
 	For other Springer coverage, see Springer.xml.
 
 
@@ -42,7 +46,7 @@
 	* Secured by us
 
 -->
-<ruleset name="BioMed Central (false MCB)" platform="mixedcontent">
+<ruleset name="BioMed Central (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="biomedcentral.com" />
 	<target host="*.biomedcentral.com" />
diff --git a/src/chrome/content/rules/Biotrim_Labs.com.xml b/src/chrome/content/rules/Biotrim_Labs.com.xml
index a081a24e2a96..cc9c088a9e12 100644
--- a/src/chrome/content/rules/Biotrim_Labs.com.xml
+++ b/src/chrome/content/rules/Biotrim_Labs.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Biotrim Labs.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://biotrimlabs.com/ => https://biotrimlabs.com/: Too many redirects while fetching 'https://biotrimlabs.com/'
+
+-->
+<ruleset name="Biotrim Labs.com" default_off='failed ruleset test'>
 
 	<target host="biotrimlabs.com" />
 	<target host="*.biotrimlabs.com" />
diff --git a/src/chrome/content/rules/BitFon.pl.xml b/src/chrome/content/rules/BitFon.pl.xml
index 4f6d59746f11..5be2aa44ea7a 100644
--- a/src/chrome/content/rules/BitFon.pl.xml
+++ b/src/chrome/content/rules/BitFon.pl.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bitfon.pl/ => https://bitfon.pl/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.bitfon.pl/ => https://bitfon.pl/: (60, 'SSL certificate problem: certificate has expired')
+
 	www: Mismatched
 
 -->
-<ruleset name="BitFon.pl">
+<ruleset name="BitFon.pl" default_off='failed ruleset test'>
 
 	<target host="bitfon.pl" />
 	<target host="www.bitfon.pl" />
diff --git a/src/chrome/content/rules/BitMEX.com.xml b/src/chrome/content/rules/BitMEX.com.xml
index a1de2c21b226..e4f6fe4848cb 100644
--- a/src/chrome/content/rules/BitMEX.com.xml
+++ b/src/chrome/content/rules/BitMEX.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="BitMEX.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bitmex.com/ => https://bitmex.com/: Redirect for 'https://bitmex.com/' missing Location
+
+-->
+<ruleset name="BitMEX.com" default_off='failed ruleset test'>
 
 	<target host="bitmex.com" />
 	<target host="www.bitmex.com" />
diff --git a/src/chrome/content/rules/BitQuick.xml b/src/chrome/content/rules/BitQuick.xml
index ccef2f88c108..7e26e3715432 100644
--- a/src/chrome/content/rules/BitQuick.xml
+++ b/src/chrome/content/rules/BitQuick.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bitquick.me/ => https://bitquick.me/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.bitquick.me/ => https://www.bitquick.me/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Fully covered domains:
 
 		- (www.)?bitquick.co
@@ -6,7 +11,7 @@
 		- (www.)?bitquick.tw
 
 -->
-<ruleset name="BitQuick">
+<ruleset name="BitQuick" default_off='failed ruleset test'>
 
 	<target host="bitquick.co" />
 	<target host="www.bitquick.co" />
diff --git a/src/chrome/content/rules/Bit_Stampede.com.xml b/src/chrome/content/rules/Bit_Stampede.com.xml
index d1d00903dbed..cbe59cc1d68d 100644
--- a/src/chrome/content/rules/Bit_Stampede.com.xml
+++ b/src/chrome/content/rules/Bit_Stampede.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bitstampede.com/ => https://bitstampede.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.bitstampede.com/ => https://www.bitstampede.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Mixed content:
 
 		- Images on www from www *
@@ -8,7 +13,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Bit Stampede.com">
+<ruleset name="Bit Stampede.com" default_off='failed ruleset test'>
 
 	<target host="bitstampede.com" />
 	<target host="www.bitstampede.com" />
diff --git a/src/chrome/content/rules/Bitnami.com.xml b/src/chrome/content/rules/Bitnami.com.xml
index 1ccefcefccab..abcb392dc799 100644
--- a/src/chrome/content/rules/Bitnami.com.xml
+++ b/src/chrome/content/rules/Bitnami.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://assets.bitnami.com/ => https://assets.bitnami.com/: (51, "SSL: no alternative certificate subject name matches target host name 'assets.bitnami.com'")
+
 	Nonfunctional subdomains:
 
 		- blog ¹
@@ -26,7 +30,7 @@
 		- wiki.bitnami.com
 
 -->
-<ruleset name="Bitnami.com">
+<ruleset name="Bitnami.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Blender.org.xml b/src/chrome/content/rules/Blender.org.xml
index 0038f57cb1aa..06131fad39eb 100644
--- a/src/chrome/content/rules/Blender.org.xml
+++ b/src/chrome/content/rules/Blender.org.xml
@@ -1,4 +1,10 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.developer.blender.org/ => https://www.developer.blender.org/: (51, "SSL: no alternative certificate subject name matches target host name 'www.developer.blender.org'")
+
+-->
+
 <!--
 	For Blender.org
 
@@ -21,7 +27,7 @@
 		- www.projects.blender.org
 
 -->
-<ruleset name="Blender.org">
+<ruleset name="Blender.org" default_off='failed ruleset test'>
 
 	<target host="developer.blender.org" />
 	<target host="www.developer.blender.org" />
diff --git a/src/chrome/content/rules/Blicko.com.xml b/src/chrome/content/rules/Blicko.com.xml
index 9d881e0db600..51bc4c9caea5 100644
--- a/src/chrome/content/rules/Blicko.com.xml
+++ b/src/chrome/content/rules/Blicko.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://blicko.com/ => https://blicko.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	CDN buckets:
 
 		- az286076.vo.msecnd.net
@@ -13,7 +17,7 @@
 	* 404
 
 -->
-<ruleset name="Blicko.com (partial)">
+<ruleset name="Blicko.com (partial)" default_off='failed ruleset test'>
 
 	<target host="blicko.com" />
 	<target host="*.blicko.com" />
diff --git a/src/chrome/content/rules/Blockchain.info.xml b/src/chrome/content/rules/Blockchain.info.xml
index 5b333fc1ecce..10b4cd9f9e33 100644
--- a/src/chrome/content/rules/Blockchain.info.xml
+++ b/src/chrome/content/rules/Blockchain.info.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://static.blockchain.info/ => https://static.blockchain.info/: (6, 'Could not resolve host: static.blockchain.info')
+
 	Other Blockchain.info rulesets:
 
 		- Blockchainbdgpzk.onion.xml
@@ -19,7 +23,7 @@
 		- markets.blockchain.info
 
 -->
-<ruleset name="Blockchain.info">
+<ruleset name="Blockchain.info" default_off='failed ruleset test'>
 
 	<target host="blockchain.info" />
 	<target host="markets.blockchain.info" />
diff --git a/src/chrome/content/rules/Blockchainbdgpzk.onion.xml b/src/chrome/content/rules/Blockchainbdgpzk.onion.xml
index eb27dbb23678..0ab280a046c3 100644
--- a/src/chrome/content/rules/Blockchainbdgpzk.onion.xml
+++ b/src/chrome/content/rules/Blockchainbdgpzk.onion.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://blockchainbdgpzk.onion/ => https://blockchainbdgpzk.onion/: (6, 'Could not resolve host: blockchainbdgpzk.onion')
+
 	For other Blockchain coverage, see Blockchain.info.xml.
 
 -->
-<ruleset name="Blockchainbdgpzk.onion">
+<ruleset name="Blockchainbdgpzk.onion" default_off='failed ruleset test'>
 
 	<target host="blockchainbdgpzk.onion" />
 
diff --git a/src/chrome/content/rules/Blocket.com.xml b/src/chrome/content/rules/Blocket.com.xml
index ab67f764b215..5e37d7a39cf4 100644
--- a/src/chrome/content/rules/Blocket.com.xml
+++ b/src/chrome/content/rules/Blocket.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.blocket.com/ => https://www.blocket.com/: Too many redirects while fetching 'https://www.blocket.com/'
+Fetch error: http://blocket.com/ => https://www.blocket.com/: Too many redirects while fetching 'https://www.blocket.com/'
+
 	*.blocket.com serves resources for blocket.se.
 
 	For other Blocket coverage, see Blocket.se.xml.
@@ -14,7 +19,7 @@
 	^: Mismatched
 
 -->
-<ruleset name="Blocket.com">
+<ruleset name="Blocket.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Blocket.se.xml b/src/chrome/content/rules/Blocket.se.xml
index 9a57fab7e825..c594f30fafa1 100644
--- a/src/chrome/content/rules/Blocket.se.xml
+++ b/src/chrome/content/rules/Blocket.se.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www2.blocket.se/ => https://www2.blocket.se/: Too many redirects while fetching 'https://www2.blocket.se/'
+Fetch error: http://blocket.se/ => https://www.blocket.se/: Too many redirects while fetching 'https://www.blocket.se/'
+
 	Other Blocket rulesets:
 
 		- Blocket.com.xml
@@ -28,7 +33,7 @@
 	² Secured by us
 
 -->
-<ruleset name="Blocket.se (partial)">
+<ruleset name="Blocket.se (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Blossom.in.xml b/src/chrome/content/rules/Blossom.in.xml
index 4f301e4a018e..14bfbe71fba6 100644
--- a/src/chrome/content/rules/Blossom.in.xml
+++ b/src/chrome/content/rules/Blossom.in.xml
@@ -1,10 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://blossom.in/ => https://blossom.in/: (28, 'Resolving timed out after 10519 milliseconds')
+Fetch error: http://www.blossom.in/ => https://www.blossom.in/: (28, 'Resolving timed out after 10518 milliseconds')
+
 	Insecure cookies are set for these hosts:
 
 		- www.blossom.in
 
 -->
-<ruleset name="Blossom.in">
+<ruleset name="Blossom.in" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Bob131.so.xml b/src/chrome/content/rules/Bob131.so.xml
index d00e16a3be20..cf072d601a70 100644
--- a/src/chrome/content/rules/Bob131.so.xml
+++ b/src/chrome/content/rules/Bob131.so.xml
@@ -1,4 +1,10 @@
-<ruleset name="Bob131.so">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://empyrean.bob131.so/ => https://empyrean.bob131.so/: (6, 'Could not resolve host: empyrean.bob131.so')
+
+-->
+<ruleset name="Bob131.so" default_off='failed ruleset test'>
 	<target host="bob131.so" />
 	<target host="www.bob131.so" />
 	<target host="empyrean.bob131.so" />
diff --git a/src/chrome/content/rules/BoldChat.com.xml b/src/chrome/content/rules/BoldChat.com.xml
index 1347d900f8f7..c1210ee2fa9b 100644
--- a/src/chrome/content/rules/BoldChat.com.xml
+++ b/src/chrome/content/rules/BoldChat.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://blog.boldchat.com/ => https://blog.boldchat.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://test.boldchat.com/ => https://test.boldchat.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	For other LogMeIn coverage, see LogMeIn_Inc.com.xml.
 
 
@@ -40,7 +45,7 @@
 		- .boldchat.com
 
 -->
-<ruleset name="BoldChat.com (partial)">
+<ruleset name="BoldChat.com (partial)" default_off='failed ruleset test'>
 
 	<target host="boldchat.com" />
 	<target host="blog.boldchat.com" />
diff --git a/src/chrome/content/rules/Bookacourse.xml b/src/chrome/content/rules/Bookacourse.xml
index 488c9f053b52..204064894393 100644
--- a/src/chrome/content/rules/Bookacourse.xml
+++ b/src/chrome/content/rules/Bookacourse.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bookacourse.com/ => https://bookacourse.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://www.bookacourse.com/ => https://www.bookacourse.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	content redirects to http.
 
 -->
-<ruleset name="Bookacourse (partial)">
+<ruleset name="Bookacourse (partial)" default_off='failed ruleset test'>
 
 	<target host="bookacourse.com" />
 	<target host="www.bookacourse.com" />
diff --git a/src/chrome/content/rules/BountyOSS.com.xml b/src/chrome/content/rules/BountyOSS.com.xml
index 5f895545baab..cd8a53c85bf0 100644
--- a/src/chrome/content/rules/BountyOSS.com.xml
+++ b/src/chrome/content/rules/BountyOSS.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="BountyOSS.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bountyoss.com/ => https://bountyoss.com/: (7, 'Failed to connect to bountyoss.com port 443: Connection refused')
+Fetch error: http://www.bountyoss.com/ => https://www.bountyoss.com/: (7, 'Failed to connect to www.bountyoss.com port 443: Connection refused')
+
+-->
+<ruleset name="BountyOSS.com" default_off='failed ruleset test'>
 
 	<target host="bountyoss.com" />
 	<target host="www.bountyoss.com" />
diff --git a/src/chrome/content/rules/Bourgeois.me.xml b/src/chrome/content/rules/Bourgeois.me.xml
index 5143e8bfa03d..a90033de072b 100644
--- a/src/chrome/content/rules/Bourgeois.me.xml
+++ b/src/chrome/content/rules/Bourgeois.me.xml
@@ -1,4 +1,10 @@
-<ruleset name="Bourgeois.me">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bourgeois.me/ => https://bourgeois.me/: (51, "SSL: no alternative certificate subject name matches target host name 'bourgeois.me'")
+
+-->
+<ruleset name="Bourgeois.me" default_off='failed ruleset test'>
 
 	<target host="bourgeois.me" />
 	<target host="*.bourgeois.me" />
diff --git a/src/chrome/content/rules/Braintreepayments.com.xml b/src/chrome/content/rules/Braintreepayments.com.xml
index e002c1638428..283dd236252d 100644
--- a/src/chrome/content/rules/Braintreepayments.com.xml
+++ b/src/chrome/content/rules/Braintreepayments.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://apply.braintreepayments.com/ => https://apply.braintreepayments.com/: (6, 'Could not resolve host: apply.braintreepayments.com')
+
 	For other PayPal coverage, see PayPal.xml.
 
 
@@ -20,7 +24,7 @@
 		- signups.braintreepayments.com
 
 -->
-<ruleset name="Braintreepayments.com">
+<ruleset name="Braintreepayments.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Brevado.xml b/src/chrome/content/rules/Brevado.xml
index 98e86898c434..3e6882d46714 100644
--- a/src/chrome/content/rules/Brevado.xml
+++ b/src/chrome/content/rules/Brevado.xml
@@ -1,4 +1,10 @@
-<ruleset name="brevado">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://brevado.com/ => https://brevado.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
+-->
+<ruleset name="brevado" default_off='failed ruleset test'>
 
 	<target host="brevado.com" />
 	<target host="*.brevado.com" />
diff --git a/src/chrome/content/rules/Bridgeways.com.xml b/src/chrome/content/rules/Bridgeways.com.xml
index d09283ad054e..e71443cb42e6 100644
--- a/src/chrome/content/rules/Bridgeways.com.xml
+++ b/src/chrome/content/rules/Bridgeways.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Bridgeways.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bridgeways.com/ => https://bridgeways.com/: (7, 'Failed to connect to bridgeways.com port 443: Connection timed out')
+
+-->
+<ruleset name="Bridgeways.com" default_off='failed ruleset test'>
 
 	<target host="bridgeways.com" />
 	<target host="*.bridgeways.com" />
diff --git a/src/chrome/content/rules/BrightTALK.com.xml b/src/chrome/content/rules/BrightTALK.com.xml
index 51beb0b2fa14..28cdfd0d0345 100644
--- a/src/chrome/content/rules/BrightTALK.com.xml
+++ b/src/chrome/content/rules/BrightTALK.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://go.brighttalk.com/rs/brighttalk/images/MME_logo_white.png (200) => https://app-sji.marketo.com/rs/brighttalk/images/MME_logo_white.png (403)
+
 	Nonfunctional hosts:
 
 		go *
@@ -24,7 +28,7 @@
 		- blog.brighttalk.com
 
 -->
-<ruleset name="BrightTALK.com (partial)">
+<ruleset name="BrightTALK.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Brightidea.xml b/src/chrome/content/rules/Brightidea.xml
index f63104529890..978331164e46 100644
--- a/src/chrome/content/rules/Brightidea.xml
+++ b/src/chrome/content/rules/Brightidea.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.brightidea.com/ => https://www.brightidea.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.brightidea.com'")
+Fetch error: http://brightidea.com/ => https://www.brightidea.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.brightidea.com'")
+
 	Problematic subdomains:
 
 		- ^ ¹
@@ -54,7 +59,7 @@
 	² Not secured by us <= mismatched
 
 -->
-<ruleset name="Brightidea.com (partial)">
+<ruleset name="Brightidea.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Brilig.xml b/src/chrome/content/rules/Brilig.xml
index fa6eb394787f..85907545ca47 100644
--- a/src/chrome/content/rules/Brilig.xml
+++ b/src/chrome/content/rules/Brilig.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://brilig.com/ => https://brilig.com/: (7, 'Failed to connect to brilig.com port 443: Connection refused')
+
 	Problematic subdomains:
 
 		- js	(mismatched, CN: p.brilig.com)
 		- kb	(works, expired 2013-03-17)
 
 -->
-<ruleset name="Brilig (partial)">
+<ruleset name="Brilig (partial)" default_off='failed ruleset test'>
 
 	<target host="brilig.com" />
 	<target host="*.brilig.com" />
diff --git a/src/chrome/content/rules/Broadcom.xml b/src/chrome/content/rules/Broadcom.xml
index de9e7a042b46..f5063729a8f2 100644
--- a/src/chrome/content/rules/Broadcom.xml
+++ b/src/chrome/content/rules/Broadcom.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://blog.broadcom.com/ => https://blog.broadcom.com/: (7, 'Failed to connect to blog.broadcom.com port 443: Connection refused')
+
 	Other Broadcom rulesets:
 
 		- Broadcom_Foundation.org.xml
@@ -37,7 +41,7 @@
 	² Not secured by us <= missing certificate chain
 
 -->
-<ruleset name="Broadcom.com (partial)">
+<ruleset name="Broadcom.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/BtcTrade.com.xml b/src/chrome/content/rules/BtcTrade.com.xml
index 78be43ebfdfb..0c57d9a0445d 100644
--- a/src/chrome/content/rules/BtcTrade.com.xml
+++ b/src/chrome/content/rules/BtcTrade.com.xml
@@ -1,11 +1,16 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://btctrade.com/ => https://btctrade.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.btctrade.com/ => https://www.btctrade.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Insecure cookies are set for these domains:
 
 		- btctrade.com
 		- www.btctrade.com
 
 -->
-<ruleset name="BtcTrade.com">
+<ruleset name="BtcTrade.com" default_off='failed ruleset test'>
 
 	<target host="btctrade.com" />
 	<target host="www.btctrade.com" />
diff --git a/src/chrome/content/rules/BundanonTrust.xml b/src/chrome/content/rules/BundanonTrust.xml
index 55b08afd2154..e5223d19006c 100644
--- a/src/chrome/content/rules/BundanonTrust.xml
+++ b/src/chrome/content/rules/BundanonTrust.xml
@@ -1,4 +1,10 @@
-<ruleset name="Bundanon Trust">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bundanon.com.au/ => https://www.bundanon.com.au/: (52, 'Empty reply from server')
+
+-->
+<ruleset name="Bundanon Trust" default_off='failed ruleset test'>
 	<target host="bundanon.com.au" />
 	<target host="*.bundanon.com.au" />
 
diff --git a/src/chrome/content/rules/Buttercoin.com.xml b/src/chrome/content/rules/Buttercoin.com.xml
index 522c20ccdfe2..b75b8e7d89bf 100644
--- a/src/chrome/content/rules/Buttercoin.com.xml
+++ b/src/chrome/content/rules/Buttercoin.com.xml
@@ -1,4 +1,17 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://buttercoin.com/ => https://buttercoin.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://api.buttercoin.com/ => https://api.buttercoin.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://developer.buttercoin.com/ => https://developer.buttercoin.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://docs.buttercoin.com/ => https://docs.buttercoin.com/: (28, 'Operation timed out after 15000 milliseconds with 0 bytes received')
+Fetch error: http://kyb.buttercoin.com/ => https://kyb.buttercoin.com/: (28, 'Operation timed out after 15000 milliseconds with 0 bytes received')
+Fetch error: http://sandbox.buttercoin.com/ => https://sandbox.buttercoin.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://wsio.buttercoin.com/ => https://wsio.buttercoin.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://wsio-sandbox.buttercoin.com/ => https://wsio-sandbox.buttercoin.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://www.buttercoin.com/ => https://www.buttercoin.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://www-sandbox.buttercoin.com/ => https://www-sandbox.buttercoin.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	CDN buckets:
 
 		- s3.amazonaws.com/static.buttercoin.com/
@@ -35,7 +48,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Buttercoin.com">
+<ruleset name="Buttercoin.com" default_off='failed ruleset test'>
 
 	<target host="buttercoin.com" />
 	<target host="api.buttercoin.com" />
diff --git a/src/chrome/content/rules/BuyBoard.xml b/src/chrome/content/rules/BuyBoard.xml
index 05baecaaf952..6d16e57c6ed9 100644
--- a/src/chrome/content/rules/BuyBoard.xml
+++ b/src/chrome/content/rules/BuyBoard.xml
@@ -1,4 +1,10 @@
-<ruleset name="BuyBoard (partial)">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://buyboard.com/ => https://buyboard.com/: (51, "SSL: no alternative certificate subject name matches target host name 'buyboard.com'")
+
+-->
+<ruleset name="BuyBoard (partial)" default_off='failed ruleset test'>
 
 	<target host="buyboard.com"/>
 	<target host="*.buyboard.com"/>
diff --git a/src/chrome/content/rules/C-Base.xml b/src/chrome/content/rules/C-Base.xml
index f9af57ba1ccf..037f6e68a1c9 100644
--- a/src/chrome/content/rules/C-Base.xml
+++ b/src/chrome/content/rules/C-Base.xml
@@ -1,4 +1,13 @@
-<ruleset name="C-Base" platform="cacert">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.c-base.org/ => https://www.c-base.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://c-base.org/ => https://c-base.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://logbuch.c-base.org/ => https://logbuch.c-base.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://wiki.c-base.org/ => https://wiki.c-base.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
+-->
+<ruleset name="C-Base" platform="cacert" default_off='failed ruleset test'>
 	<target host="www.c-base.org" />
 	<target host="c-base.org" />
 	<target host="logbuch.c-base.org" />
diff --git a/src/chrome/content/rules/CDT.xml b/src/chrome/content/rules/CDT.xml
index f874f55423e2..099d05bfc01c 100644
--- a/src/chrome/content/rules/CDT.xml
+++ b/src/chrome/content/rules/CDT.xml
@@ -1,10 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://notwithoutawarrant.com/ => https://notwithoutawarrant.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.notwithoutawarrant.com/ => https://www.notwithoutawarrant.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Other Center for Democracy & Technology rulesets:
 
 		- We_Need_to_Know.info.xml
 
 -->
-<ruleset name="Center for Democracy &amp; Technology">
+<ruleset name="Center for Democracy &amp; Technology" default_off='failed ruleset test'>
 
 	<target host="cdt.org" />
 	<!--	* for cross-domain cookie.	-->
diff --git a/src/chrome/content/rules/CERIT.cz.xml b/src/chrome/content/rules/CERIT.cz.xml
index 6c717df2f226..940477d17a02 100644
--- a/src/chrome/content/rules/CERIT.cz.xml
+++ b/src/chrome/content/rules/CERIT.cz.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cerit.cz/ => https://cerit.cz/: (28, 'Connection timed out after 10001 milliseconds')
+
 	For other Masaryk University coverage, see Muni.cz.xml.
 
 -->
-<ruleset name="CERIT.cz">
+<ruleset name="CERIT.cz" default_off='failed ruleset test'>
 
 	<target host="cerit.cz" />
 	<target host="*.cerit.cz" />
diff --git a/src/chrome/content/rules/CERT-Polska.xml b/src/chrome/content/rules/CERT-Polska.xml
index f09816f1a7d4..38dead6ab32e 100644
--- a/src/chrome/content/rules/CERT-Polska.xml
+++ b/src/chrome/content/rules/CERT-Polska.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cert.pl/ => https://cert.pl/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	Nonfunctional subdomains:
 
 		- nisha *
@@ -24,7 +28,7 @@
 	² Unsecurable
 
 -->
-<ruleset name="CERT Polska">
+<ruleset name="CERT Polska" default_off='failed ruleset test'>
 
 	<target host="cert.pl" />
 	<!--	*s for cross-domain cookies.	-->
diff --git a/src/chrome/content/rules/CMSWire.xml b/src/chrome/content/rules/CMSWire.xml
index 40b832f3509a..b6c4c911bb66 100644
--- a/src/chrome/content/rules/CMSWire.xml
+++ b/src/chrome/content/rules/CMSWire.xml
@@ -1,4 +1,11 @@
-<ruleset name="CMSWire" platform="mixedcontent">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.cmswire.com/ => https://www.cmswire.com/: Too many redirects while fetching 'https://www.cmswire.com/'
+Fetch error: http://cmswire.com/ => https://www.cmswire.com/: Too many redirects while fetching 'https://www.cmswire.com/'
+
+-->
+<ruleset name="CMSWire" platform="mixedcontent" default_off='failed ruleset test'>
   <target host="www.cmswire.com"/>
   <target host="cmswire.com"/>
   <rule from="^http://(?:www\.)?cmswire\.com/" to="https://www.cmswire.com/"/>
diff --git a/src/chrome/content/rules/CWSPOD.com.xml b/src/chrome/content/rules/CWSPOD.com.xml
index efdf1f30ead8..2574287f4c84 100644
--- a/src/chrome/content/rules/CWSPOD.com.xml
+++ b/src/chrome/content/rules/CWSPOD.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://cwspod.com/ (200) => https://cwspod.com/ (502)
+
 	Mixed content:
 
 		- css from $self *
@@ -6,7 +10,7 @@
 	* Secured by us
 
 -->
-<ruleset name="CWSPOD.com (false MCB)" platform="mixedcontent">
+<ruleset name="CWSPOD.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="cwspod.com" />
 	<target host="*.cwspod.com" />
diff --git a/src/chrome/content/rules/CXense.xml b/src/chrome/content/rules/CXense.xml
index bdda81b6ee45..315c35f511a5 100644
--- a/src/chrome/content/rules/CXense.xml
+++ b/src/chrome/content/rules/CXense.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://adserver.cxad.sandbox.cxense.com/ => https://adserver.cxad.sandbox.cxense.com/: (6, 'Could not resolve host: adserver.cxad.sandbox.cxense.com')
+Fetch error: http://s-adserver.cxad.sandbox.cxense.com/ => https://s-adserver.cxad.sandbox.cxense.com/: (6, 'Could not resolve host: s-adserver.cxad.sandbox.cxense.com')
+
 	Nonfunctional hosts:
 
 		- (www.)? *
@@ -34,7 +39,7 @@
 		- wiki.cxense.com
 
 -->
-<ruleset name="cXense.com (partial)">
+<ruleset name="cXense.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Cake_Central.com.xml b/src/chrome/content/rules/Cake_Central.com.xml
index 39ad8be4bce2..1bbbcdc351d5 100644
--- a/src/chrome/content/rules/Cake_Central.com.xml
+++ b/src/chrome/content/rules/Cake_Central.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cdn.cakecentral.com/ => https://d2r287735ijf1o.cloudfront.net/: (6, 'Could not resolve host: d2r287735ijf1o.cloudfront.net')
+
 	CDN buckets:
 
 		- d2r287735ijf1o.cloudfront.net
@@ -9,7 +13,7 @@
 	(www.): redirects to http, valid cert
 
 -->
-<ruleset name="Cake Central.com (partial)">
+<ruleset name="Cake Central.com (partial)" default_off='failed ruleset test'>
 
 	<target host="cdn.cakecentral.com" />
 
diff --git a/src/chrome/content/rules/Car.com.xml b/src/chrome/content/rules/Car.com.xml
index 64ce32a29506..517133f617bc 100644
--- a/src/chrome/content/rules/Car.com.xml
+++ b/src/chrome/content/rules/Car.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://finance.car.com/ => https://finance.car.com/: (35, 'Unknown SSL protocol error in connection to finance.car.com:443 ')
+Fetch error: http://loans.car.com/ => https://loans.car.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Nonfunctional hosts in *car.com:
 
 		- ^ ¹
@@ -45,7 +50,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Car.com (partial)">
+<ruleset name="Car.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Casper_og_Frank.dk.xml b/src/chrome/content/rules/Casper_og_Frank.dk.xml
index dd2b4db00b17..8e4a0ffe0901 100644
--- a/src/chrome/content/rules/Casper_og_Frank.dk.xml
+++ b/src/chrome/content/rules/Casper_og_Frank.dk.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://casperogfrank.dk/ => https://casperogfrank.dk/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	Mixed content:
 
 		- Video from player.vimeo.com *
@@ -10,7 +14,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Casper og Frank.de (false MCB)" platform="mixedcontent">
+<ruleset name="Casper og Frank.de (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="casperogfrank.dk" />
 	<target host="*.casperogfrank.dk" />
diff --git a/src/chrome/content/rules/Cdnads.com.xml b/src/chrome/content/rules/Cdnads.com.xml
index cb5f7502438b..25e3edeb09b8 100644
--- a/src/chrome/content/rules/Cdnads.com.xml
+++ b/src/chrome/content/rules/Cdnads.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://padsdel.cdnads.com/ => https://padsdel.cdnads.com/: (7, 'Failed to connect to padsdel.cdnads.com port 443: Connection timed out')
+
 	Problematic subdomains:
 
 		- padsdel *
@@ -6,7 +10,7 @@
 	* Dropped
 
 -->
-<ruleset name="cdnads.com">
+<ruleset name="cdnads.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/CertiVox.com.xml b/src/chrome/content/rules/CertiVox.com.xml
index d31ade2ee3ba..65d7b85bec3d 100644
--- a/src/chrome/content/rules/CertiVox.com.xml
+++ b/src/chrome/content/rules/CertiVox.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://certivox.com/ => https://certivox.com/: (51, "SSL: no alternative certificate subject name matches target host name 'certivox.com'")
+
 	Nonfunctional hosts:
 
 		- docs *
@@ -17,7 +21,7 @@
 		- m-pindemo.certivox.org
 
 -->
-<ruleset name="CertiVox.com (partial)">
+<ruleset name="CertiVox.com (partial)" default_off='failed ruleset test'>
 
 	<target host="certivox.com" />
 	<target host="m-pindemo.certivox.org" />
diff --git a/src/chrome/content/rules/Chicken_Soup_for_the_Soul.xml b/src/chrome/content/rules/Chicken_Soup_for_the_Soul.xml
index c19e82f47a45..859ad6f309b5 100644
--- a/src/chrome/content/rules/Chicken_Soup_for_the_Soul.xml
+++ b/src/chrome/content/rules/Chicken_Soup_for_the_Soul.xml
@@ -1,4 +1,10 @@
-<ruleset name="Chicken Soup for the Soul">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://chickensoup.com/ => https://chickensoup.com/: Too many redirects while fetching 'https://chickensoup.com/'
+
+-->
+<ruleset name="Chicken Soup for the Soul" default_off='failed ruleset test'>
 
 	<target host="chickensoup.com" />
 	<target host="*.chickensoup.com" />
diff --git a/src/chrome/content/rules/Chromium.org.xml b/src/chrome/content/rules/Chromium.org.xml
index 40b49a51711b..6072f4ed9250 100644
--- a/src/chrome/content/rules/Chromium.org.xml
+++ b/src/chrome/content/rules/Chromium.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://developer.chromium.org/ => https://developer.chromium.org/: (6, 'Could not resolve host: developer.chromium.org')
+
 	For other Google coverage, see GoogleServices.xml.
 
 
@@ -33,7 +37,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Chromium.org">
+<ruleset name="Chromium.org" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/CineStar.xml b/src/chrome/content/rules/CineStar.xml
index d79955bdfb08..599db92e8296 100644
--- a/src/chrome/content/rules/CineStar.xml
+++ b/src/chrome/content/rules/CineStar.xml
@@ -1,4 +1,11 @@
-<ruleset name="CineStar">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cinestar.de/ => https://www.cinestar.de/: Too many redirects while fetching 'https://www.cinestar.de/'
+Fetch error: http://www.cinestar.de/ => https://www.cinestar.de/: Too many redirects while fetching 'https://www.cinestar.de/'
+
+-->
+<ruleset name="CineStar" default_off='failed ruleset test'>
     <target host="cinestar.de" />
     <target host="www.cinestar.de" />
 
diff --git a/src/chrome/content/rules/Cinfu.com.xml b/src/chrome/content/rules/Cinfu.com.xml
index 418d6be206ce..61203d7432b6 100644
--- a/src/chrome/content/rules/Cinfu.com.xml
+++ b/src/chrome/content/rules/Cinfu.com.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://cinfu.com/ (200) => https://cinfu.com/ (404)
+
 	Nonfunctional subdomains:
 
 		- www	(redirects to http)
 
 -->
-<ruleset name="Cinfu.com (partial)">
+<ruleset name="Cinfu.com (partial)" default_off='failed ruleset test'>
 
 	<target host="cinfu.com" />
 	<target host="*.cinfu.com" />
diff --git a/src/chrome/content/rules/Cir.ca.xml b/src/chrome/content/rules/Cir.ca.xml
index 08ed2cc2dc46..63a879fd5d67 100644
--- a/src/chrome/content/rules/Cir.ca.xml
+++ b/src/chrome/content/rules/Cir.ca.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cir.ca/ => https://cir.ca/: (51, "SSL: no alternative certificate subject name matches target host name 'cir.ca'")
+
 	CDN buckets:
 
 		- s3-us-west-2.amazonaws.com/titleimages.cir.ca/
@@ -28,7 +32,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Cir.ca">
+<ruleset name="Cir.ca" default_off='failed ruleset test'>
 
 	<target host="cir.ca" />
 	<target host="*.cir.ca" />
diff --git a/src/chrome/content/rules/Cirtex_Hosting.com.xml b/src/chrome/content/rules/Cirtex_Hosting.com.xml
index 647abe148780..7ee04709d8ee 100644
--- a/src/chrome/content/rules/Cirtex_Hosting.com.xml
+++ b/src/chrome/content/rules/Cirtex_Hosting.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="Cirtex Hosting.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cirtexhosting.com/ => https://cirtexhosting.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.cirtexhosting.com/ => https://www.cirtexhosting.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Cirtex Hosting.com" default_off='failed ruleset test'>
 
 	<target host="cirtexhosting.com" />
 	<target host="www.cirtexhosting.com" />
diff --git a/src/chrome/content/rules/CiteULike.xml b/src/chrome/content/rules/CiteULike.xml
index e978011972f4..4c4e45b9c8af 100644
--- a/src/chrome/content/rules/CiteULike.xml
+++ b/src/chrome/content/rules/CiteULike.xml
@@ -1,4 +1,10 @@
-<ruleset name="CiteULike">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://citeulike.org/ => https://www.citeulike.org/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="CiteULike" default_off='failed ruleset test'>
 
 	<target host="citeulike.org" />
 	<target host="www.citeulike.org" />
diff --git a/src/chrome/content/rules/Citi.com.xml b/src/chrome/content/rules/Citi.com.xml
index 73def680686c..4582592ccefb 100644
--- a/src/chrome/content/rules/Citi.com.xml
+++ b/src/chrome/content/rules/Citi.com.xml
@@ -1,4 +1,11 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://thankyou.citi.com// => https://thankyou.citi.com//: (6, 'Could not resolve host: thankyou.citi.com')
+Fetch error: http://thankyou.citi.com//?f => https://thankyou.citi.com//?f: (6, 'Could not resolve host: thankyou.citi.com')
+Fetch error: http://thankyou.citi.com//?fo => https://thankyou.citi.com//?fo: (6, 'Could not resolve host: thankyou.citi.com')
+Fetch error: http://thankyou.citi.com//?foo => https://thankyou.citi.com//?foo: (6, 'Could not resolve host: thankyou.citi.com')
+
 	For other Other Citigroup coverage, see Citigroup.com.xml.
 
 
@@ -42,7 +49,7 @@
 		- www
 
 -->
-<ruleset name="Citi.com">
+<ruleset name="Citi.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/City-Link.xml b/src/chrome/content/rules/City-Link.xml
index 23ebc0993552..c4826a3fae84 100644
--- a/src/chrome/content/rules/City-Link.xml
+++ b/src/chrome/content/rules/City-Link.xml
@@ -1,4 +1,11 @@
-<ruleset name="City Link" platform="mixedcontent">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://city-link.co.uk/ => https://www.city-link.co.uk/: (28, 'Connection timed out after 10001 milliseconds')
+Fetch error: http://www.city-link.co.uk/ => https://www.city-link.co.uk/: (28, 'Connection timed out after 10001 milliseconds')
+
+-->
+<ruleset name="City Link" platform="mixedcontent" default_off='failed ruleset test'>
 
   <target host="city-link.co.uk" />
   <target host="www.city-link.co.uk" />
diff --git a/src/chrome/content/rules/ClevelandClinic.org.xml b/src/chrome/content/rules/ClevelandClinic.org.xml
index a13b58ab6962..fee216812ed0 100644
--- a/src/chrome/content/rules/ClevelandClinic.org.xml
+++ b/src/chrome/content/rules/ClevelandClinic.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://portals.clevelandclinic.org/ (200) => https://portals.clevelandclinic.org/ (503)
+
 	Without https:
 		ccjm.org
 		www.ccjm.org
@@ -8,7 +12,7 @@
 	Mismatching certificate:
 		https://giving.clevelandclinic.org/
 -->
-<ruleset name="ClevelandClinic (partial)">
+<ruleset name="ClevelandClinic (partial)" default_off='failed ruleset test'>
 
 	<target host=        "clevelandclinic.org" />
 	<target host=    "www.clevelandclinic.org" />
diff --git a/src/chrome/content/rules/Click_and_Pledge.com.xml b/src/chrome/content/rules/Click_and_Pledge.com.xml
index 1b55ff4f2e63..5d15bc7c452e 100644
--- a/src/chrome/content/rules/Click_and_Pledge.com.xml
+++ b/src/chrome/content/rules/Click_and_Pledge.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://forums.clickandpledge.com/ => https://forums.clickandpledge.com/: (51, "SSL: no alternative certificate subject name matches target host name 'forums.clickandpledge.com'")
+
 	Nonfunctional hosts in *clickandpledge.com:
 
 		- help *
@@ -23,7 +27,7 @@
 		- www.clickandpledge.com
 
 -->
-<ruleset name="Click and Pledge.com (partial)">
+<ruleset name="Click and Pledge.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Clickberry.xml b/src/chrome/content/rules/Clickberry.xml
index 6ed9d19f949c..90ebe9210bdc 100644
--- a/src/chrome/content/rules/Clickberry.xml
+++ b/src/chrome/content/rules/Clickberry.xml
@@ -1,4 +1,10 @@
-<ruleset name="Clickberry">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://clbr.tv/ => https://clbr.tv/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Clickberry" default_off='failed ruleset test'>
   <target host="clickberry.tv" />
   <target host="*.clickberry.tv" />
   <target host="clbr.tv" />
diff --git a/src/chrome/content/rules/Climate-Central.xml b/src/chrome/content/rules/Climate-Central.xml
index 62c26c8db47e..f7ff736e4a8d 100644
--- a/src/chrome/content/rules/Climate-Central.xml
+++ b/src/chrome/content/rules/Climate-Central.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://climatecentral.org/ => https://climatecentral.org/: Too many redirects while fetching 'https://climatecentral.org/'
+Fetch error: http://www.climatecentral.org/ => https://www.climatecentral.org/: Too many redirects while fetching 'https://www.climatecentral.org/'
+
 	climatecentral47041.thankyou4caring.org
 
 -->
-<ruleset name="Climate Central">
+<ruleset name="Climate Central" default_off='failed ruleset test'>
 
 	<target host="climatecentral.org" />
 	<target host="www.climatecentral.org" />
diff --git a/src/chrome/content/rules/CloudFlare.xml b/src/chrome/content/rules/CloudFlare.xml
index e6a2ec34cd36..4d9cf1229b2d 100644
--- a/src/chrome/content/rules/CloudFlare.xml
+++ b/src/chrome/content/rules/CloudFlare.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cfdnscheck.cloudflare.com/ => https://cfdnscheck.cloudflare.com/: (6, 'Could not resolve host: cfdnscheck.cloudflare.com')
+
 	Other CloudFlare rulesets:
 
 		- Cdnjs.xml
@@ -15,7 +19,7 @@
 	wildcard cookies for every client domain.
 
 -->
-<ruleset name="CloudFlare.com">
+<ruleset name="CloudFlare.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Cloud_Proven.net.xml b/src/chrome/content/rules/Cloud_Proven.net.xml
index 110af9826b89..925f855f2cf1 100644
--- a/src/chrome/content/rules/Cloud_Proven.net.xml
+++ b/src/chrome/content/rules/Cloud_Proven.net.xml
@@ -1,4 +1,10 @@
-<ruleset name="Cloud Proven.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cloudproven.net/ => https://cloudproven.net/: Too many redirects while fetching 'https://cloudproven.net/'
+
+-->
+<ruleset name="Cloud Proven.net" default_off='failed ruleset test'>
 
 	<target host="cloudproven.net" />
 	<target host="*.cloudproven.net" />
diff --git a/src/chrome/content/rules/Cloudsecurityalliance.org.xml b/src/chrome/content/rules/Cloudsecurityalliance.org.xml
index 613cbf18c0a0..6f2b68b8bae5 100644
--- a/src/chrome/content/rules/Cloudsecurityalliance.org.xml
+++ b/src/chrome/content/rules/Cloudsecurityalliance.org.xml
@@ -1,4 +1,9 @@
-<!-- This rule was automatically generated based on an HSTS
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://local-cdn.cloudsecurityalliance.org/ (200) => https://local-cdn.cloudsecurityalliance.org/ (403)
+Fetch error: http://nexus.cloudsecurityalliance.org/ => https://nexus.cloudsecurityalliance.org/: (6, 'Could not resolve host: nexus.cloudsecurityalliance.org')
+ This rule was automatically generated based on an HSTS
      preload rule in the Chromium browser.  See 
      https://src.chromium.org/viewvc/chrome/trunk/src/net/base/transport_security_state.cc
      for the list of preloads.  Sites are added to the Chromium HSTS
@@ -15,7 +20,7 @@
 		- nexus
 
 -->
-<ruleset name="Cloudsecurityalliance.org">
+<ruleset name="Cloudsecurityalliance.org" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Club_Red_Gaming.com.xml b/src/chrome/content/rules/Club_Red_Gaming.com.xml
index 37369fa31e6e..efb1d2ffd8a1 100644
--- a/src/chrome/content/rules/Club_Red_Gaming.com.xml
+++ b/src/chrome/content/rules/Club_Red_Gaming.com.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://lobby.clubredgaming.com/ => https://lobby.clubredgaming.com/: (28, 'Connection timed out after 10001 milliseconds')
+
 	Nonfunctional subdomains:
 
 		- (www.)	(refused)
 
 -->
-<ruleset name="Club Red Gaming.com (partial)">
+<ruleset name="Club Red Gaming.com (partial)" default_off='failed ruleset test'>
 
 	<target host="lobby.clubredgaming.com" />
 
diff --git a/src/chrome/content/rules/Cnchost.com.xml b/src/chrome/content/rules/Cnchost.com.xml
index 279d1624bea3..6c780fb3a060 100644
--- a/src/chrome/content/rules/Cnchost.com.xml
+++ b/src/chrome/content/rules/Cnchost.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://register.cnchost.com/ => https://register.cnchost.com/: (28, 'Connection timed out after 10001 milliseconds')
+Non-2xx HTTP code: http://secure.cnchost.com/ (200) => https://secure.cnchost.com/ (400)
+
 	For other XO Communications coverage, see XO-Communications.xml.
 
 
@@ -11,7 +16,7 @@
 		- secure
 
 -->
-<ruleset name="cnchost.com (partial)">
+<ruleset name="cnchost.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Codefund.io.xml b/src/chrome/content/rules/Codefund.io.xml
index 7b480dadbb8d..78514f9e27d2 100644
--- a/src/chrome/content/rules/Codefund.io.xml
+++ b/src/chrome/content/rules/Codefund.io.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://codefund.io/ => https://codefund.io/: (6, 'Could not resolve host: codefund.io')
+
 	Problematic subdomains:
 
 		- blog *
@@ -6,7 +10,7 @@
 	* Works; mismatched, CN: blot.im
 
 -->
-<ruleset name="codefund.io (partial)">
+<ruleset name="codefund.io (partial)" default_off='failed ruleset test'>
 
 	<target host="codefund.io" />
 	<target host="*.codefund.io" />
diff --git a/src/chrome/content/rules/Compete.org.xml b/src/chrome/content/rules/Compete.org.xml
index 58a849f30f3f..3fd678220f23 100644
--- a/src/chrome/content/rules/Compete.org.xml
+++ b/src/chrome/content/rules/Compete.org.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://compete.org/ => https://compete.org/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://www.compete.org/ => https://www.compete.org/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Council on Competitiveness
 
 -->
-<ruleset name="Compete.org">
+<ruleset name="Compete.org" default_off='failed ruleset test'>
 
 	<target host="compete.org" />
 	<target host="www.compete.org" />
diff --git "a/src/chrome/content/rules/Conseil_National_du_Num\303\251rique.xml" "b/src/chrome/content/rules/Conseil_National_du_Num\303\251rique.xml"
index c44e757480da..3ae27c875745 100644
--- "a/src/chrome/content/rules/Conseil_National_du_Num\303\251rique.xml"
+++ "b/src/chrome/content/rules/Conseil_National_du_Num\303\251rique.xml"
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://contribuez.cnnumerique.fr/ => https://contribuez.cnnumerique.fr/: (7, 'Failed to connect to contribuez.cnnumerique.fr port 443: Connection refused')
+
     Mixed content:
 
         - AJAX on contribuez from doubleclick.net *
 
     * Secured by us
 -->
-<ruleset name="Conseil National du Numérique">
+<ruleset name="Conseil National du Numérique" default_off='failed ruleset test'>
   <target host="contribuez.cnnumerique.fr" />
 
   <rule from="^http://contribuez\.cnnumerique\.fr/" to="https://contribuez.cnnumerique.fr/" />
diff --git a/src/chrome/content/rules/ControllerMAX.com-falsemixed.xml b/src/chrome/content/rules/ControllerMAX.com-falsemixed.xml
index 43f690dbde77..ac3cc071aa9a 100644
--- a/src/chrome/content/rules/ControllerMAX.com-falsemixed.xml
+++ b/src/chrome/content/rules/ControllerMAX.com-falsemixed.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://controllermax.com/ => https://controllermax.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	For rules not causing false/broken MCB, see ControllerMAX.com.xml.
 
 -->
-<ruleset name="ControllerMAX.com (false MCB)" platform="mixedcontent">
+<ruleset name="ControllerMAX.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="controllermax.com" />
 	<target host="*.controllermax.com" />
diff --git a/src/chrome/content/rules/ControllerMAX.com.xml b/src/chrome/content/rules/ControllerMAX.com.xml
index a686cbeb60f6..37cb64e7176b 100644
--- a/src/chrome/content/rules/ControllerMAX.com.xml
+++ b/src/chrome/content/rules/ControllerMAX.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://controllermax.com/ => https://controllermax.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.controllermax.com/ => https://www.controllermax.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	For rules causing false/broken MCB, see ControllerMAX.com-falsemixed.xml.
 
 
@@ -16,7 +21,7 @@
 	² Unsecurable <= http reply
 
 -->
-<ruleset name="ControllerMAX.com (partial)">
+<ruleset name="ControllerMAX.com (partial)" default_off='failed ruleset test'>
 
 	<target host="controllermax.com" />
 	<target host="www.controllermax.com" />
diff --git a/src/chrome/content/rules/Coop.ch.xml b/src/chrome/content/rules/Coop.ch.xml
index 1846506cd0f4..4b0e6025250a 100644
--- a/src/chrome/content/rules/Coop.ch.xml
+++ b/src/chrome/content/rules/Coop.ch.xml
@@ -1,4 +1,12 @@
-<ruleset name="Coop">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://www.cooperation-online.ch/ (200) => https://www.cooperation-online.ch/ (404)
+Non-2xx HTTP code: http://cooperation-online.ch/ (200) => https://www.cooperation-online.ch/ (404)
+Non-2xx HTTP code: http://www.cooperation-online.ch/ (200) => https://www.cooperation-online.ch/ (404)
+
+-->
+<ruleset name="Coop" default_off='failed ruleset test'>
 	<!--
 	mixedcontent:
 		<target host="coop.ch"/>  
diff --git a/src/chrome/content/rules/Costco.xml b/src/chrome/content/rules/Costco.xml
index 951061a1f445..e5dec64cdee1 100644
--- a/src/chrome/content/rules/Costco.xml
+++ b/src/chrome/content/rules/Costco.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://shop.costco.com/ => https://shop.costco.com/: (51, "SSL: no alternative certificate subject name matches target host name 'shop.costco.com'")
+Fetch error: http://www2.costco.com/ => https://www2.costco.com/: (56, 'SSL read: error:00000000:lib(0):func(0):reason(0), errno 104')
+
 	Other Costco rulesets:
 
 		- Costco-static.com.xml
@@ -25,7 +30,7 @@
 		- www2.costco.com
 
 -->
-<ruleset name="Costco.com (partial)">
+<ruleset name="Costco.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/CourtListener.com.xml b/src/chrome/content/rules/CourtListener.com.xml
index 0c8ac09c273d..ecb2af62e05a 100644
--- a/src/chrome/content/rules/CourtListener.com.xml
+++ b/src/chrome/content/rules/CourtListener.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="CourtListener.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://courtlistener.com/ => https://courtlistener.com/: (28, 'Operation timed out after 15001 milliseconds with 7787 bytes received')
+Fetch error: http://www.courtlistener.com/ => https://www.courtlistener.com/: (28, 'Operation timed out after 15000 milliseconds with 31787 bytes received')
+
+-->
+<ruleset name="CourtListener.com" default_off='failed ruleset test'>
 
 	<target host="courtlistener.com" />
 	<target host="www.courtlistener.com" />
diff --git a/src/chrome/content/rules/Coveralls.io.xml b/src/chrome/content/rules/Coveralls.io.xml
index b58cf45f863b..df672a31ceeb 100644
--- a/src/chrome/content/rules/Coveralls.io.xml
+++ b/src/chrome/content/rules/Coveralls.io.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://blogs.coveralls.io/ => https://blogs.coveralls.io/: (6, 'Could not resolve host: blogs.coveralls.io')
+
 	Mixed content:
 
 		- Image on blog from s3.amazonaws.com *
@@ -6,7 +10,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Coveralls.io">
+<ruleset name="Coveralls.io" default_off='failed ruleset test'>
 
 	<target host="coveralls.io" />
 	<target host="blogs.coveralls.io" />
diff --git a/src/chrome/content/rules/CraveOnline.com.xml b/src/chrome/content/rules/CraveOnline.com.xml
index eb2a438ec599..3c6ff1631b92 100644
--- a/src/chrome/content/rules/CraveOnline.com.xml
+++ b/src/chrome/content/rules/CraveOnline.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://cdn.assets.craveonline.com/ (200) => https://a248.e.akamai.net/f/988/9998/10/cdn.assets.craveonline.com/ (404)
+
 	CDN buckets:
 
 		- cdn.assets.craveonline.com.edgesuite.net
@@ -21,7 +25,7 @@
 		- cdn.assets	(works, akamai)
 
 -->
-<ruleset name="CraveOnline.com (partial)">
+<ruleset name="CraveOnline.com (partial)" default_off='failed ruleset test'>
 
 	<target host="cdn.assets.craveonline.com" />
 
diff --git a/src/chrome/content/rules/Crazy-Egg.xml b/src/chrome/content/rules/Crazy-Egg.xml
index 5c07559e6ea7..cfa595cafef4 100644
--- a/src/chrome/content/rules/Crazy-Egg.xml
+++ b/src/chrome/content/rules/Crazy-Egg.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://crazyegg.com/ => https://crazyegg.com/: Too many redirects while fetching 'https://crazyegg.com/'
+
 	Other Crazy Egg rulesets:
 
 		- CEtrk.com.xml
@@ -25,7 +29,7 @@
 	* Mismatched
 
 -->
-<ruleset name="Crazy Egg (partial)">
+<ruleset name="Crazy Egg (partial)" default_off='failed ruleset test'>
 
 	<target host="crazyegg.com" />
 	<target host="script.crazyegg.com" />
diff --git a/src/chrome/content/rules/Creativeskills.be-falsemixed.xml b/src/chrome/content/rules/Creativeskills.be-falsemixed.xml
index 8f38c8c7cc5a..171900f5d186 100644
--- a/src/chrome/content/rules/Creativeskills.be-falsemixed.xml
+++ b/src/chrome/content/rules/Creativeskills.be-falsemixed.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://creativeskills.be/ => https://creativeskills.be/: Too many redirects while fetching 'https://creativeskills.be/'
+
 	For rules not causing false MCB, see Creativeskills.be.xml.
 
 -->
-<ruleset name="Creativeskills.be (false MCB)" platform="mixedcontent">
+<ruleset name="Creativeskills.be (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="creativeskills.be" />
 	<target host="*.creativeskills.be" />
diff --git a/src/chrome/content/rules/Creativeskills.be.xml b/src/chrome/content/rules/Creativeskills.be.xml
index 0a036ad8cf25..5eb39c5ed59e 100644
--- a/src/chrome/content/rules/Creativeskills.be.xml
+++ b/src/chrome/content/rules/Creativeskills.be.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://creativeskills.be/ => https://creativeskills.be/: Too many redirects while fetching 'https://creativeskills.be/'
+Fetch error: http://www.creativeskills.be/ => https://www.creativeskills.be/: Too many redirects while fetching 'https://www.creativeskills.be/'
+
 	For rules causing false MCB, see Creativeskills.be-falsemixed.xml.
 
 
@@ -11,7 +16,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Creativeskills.be (partial)">
+<ruleset name="Creativeskills.be (partial)" default_off='failed ruleset test'>
 
 	<target host="creativeskills.be" />
 	<target host="www.creativeskills.be" />
diff --git a/src/chrome/content/rules/CreditDisputeProgram.com.xml b/src/chrome/content/rules/CreditDisputeProgram.com.xml
index 8c21a9870fd6..33098d068945 100644
--- a/src/chrome/content/rules/CreditDisputeProgram.com.xml
+++ b/src/chrome/content/rules/CreditDisputeProgram.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="CreditDisputeProgram.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://creditdisputeprogram.com/ => https://creditdisputeprogram.com/: Too many redirects while fetching 'https://creditdisputeprogram.com/'
+
+-->
+<ruleset name="CreditDisputeProgram.com" default_off='failed ruleset test'>
 
 	<target host="creditdisputeprogram.com" />
 	<target host="*.creditdisputeprogram.com" />
diff --git a/src/chrome/content/rules/Crikey.xml b/src/chrome/content/rules/Crikey.xml
index 174a88832075..00a3cc524e14 100644
--- a/src/chrome/content/rules/Crikey.xml
+++ b/src/chrome/content/rules/Crikey.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://crikey.com.au/ => https://crikey.com.au/: Too many redirects while fetching 'https://crikey.com.au/'
+
 	Problematic subdomains:
 
 		- offers	(works; mismatched, CN: *.unbounce.com)
 
 -->
-<ruleset name="Crikey (partial)">
+<ruleset name="Crikey (partial)" default_off='failed ruleset test'>
 
 	<target host="crikey.com.au" />
 	<target host="*.crikey.com.au" />
diff --git a/src/chrome/content/rules/CryptoCoinTalk.com.xml b/src/chrome/content/rules/CryptoCoinTalk.com.xml
index 149bc4a46629..759c6a8afab6 100644
--- a/src/chrome/content/rules/CryptoCoinTalk.com.xml
+++ b/src/chrome/content/rules/CryptoCoinTalk.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.cryptocointalk.com/ => https://www.cryptocointalk.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.cryptocointalk.com'")
+
 	Problematic hosts:
 
 		- www *
@@ -16,7 +20,7 @@
 		- .cryptocointalk.com
 
 -->
-<ruleset name="CryptoCoinTalk.com">
+<ruleset name="CryptoCoinTalk.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Cuusoo.xml b/src/chrome/content/rules/Cuusoo.xml
index 976640120f58..91fc7749bfa9 100644
--- a/src/chrome/content/rules/Cuusoo.xml
+++ b/src/chrome/content/rules/Cuusoo.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://lego.cuusoo.com/ => https://lego.cuusoo.com/: (60, 'SSL certificate problem: certificate has expired')
+
 
 	CDN buckets:
 		https://s3.amazonaws.com/cuusoo/
@@ -12,7 +16,7 @@
 		- www.cuusoo.co.jp      (no https)
 
 -->
-<ruleset name="Cuusoo (partial)">
+<ruleset name="Cuusoo (partial)" default_off='failed ruleset test'>
 	<target host=     "cuusoo.com" />
 	<target host="lego.cuusoo.com" />
 	<target host= "www.cuusoo.com" />
diff --git a/src/chrome/content/rules/DMflex.xml b/src/chrome/content/rules/DMflex.xml
index d2f9ba8b3841..6faf8cd13f44 100644
--- a/src/chrome/content/rules/DMflex.xml
+++ b/src/chrome/content/rules/DMflex.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://serving.portal.dmflex.com/ => https://serving.portal.dmflex.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Nonfunctional subdomains:
 
 		- ^ *		(404)
@@ -7,7 +11,7 @@
 	* Mismatched, CN: serving.portal.dmflex.com
 
 -->
-<ruleset name="DMflex (partial)">
+<ruleset name="DMflex (partial)" default_off='failed ruleset test'>
 
 	<target host="serving.portal.dmflex.com" />
 
diff --git a/src/chrome/content/rules/DNA_Serum.xml b/src/chrome/content/rules/DNA_Serum.xml
index 4ec5e9cf2691..4a545538be94 100644
--- a/src/chrome/content/rules/DNA_Serum.xml
+++ b/src/chrome/content/rules/DNA_Serum.xml
@@ -1,4 +1,10 @@
-<ruleset name="DNA Serum">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://dnaserum.com/ => https://dnaserum.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="DNA Serum" default_off='failed ruleset test'>
 
 	<target host="dnaserum.com" />
 	<target host="*.dnaserum.com" />
diff --git a/src/chrome/content/rules/DR.com.tr.xml b/src/chrome/content/rules/DR.com.tr.xml
index 1dc1f16597be..a08553534b57 100644
--- a/src/chrome/content/rules/DR.com.tr.xml
+++ b/src/chrome/content/rules/DR.com.tr.xml
@@ -1,4 +1,11 @@
-<ruleset name="DR.com.tr">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.dr.com.tr/ => https://www.dr.com.tr/: Too many redirects while fetching 'https://www.dr.com.tr/'
+Fetch error: http://dr.com.tr/ => https://www.dr.com.tr/: Too many redirects while fetching 'https://www.dr.com.tr/'
+
+-->
+<ruleset name="DR.com.tr" default_off='failed ruleset test'>
   <target host="www.dr.com.tr" />
   <target host="dr.com.tr" />
 
diff --git a/src/chrome/content/rules/DataDirect.com.xml b/src/chrome/content/rules/DataDirect.com.xml
index d217644a011d..3ed96da13ee1 100644
--- a/src/chrome/content/rules/DataDirect.com.xml
+++ b/src/chrome/content/rules/DataDirect.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://datadirect.com// => https://www.progress.com/products/datadirect: (35, 'Unknown SSL protocol error in connection to www.progress.com:443 ')
+Fetch error: http://datadirect.com/ => https://www.progress.com/products/datadirect: (35, 'Unknown SSL protocol error in connection to www.progress.com:443 ')
+
 	(www.)?datadirect.com: Refused
 
 
@@ -7,7 +12,7 @@
 		- blogs.datadirect.com
 
 -->
-<ruleset name="DataDirect.com">
+<ruleset name="DataDirect.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Datatilsynet.xml b/src/chrome/content/rules/Datatilsynet.xml
index 41020bc67fee..dd88b327c7cc 100644
--- a/src/chrome/content/rules/Datatilsynet.xml
+++ b/src/chrome/content/rules/Datatilsynet.xml
@@ -1,4 +1,11 @@
-<ruleset name="Datatilsynet">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.slettmeg.no/ => https://slettmeg.no/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://slettmeg.no/ => https://slettmeg.no/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
+-->
+<ruleset name="Datatilsynet" default_off='failed ruleset test'>
   <target host="www.datatilsynet.no" />
   <target host="datatilsynet.no" />
   <target host="www.slettmeg.no" />
diff --git a/src/chrome/content/rules/Datemas.de.xml b/src/chrome/content/rules/Datemas.de.xml
index 7a8be40d2b65..4e4ff2418bbb 100644
--- a/src/chrome/content/rules/Datemas.de.xml
+++ b/src/chrome/content/rules/Datemas.de.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://web.datemas.de/ => https://web.datemas.de/: Too many redirects while fetching 'https://web.datemas.de/'
+
 	Nonfunctional subdomains:
 
 		- (www.)	(redirects to web)
 
 -->
-<ruleset name="Datemas.de (partial)">
+<ruleset name="Datemas.de (partial)" default_off='failed ruleset test'>
 
 	<target host="web.datemas.de" />
 
diff --git a/src/chrome/content/rules/Dealnews.com.xml b/src/chrome/content/rules/Dealnews.com.xml
index 684c384c61c9..8b4eaa1926d7 100644
--- a/src/chrome/content/rules/Dealnews.com.xml
+++ b/src/chrome/content/rules/Dealnews.com.xml
@@ -1,4 +1,11 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://dealnews.com/ => https://dealnews.com/: Too many redirects while fetching 'https://dealnews.com/'
+Fetch error: http://content.dealnews.com/ => https://dealnews.a.ssl.fastly.net/: Too many redirects while fetching 'https://dealnews.a.ssl.fastly.net/'
+Fetch error: http://dealnews.com/ => https://dealnews.com/: Too many redirects while fetching 'https://dealnews.com/'
+Fetch error: http://content.dealnews.com/ => https://dealnews.a.ssl.fastly.net/: Too many redirects while fetching 'https://dealnews.a.ssl.fastly.net/'
+
     Other dealnews.com rulesets:
 
         - Dlnws.com.xml
@@ -9,7 +16,7 @@
     and should use their domain and cert for SSL traffic
 
 -->
-<ruleset name="dealnews.com (partial)">
+<ruleset name="dealnews.com (partial)" default_off='failed ruleset test'>
     <target host="dealnews.com" />
     <target host="images.dealnews.com" />
     <target host="static.dealnews.com" />
diff --git a/src/chrome/content/rules/Debian.xml b/src/chrome/content/rules/Debian.xml
index 23bcf692ff94..85e52d5bc0b4 100644
--- a/src/chrome/content/rules/Debian.xml
+++ b/src/chrome/content/rules/Debian.xml
@@ -1,4 +1,11 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://git.debian.org/ => https://git.debian.org/: (28, 'Operation timed out after 15000 milliseconds with 5515198 bytes received')
+Fetch error: http://search.debian.org/ => https://search.debian.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
+-->
+
 <!--
 	For problematic rules, see Debian.org-problematic.xml.
 
@@ -123,7 +130,7 @@
 		- nm.debian.org
 
 -->
-<ruleset name="Debian (partial)">
+<ruleset name="Debian (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Debuggify.net.xml b/src/chrome/content/rules/Debuggify.net.xml
index e1c068f60af5..bb0130794e53 100644
--- a/src/chrome/content/rules/Debuggify.net.xml
+++ b/src/chrome/content/rules/Debuggify.net.xml
@@ -1,4 +1,10 @@
-<ruleset name="Debuggify.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://debuggify.net/ => https://debuggify.net/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
+-->
+<ruleset name="Debuggify.net" default_off='failed ruleset test'>
 
 	<target host="debuggify.net" />
 	<target host="*.debuggify.net" />
diff --git a/src/chrome/content/rules/Demandware.xml b/src/chrome/content/rules/Demandware.xml
index 6eba6d9b5783..354bf2764117 100644
--- a/src/chrome/content/rules/Demandware.xml
+++ b/src/chrome/content/rules/Demandware.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://investors.demandware.com/client/24/247632/css/ccbnIR.css => https://investors.demandware.com/client/24/247632/css/ccbnIR.css: (51, "SSL: no alternative certificate subject name matches target host name 'investors.demandware.com'")
+Fetch error: http://investors.demandware.com/media_files/IROL/24/247632/2015/img/mastheads/bg-masthead-investor.jpg => https://investors.demandware.com/media_files/IROL/24/247632/2015/img/mastheads/bg-masthead-investor.jpg: (51, "SSL: no alternative certificate subject name matches target host name 'investors.demandware.com'")
+
 	Other Demandware rulesets:
 
 		- Demandware.net.xml
@@ -41,7 +46,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Demandware.com (partial)">
+<ruleset name="Demandware.com (partial)" default_off='failed ruleset test'>
 
 	<target host="demandware.com"/>
 	<!--target host="labs.demandware.com"/-->
diff --git a/src/chrome/content/rules/DemocracyInAction.xml b/src/chrome/content/rules/DemocracyInAction.xml
index 216b248fece0..9d51e2fdd9bf 100644
--- a/src/chrome/content/rules/DemocracyInAction.xml
+++ b/src/chrome/content/rules/DemocracyInAction.xml
@@ -1,4 +1,10 @@
-<ruleset name="DemocracyInAction">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://democracyinaction.org/ => https://democracyinaction.org/: (51, "SSL: no alternative certificate subject name matches target host name 'democracyinaction.org'")
+
+-->
+<ruleset name="DemocracyInAction" default_off='failed ruleset test'>
 
 	<target host="democracyinaction.org" />
 	<target host="*.democracyinaction.org" />
diff --git a/src/chrome/content/rules/Depot.BY.xml b/src/chrome/content/rules/Depot.BY.xml
index 9500df1cd959..e3f8adb82912 100644
--- a/src/chrome/content/rules/Depot.BY.xml
+++ b/src/chrome/content/rules/Depot.BY.xml
@@ -1,4 +1,11 @@
-<ruleset name="Depot.BY">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://depot.by/ => https://depot.by/: (6, 'Could not resolve host: depot.by')
+Fetch error: http://www.depot.by/ => https://www.depot.by/: (6, 'Could not resolve host: www.depot.by')
+
+-->
+<ruleset name="Depot.BY" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Der_Keiler.com.xml b/src/chrome/content/rules/Der_Keiler.com.xml
index b8a6b1e0df2f..1b52ec195a0e 100644
--- a/src/chrome/content/rules/Der_Keiler.com.xml
+++ b/src/chrome/content/rules/Der_Keiler.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://cdn.derkeiler.com/ (200) => https://dk.cachefly.net/ (404)
+
 	Nonfunctional subdomains:
 
 		- (www.) *
@@ -10,7 +14,7 @@
 	* Refused
 
 -->
-<ruleset name="Der Keiler.com (partial)">
+<ruleset name="Der Keiler.com (partial)" default_off='failed ruleset test'>
 
 	<target host="cdn.derkeiler.com" />
 
diff --git a/src/chrome/content/rules/Diasp.de.xml b/src/chrome/content/rules/Diasp.de.xml
index d1f2aaec25af..53ecc00dbf85 100644
--- a/src/chrome/content/rules/Diasp.de.xml
+++ b/src/chrome/content/rules/Diasp.de.xml
@@ -1,4 +1,10 @@
-<ruleset name="Diasp.de">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.diasp.de/ => https://www.diasp.de/: (51, "SSL: no alternative certificate subject name matches target host name 'www.diasp.de'")
+
+-->
+<ruleset name="Diasp.de" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Dice.xml b/src/chrome/content/rules/Dice.xml
index 133f6591e4e2..d1e8d6046c10 100644
--- a/src/chrome/content/rules/Dice.xml
+++ b/src/chrome/content/rules/Dice.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cdn.dice.com/ => https://d1i4601q19kpjz.cloudfront.net/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	For rules causing false/broken MCB, see Dice-problematic.xml.
 
 
@@ -82,7 +86,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Dice.com (partial)">
+<ruleset name="Dice.com (partial)" default_off='failed ruleset test'>
 
 	<target host="assets.dice.com" />
 	<target host="employer.dice.com" />
diff --git a/src/chrome/content/rules/Digital-Future.it.xml b/src/chrome/content/rules/Digital-Future.it.xml
index 3908eed67b56..428b362d2381 100644
--- a/src/chrome/content/rules/Digital-Future.it.xml
+++ b/src/chrome/content/rules/Digital-Future.it.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://digital-future.it/ (200) => https://digital-future.it/ (521)
+Non-2xx HTTP code: http://www.digital-future.it/ (200) => https://digital-future.it/ (521)
+
 	Other Digital Future rulesets:
 
 		- Bitcurex.com.xml
@@ -7,7 +12,7 @@
 	www: mismatched, CN: digital-future.it
 
 -->
-<ruleset name="Digital-Future.it">
+<ruleset name="Digital-Future.it" default_off='failed ruleset test'>
 
 	<target host="digital-future.it" />
 	<target host="www.digital-future.it" />
diff --git a/src/chrome/content/rules/Digital_News_Agency.com.xml b/src/chrome/content/rules/Digital_News_Agency.com.xml
index 88b0ed8ccdce..77e7bd4dc7d1 100644
--- a/src/chrome/content/rules/Digital_News_Agency.com.xml
+++ b/src/chrome/content/rules/Digital_News_Agency.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://digitalnewsagency.com/ => https://www.digitalnewsagency.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	CDN buckets:
 
 		- dna-bucket-dna.cf.rawcdn.com <=> df7r7v78mcbtc.cloudfront.net
@@ -14,7 +18,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Digital News Agency.com">
+<ruleset name="Digital News Agency.com" default_off='failed ruleset test'>
 
 	<target host="digitalnewsagency.com" />
 	<target host="*.digitalnewsagency.com" />
diff --git a/src/chrome/content/rules/Digitaliseringsstyrelsen.xml b/src/chrome/content/rules/Digitaliseringsstyrelsen.xml
index 2e965725fce4..512fcd092f7b 100644
--- a/src/chrome/content/rules/Digitaliseringsstyrelsen.xml
+++ b/src/chrome/content/rules/Digitaliseringsstyrelsen.xml
@@ -1,4 +1,10 @@
-<ruleset name="Digitaliseringsstyrelsen">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://login.sikker-adgang.dk/ => https://login.sikker-adgang.dk/: (6, 'Could not resolve host: login.sikker-adgang.dk')
+
+-->
+<ruleset name="Digitaliseringsstyrelsen" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Dirty.ru.xml b/src/chrome/content/rules/Dirty.ru.xml
index 5a41d9bce74f..669441176e2a 100644
--- a/src/chrome/content/rules/Dirty.ru.xml
+++ b/src/chrome/content/rules/Dirty.ru.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://pit.dirty.ru/ => https://pit.dirty.ru/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Fully covered hosts in *dirty.ru:
 
 		- pit
 
 -->
-<ruleset name="dirty.ru">
+<ruleset name="dirty.ru" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Disconnect.me.xml b/src/chrome/content/rules/Disconnect.me.xml
index 2dd2d4dcee8f..7b1477ac67f6 100644
--- a/src/chrome/content/rules/Disconnect.me.xml
+++ b/src/chrome/content/rules/Disconnect.me.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://forum.disconnect.me/ => https://forum.disconnect.me/: (7, 'Failed to connect to forum.disconnect.me port 443: Connection refused')
+
 	CDN buckets:
 
 		- s3.amazonaws.com/disconnectblogimages/
@@ -13,7 +17,7 @@
 		- search
 
 -->
-<ruleset name="Disconnect.me">
+<ruleset name="Disconnect.me" default_off='failed ruleset test'>
 
 	<target host="disconnect.me" />
 	<target host="blog.disconnect.me" />
diff --git a/src/chrome/content/rules/Dizzcloud.com.xml b/src/chrome/content/rules/Dizzcloud.com.xml
index 5a300eb4d85a..6e9ab479d294 100644
--- a/src/chrome/content/rules/Dizzcloud.com.xml
+++ b/src/chrome/content/rules/Dizzcloud.com.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://dizzcloud.com/ => https://dizzcloud.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	Problematic subdomains:
 
 		- st	(mismatched, CN: dizzcloud.com)
 
 -->
-<ruleset name="Dizzcloud.com">
+<ruleset name="Dizzcloud.com" default_off='failed ruleset test'>
 
 	<target host="dizzcloud.com" />
 	<target host="*.dizzcloud.com" />
diff --git a/src/chrome/content/rules/Downloadster.xml b/src/chrome/content/rules/Downloadster.xml
index ef6116ffe821..eec7ff5fe552 100644
--- a/src/chrome/content/rules/Downloadster.xml
+++ b/src/chrome/content/rules/Downloadster.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://downloadster.net/ => https://downloadster.net/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	CDN buckets:
 
 		- d227ccvjlkns26.cloudfront.net
@@ -6,7 +10,7 @@
 			- media.downloadster.net
 
 -->
-<ruleset name="Downloadster">
+<ruleset name="Downloadster" default_off='failed ruleset test'>
 
 	<target host="downloadster.net" />
 	<target host="*.downloadster.net" />
diff --git a/src/chrome/content/rules/Drivee.xml b/src/chrome/content/rules/Drivee.xml
index 30d3146245f5..3c71857e7d48 100644
--- a/src/chrome/content/rules/Drivee.xml
+++ b/src/chrome/content/rules/Drivee.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://drivee.jp/ => https://www.drivee.jp/: Too many redirects while fetching 'https://www.drivee.jp/'
+Fetch error: http://www.drivee.jp/ => https://www.drivee.jp/: Too many redirects while fetching 'https://www.drivee.jp/'
+Fetch error: http://drivee.ne.jp/ => https://www.drivee.jp/: Too many redirects while fetching 'https://www.drivee.jp/'
+
 	For other Xserver coverage, see Xserver.xml.
 
 
@@ -17,7 +23,7 @@
 		- secure.drivee.ne.jp
 
 -->
-<ruleset name="drivee">
+<ruleset name="drivee" default_off='failed ruleset test'>
 
 	<target host="drivee.jp" />
 	<target host="www.drivee.jp" />
diff --git a/src/chrome/content/rules/Drupal.xml b/src/chrome/content/rules/Drupal.xml
index 202042de79e9..b68fd8f71f1c 100644
--- a/src/chrome/content/rules/Drupal.xml
+++ b/src/chrome/content/rules/Drupal.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://sec.drupal.org/ => https://sec.drupal.org/: (6, 'Could not resolve host: sec.drupal.org')
+
 	Nonfunctional subdomains:
 
 		- ftp
@@ -43,7 +47,7 @@
 	* Secured by us
 				
 -->
-<ruleset name="Drupal.org (partial)">
+<ruleset name="Drupal.org (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Duke-Energy-Convention-Center.xml b/src/chrome/content/rules/Duke-Energy-Convention-Center.xml
index 5ead89904ce8..8f40814cf644 100644
--- a/src/chrome/content/rules/Duke-Energy-Convention-Center.xml
+++ b/src/chrome/content/rules/Duke-Energy-Convention-Center.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://duke-energycenter.com/ => https://www.duke-energycenter.com/: (7, 'Failed to connect to www.duke-energycenter.com port 443: Connection refused')
+
 	Nonfunctional subdomains:
 
 		- m	(interrupted)
 
 -->
-<ruleset name="Duke Energy Convention Center (partial)">
+<ruleset name="Duke Energy Convention Center (partial)" default_off='failed ruleset test'>
 
 	<target host="duke-energycenter.com" />
 	<target host="*.duke-energycenter.com" />
diff --git a/src/chrome/content/rules/Dydx.io.xml b/src/chrome/content/rules/Dydx.io.xml
index 09fffdeb1093..56c7439d230e 100644
--- a/src/chrome/content/rules/Dydx.io.xml
+++ b/src/chrome/content/rules/Dydx.io.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://dydx.io/ => https://dydx.io/: Too many redirects while fetching 'https://dydx.io/'
+
 	Problematic subdomains:
 
 		- www	(refused)
 
 -->
-<ruleset name="dydx.io">
+<ruleset name="dydx.io" default_off='failed ruleset test'>
 
 	<target host="dydx.io" />
 	<target host="*.dydx.io" />
diff --git a/src/chrome/content/rules/E-food.gr.xml b/src/chrome/content/rules/E-food.gr.xml
index a012320a201b..3656a24e4dd3 100644
--- a/src/chrome/content/rules/E-food.gr.xml
+++ b/src/chrome/content/rules/E-food.gr.xml
@@ -1,7 +1,11 @@
-<!-- This ruleset is experimental. If you experience problems please
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://e-food.gr/ => https://e-food.gr/: (60, 'SSL certificate problem: certificate has expired')
+ This ruleset is experimental. If you experience problems please
 	 open an issue at https://github.com/kargig/https-everywhere -->
 
-<ruleset name="e-food.gr">
+<ruleset name="e-food.gr" default_off='failed ruleset test'>
   <target host="e-food.gr" />
   <target host="www.e-food.gr" />
 
diff --git a/src/chrome/content/rules/EFTPlus.asia.xml b/src/chrome/content/rules/EFTPlus.asia.xml
index 5840fbb7fc96..d4127a4073e6 100644
--- a/src/chrome/content/rules/EFTPlus.asia.xml
+++ b/src/chrome/content/rules/EFTPlus.asia.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://eftplus.asia/ => https://eftplus.asia/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	CDN buckets:
 
 		- d2a51w253vzgsa.cloudfront.net
 
 -->
-<ruleset name="EFTPlus.asia">
+<ruleset name="EFTPlus.asia" default_off='failed ruleset test'>
 
 	<target host="eftplus.asia" />
 	<target host="*.eftplus.asia" />
diff --git a/src/chrome/content/rules/ENTP.xml b/src/chrome/content/rules/ENTP.xml
index d0f3ebc7ec3c..8ba463ebb019 100644
--- a/src/chrome/content/rules/ENTP.xml
+++ b/src/chrome/content/rules/ENTP.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://tenderapp.com/ => https://tenderapp.com/: (56, 'SSL read: error:00000000:lib(0):func(0):reason(0), errno 104')
+Fetch error: http://www.tenderapp.com/ => https://www.tenderapp.com/: (56, 'SSL read: error:00000000:lib(0):func(0):reason(0), errno 104')
+
 	For problematic coverage, see ENTP-mismatches.xml.
 
 
@@ -13,7 +18,7 @@
 		- help.tenderapp.com
 
 -->
-<ruleset name="ENTP (partial)">
+<ruleset name="ENTP (partial)" default_off='failed ruleset test'>
 
 	<target host="lighthouseapp.com" />
 	<target host="*.lighthouseapp.com" />
diff --git a/src/chrome/content/rules/EPrize.xml b/src/chrome/content/rules/EPrize.xml
index b791164af145..1fc7808ad68b 100644
--- a/src/chrome/content/rules/EPrize.xml
+++ b/src/chrome/content/rules/EPrize.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://eprize.com/ => https://www.eprize.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.eprize.com'")
+Fetch error: http://eprize.net/ => https://www.eprize.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.eprize.com'")
+Fetch error: http://www.eprize.net/ => https://www.eprize.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.eprize.com'")
+
 	Problematic domains:
 
 		- eprize.com *
@@ -7,7 +13,7 @@
 	* Cert only matches *.eprize.com
 
 -->
-<ruleset name="ePrize">
+<ruleset name="ePrize" default_off='failed ruleset test'>
 
 	<target host="eprize.com" />
 	<target host="*.eprize.com" />
diff --git a/src/chrome/content/rules/EchoEnabled.xml b/src/chrome/content/rules/EchoEnabled.xml
index 0e582020b601..0c923002f212 100644
--- a/src/chrome/content/rules/EchoEnabled.xml
+++ b/src/chrome/content/rules/EchoEnabled.xml
@@ -1,4 +1,10 @@
-<ruleset name="Echo Enabled">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://api.echoenabled.com/ => https://api.echoenabled.com/: (6, 'Could not resolve host: api.echoenabled.com')
+
+-->
+<ruleset name="Echo Enabled" default_off='failed ruleset test'>
   <!-- Echo "real-time web platform" APIs -->
   <target host="api.echoenabled.com" />
   <target host="cdn.echoenabled.com" />
diff --git a/src/chrome/content/rules/Echoplex.us.xml b/src/chrome/content/rules/Echoplex.us.xml
index 40b08a1e3f74..e0961f853afc 100644
--- a/src/chrome/content/rules/Echoplex.us.xml
+++ b/src/chrome/content/rules/Echoplex.us.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://echoplex.us/ => https://echoplex.us/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://chat.echoplex.us/ => https://chat.echoplex.us/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.echoplex.us/ => https://echoplex.us/: (60, 'SSL certificate problem: certificate has expired')
+
 	Problematic hosts in *echoplex.us:
 
 		- embed ¹
@@ -17,7 +23,7 @@
 		- chat
 
 -->
-<ruleset name="echoplex.us (partial)">
+<ruleset name="echoplex.us (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Eclipse.xml b/src/chrome/content/rules/Eclipse.xml
index 8de5ce7f9ab4..8723ad708f7d 100644
--- a/src/chrome/content/rules/Eclipse.xml
+++ b/src/chrome/content/rules/Eclipse.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://marketplace.eclipse.org/user (200) => https://marketplace.eclipse.org/user (403)
+
 	Nonfunctional domains:
 
 		download.eclipse.org
 
 -->
-<ruleset name="Eclipse (partial)">
+<ruleset name="Eclipse (partial)" default_off='failed ruleset test'>
 
 	<target host="eclipse.org" />
 	<target host="bugs.eclipse.org" />
diff --git a/src/chrome/content/rules/EgoPay.com.xml b/src/chrome/content/rules/EgoPay.com.xml
index 0360cd85a72a..b9f5059fd8de 100644
--- a/src/chrome/content/rules/EgoPay.com.xml
+++ b/src/chrome/content/rules/EgoPay.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://egopay.com/ => https://egopay.com/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Fully covered subdomains:
 
 		- (www.)?
@@ -6,7 +10,7 @@
 		- help
 
 -->
-<ruleset name="EgoPay.com">
+<ruleset name="EgoPay.com" default_off='failed ruleset test'>
 
 	<target host="egopay.com" />
 	<target host="*.egopay.com" />
diff --git a/src/chrome/content/rules/Elsevier.xml b/src/chrome/content/rules/Elsevier.xml
index 70e17fb9610e..f938c32c22fa 100644
--- a/src/chrome/content/rules/Elsevier.xml
+++ b/src/chrome/content/rules/Elsevier.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://support.elsevier.com/ => https://support.elsevier.com/: (51, "SSL: no alternative certificate subject name matches target host name 'elsevier6.custhelp.com'")
+
 	NB: Remove Elsevier-mixedcontent.xml.
 
 	For problematic rules, see Elsevier-mismatches.xml
@@ -81,7 +85,7 @@
 	¹ Unsecurable <= refused
 
 -->
-<ruleset name="Elsevier.com (partial)">
+<ruleset name="Elsevier.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Elsevier_Health.com.xml b/src/chrome/content/rules/Elsevier_Health.com.xml
index b55225ee98b5..1bf4e242d42f 100644
--- a/src/chrome/content/rules/Elsevier_Health.com.xml
+++ b/src/chrome/content/rules/Elsevier_Health.com.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://asia.elsevierhealth.com/ => https://asia.elsevierhealth.com/: (51, "SSL: no alternative certificate subject name matches target host name 'asia.elsevierhealth.com'")
+Fetch error: http://www.asia.elsevierhealth.com/ => https://www.asia.elsevierhealth.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.asia.elsevierhealth.com'")
+Fetch error: http://secure.jbs.elsevierhealth.com/ => https://secure.jbs.elsevierhealth.com/: Too many redirects while fetching 'https://secure.jbs.elsevierhealth.com/'
+
 	Other Elsevier coverage, see Elsevier.xml.
 
 
@@ -11,7 +17,7 @@
 	secure: Reset over http & https
 
 -->
-<ruleset name="Elsevier Health.com">
+<ruleset name="Elsevier Health.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Encosia.xml b/src/chrome/content/rules/Encosia.xml
index 18d52e42b9ae..52ac4074ce34 100644
--- a/src/chrome/content/rules/Encosia.xml
+++ b/src/chrome/content/rules/Encosia.xml
@@ -1,4 +1,12 @@
-<ruleset name="Encosia" platform="mixedcontent">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://encosia.com/ => https://encosia.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.encosia.com/ => https://encosia.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://i.encosia.com/ => https://encosia.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
+-->
+<ruleset name="Encosia" platform="mixedcontent" default_off='failed ruleset test'>
   <target host="encosia.com" />
   <target host="www.encosia.com" />
   <target host="i.encosia.com" />
diff --git a/src/chrome/content/rules/Encrypt_Everything.ca.xml b/src/chrome/content/rules/Encrypt_Everything.ca.xml
index 710f54ddc7f4..d287660431ac 100644
--- a/src/chrome/content/rules/Encrypt_Everything.ca.xml
+++ b/src/chrome/content/rules/Encrypt_Everything.ca.xml
@@ -1,4 +1,11 @@
-<ruleset name="Encrypt Everything.ca">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://encrypteverything.ca/ => https://encrypteverything.ca/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.encrypteverything.ca/ => https://www.encrypteverything.ca/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Encrypt Everything.ca" default_off='failed ruleset test'>
 
 	<target host="encrypteverything.ca" />
 	<target host="www.encrypteverything.ca" />
diff --git a/src/chrome/content/rules/Enphase-Energy.xml b/src/chrome/content/rules/Enphase-Energy.xml
index 623ed825c06f..5b6cdda9355a 100644
--- a/src/chrome/content/rules/Enphase-Energy.xml
+++ b/src/chrome/content/rules/Enphase-Energy.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.enphase.com/ => https://www.enphase.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.enphase.com'")
+
 	Nonfunctional:
 
 		- investor	(cert: *.shareholder.com; 403)
 
 -->
-<ruleset name="Enphase Energy (partial)" platform="mixedcontent">
+<ruleset name="Enphase Energy (partial)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="enphase.com"/>
 	<target host="www.enphase.com"/>
diff --git a/src/chrome/content/rules/Enthought.com.xml b/src/chrome/content/rules/Enthought.com.xml
index 374c35e14f41..4d549a41a504 100644
--- a/src/chrome/content/rules/Enthought.com.xml
+++ b/src/chrome/content/rules/Enthought.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mail.enthought.com/ => https://mail.enthought.com/: (28, 'Connection timed out after 10001 milliseconds')
+
 	CDN buckets:
 
 		- enthought.zendesk.com
@@ -28,7 +32,7 @@
 		- .enthought.com
 
 -->
-<ruleset name="Enthought.com (partial)">
+<ruleset name="Enthought.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Entropy_Wave.xml b/src/chrome/content/rules/Entropy_Wave.xml
index eaa7dceb6ae0..2d03da1a32e7 100644
--- a/src/chrome/content/rules/Entropy_Wave.xml
+++ b/src/chrome/content/rules/Entropy_Wave.xml
@@ -1,10 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://entropywave.com/ => https://entropywave.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.entropywave.com/ => https://www.entropywave.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Nonfunctional domains:
 
 		- code	(cert: www; shows www)
 
 -->
-<ruleset name="Entropy Wave (partial)">
+<ruleset name="Entropy Wave (partial)" default_off='failed ruleset test'>
 
 	<target host="entropywave.com" />
 	<target host="www.entropywave.com" />
diff --git a/src/chrome/content/rules/EoPortal.xml b/src/chrome/content/rules/EoPortal.xml
index 44e616f8c841..c6c6d24fc230 100644
--- a/src/chrome/content/rules/EoPortal.xml
+++ b/src/chrome/content/rules/EoPortal.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://directory.eoportal.org/ => https://directory.eoportal.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Nonfunctional subdomains:
 
 		- www	(times out)
@@ -7,7 +11,7 @@
 	^eoportal.org doesn't exist.
 
 -->
-<ruleset name="eoPortal (partial)">
+<ruleset name="eoPortal (partial)" default_off='failed ruleset test'>
 
 	<target host="directory.eoportal.org" />
 
diff --git a/src/chrome/content/rules/Es.gy.xml b/src/chrome/content/rules/Es.gy.xml
index fd68e3183b0d..21e5f29924d0 100644
--- a/src/chrome/content/rules/Es.gy.xml
+++ b/src/chrome/content/rules/Es.gy.xml
@@ -1,4 +1,10 @@
-<ruleset name="es.gy">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://es.gy/ => https://es.gy/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="es.gy" default_off='failed ruleset test'>
 
 	<target host="es.gy" />
 	<target host="*.es.gy" />
diff --git a/src/chrome/content/rules/Eseeky.com.xml b/src/chrome/content/rules/Eseeky.com.xml
index 8ea360c1fa2e..a2d45b0679a9 100644
--- a/src/chrome/content/rules/Eseeky.com.xml
+++ b/src/chrome/content/rules/Eseeky.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="eseeky.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://eseeky.com/ => https://eseeky.com/: (6, 'Could not resolve host: eseeky.com')
+
+-->
+<ruleset name="eseeky.com" default_off='failed ruleset test'>
 
 	<target host="eseeky.com" />
 	<target host="*.eseeky.com" />
diff --git a/src/chrome/content/rules/Evisa-Vietnam.Com.xml b/src/chrome/content/rules/Evisa-Vietnam.Com.xml
index cac1e44d1528..f0907a1e52f3 100644
--- a/src/chrome/content/rules/Evisa-Vietnam.Com.xml
+++ b/src/chrome/content/rules/Evisa-Vietnam.Com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Evisa-Vietnam.Com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://evisa-vietnam.com/ => https://evisa-vietnam.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Evisa-Vietnam.Com" default_off='failed ruleset test'>
 
 	<target host="evisa-vietnam.com" />
 	<target host="*.evisa-vietnam.com" />
diff --git a/src/chrome/content/rules/Evm.dk.xml b/src/chrome/content/rules/Evm.dk.xml
index 2df5bb49ab0c..9b60cdfca11b 100644
--- a/src/chrome/content/rules/Evm.dk.xml
+++ b/src/chrome/content/rules/Evm.dk.xml
@@ -1,10 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://evm.dk/ => https://www.evm.dk/: (7, 'Failed to connect to www.evm.dk port 443: Connection refused')
+Fetch error: http://www.evm.dk/ => https://www.evm.dk/: (7, 'Failed to connect to www.evm.dk port 443: Connection refused')
+
 	Works almost perfectly: In a few places, jquery
 	is hard-coded to be obtained over http, which
 	causes problems for browsers with mixed content
 	blocking.
 -->
-<ruleset name="Evm.dk" platform="mixedcontent">
+<ruleset name="Evm.dk" platform="mixedcontent" default_off='failed ruleset test'>
 	<target host="evm.dk" />
 	<target host="www.evm.dk" />
 
diff --git a/src/chrome/content/rules/Eweka.nl.xml b/src/chrome/content/rules/Eweka.nl.xml
index 87d2328f59ac..ece8a6aefe0c 100644
--- a/src/chrome/content/rules/Eweka.nl.xml
+++ b/src/chrome/content/rules/Eweka.nl.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://eweka.nl/ => https://eweka.nl/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.eweka.nl/ => https://www.eweka.nl/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Insecure cookies are set for these hosts:
 
 		- eweka.nl
@@ -12,7 +17,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Eweka.nl">
+<ruleset name="Eweka.nl" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Exacom.sk.xml b/src/chrome/content/rules/Exacom.sk.xml
index 1fcfdce02160..bff920c12929 100644
--- a/src/chrome/content/rules/Exacom.sk.xml
+++ b/src/chrome/content/rules/Exacom.sk.xml
@@ -1,4 +1,11 @@
-<ruleset name="Exacom.sk">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://exacom.sk/ => https://www.exacom.sk/: (51, "SSL: no alternative certificate subject name matches target host name 'www.exacom.sk'")
+Fetch error: http://www.exacom.sk/ => https://www.exacom.sk/: (51, "SSL: no alternative certificate subject name matches target host name 'www.exacom.sk'")
+
+-->
+<ruleset name="Exacom.sk" default_off='failed ruleset test'>
   <target host="exacom.sk" />
   <target host="www.exacom.sk" />
 
diff --git a/src/chrome/content/rules/Expanded_Support.com.xml b/src/chrome/content/rules/Expanded_Support.com.xml
index c0d0bf12e048..ac9243c51974 100644
--- a/src/chrome/content/rules/Expanded_Support.com.xml
+++ b/src/chrome/content/rules/Expanded_Support.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://expandedsupport.com/ => https://expandedsupport.com/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://www.expandedsupport.com/ => https://expandedsupport.com/: (28, 'Connection timed out after 10000 milliseconds')
+
 	For other Micro Focus coverage, see Micro_Focus.com.xml.
 
 
@@ -9,7 +14,7 @@
 	¹ Cert only matches ^expandedsupport.com
 
 -->
-<ruleset name="Expanded Support.com">
+<ruleset name="Expanded Support.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/EyeTech.xml b/src/chrome/content/rules/EyeTech.xml
index 25a401675e65..8273ab213439 100644
--- a/src/chrome/content/rules/EyeTech.xml
+++ b/src/chrome/content/rules/EyeTech.xml
@@ -1,4 +1,11 @@
-<ruleset name="EyeTech">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://eyetechds.com/ => https://eyetechds.com/: (51, "SSL: no alternative certificate subject name matches target host name 'eyetechds.com'")
+Fetch error: http://www.eyetechds.com/ => https://www.eyetechds.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.eyetechds.com'")
+
+-->
+<ruleset name="EyeTech" default_off='failed ruleset test'>
 
 	<target host="eyetechds.com" />
 	<target host="www.eyetechds.com" />
diff --git a/src/chrome/content/rules/FCPA-Blog.xml b/src/chrome/content/rules/FCPA-Blog.xml
index b142f2a9bccf..9646f644e386 100644
--- a/src/chrome/content/rules/FCPA-Blog.xml
+++ b/src/chrome/content/rules/FCPA-Blog.xml
@@ -1,4 +1,11 @@
-<ruleset name="FCPA Blog (partial)">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://fcpablog.com/ => https://fcpablog.squarespace.com/: Too many redirects while fetching 'https://fcpablog.squarespace.com/'
+Fetch error: http://www.fcpablog.com/ => https://fcpablog.squarespace.com/: Too many redirects while fetching 'https://fcpablog.squarespace.com/'
+
+-->
+<ruleset name="FCPA Blog (partial)" default_off='failed ruleset test'>
 
 	<target host="fcpablog.com"/>
 	<target host="www.fcpablog.com"/>
diff --git a/src/chrome/content/rules/FREECULTR.xml b/src/chrome/content/rules/FREECULTR.xml
index 9076a1e13c61..5fbbf0ec7672 100644
--- a/src/chrome/content/rules/FREECULTR.xml
+++ b/src/chrome/content/rules/FREECULTR.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://freecultr.com/ => https://www.freecultr.com/: (7, 'Failed to connect to www.freecultr.com port 443: Connection timed out')
+
 	Problematic subdomains:
 
 		- ^		(cert only matches www)
 		- static
 
 -->
-<ruleset name="FREECULTR">
+<ruleset name="FREECULTR" default_off='failed ruleset test'>
 
 	<target host="freecultr.com" />
 	<target host="*.freecultr.com" />
diff --git a/src/chrome/content/rules/FacebookCoreWWWi.onion.xml b/src/chrome/content/rules/FacebookCoreWWWi.onion.xml
index 992e6a556d3e..d58158fdacc5 100644
--- a/src/chrome/content/rules/FacebookCoreWWWi.onion.xml
+++ b/src/chrome/content/rules/FacebookCoreWWWi.onion.xml
@@ -1,4 +1,16 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://facebookcorewwwi.onion/ => https://facebookcorewwwi.onion/: (6, 'Could not resolve host: facebookcorewwwi.onion')
+Fetch error: http://developers.facebookcorewwwi.onion/ => https://developers.facebookcorewwwi.onion/: (6, 'Could not resolve host: developers.facebookcorewwwi.onion')
+Fetch error: http://m.facebookcorewwwi.onion/ => https://m.facebookcorewwwi.onion/: (6, 'Could not resolve host: m.facebookcorewwwi.onion')
+Fetch error: http://www.facebookcorewwwi.onion/ => https://www.facebookcorewwwi.onion/: (6, 'Could not resolve host: www.facebookcorewwwi.onion')
+Fetch error: http://fbcdn23dssr3jqnq.onion/ => https://fbcdn23dssr3jqnq.onion/: (6, 'Could not resolve host: fbcdn23dssr3jqnq.onion')
+Fetch error: http://scontent.xx.fbcdn23dssr3jqnq.onion/ => https://scontent.xx.fbcdn23dssr3jqnq.onion/: (6, 'Could not resolve host: scontent.xx.fbcdn23dssr3jqnq.onion')
+Fetch error: http://fbsbx2q4mvcl63pw.onion/ => https://fbsbx2q4mvcl63pw.onion/: (6, 'Could not resolve host: fbsbx2q4mvcl63pw.onion')
+
+-->
+
 <!--
 	For other Facebook coverage, see Facebook.xml.
 
@@ -43,7 +55,7 @@
 		- .facebookcorewwwi.onion
 
 -->
-<ruleset name="Facebook Hidden Service" platform="mixedcontent">
+<ruleset name="Facebook Hidden Service" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Fast-Web-Media.xml b/src/chrome/content/rules/Fast-Web-Media.xml
index 7fa0d0b502fe..bbb161b94a14 100644
--- a/src/chrome/content/rules/Fast-Web-Media.xml
+++ b/src/chrome/content/rules/Fast-Web-Media.xml
@@ -1,10 +1,16 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://fastwebmedia.com/ => https://fastwebmedia.com/: (7, 'Failed to connect to fastwebmedia.com port 443: Connection timed out')
+Fetch error: http://www.fastwebmedia.com/ => https://www.fastwebmedia.com/: (7, 'Failed to connect to www.fastwebmedia.com port 443: Connection timed out')
+Fetch error: http://fwmapps.co.uk/ => https://fwmapps.co.uk/: (6, 'Could not resolve host: fwmapps.co.uk')
+
 	Nonfunctional domains:
 
 		- (www.)fastwebmedia.gr
 
 -->
-<ruleset name="Fast Web Media (partial)">
+<ruleset name="Fast Web Media (partial)" default_off='failed ruleset test'>
 
 	<target host="fastwebmedia.com" />
 	<target host="www.fastwebmedia.com" />
diff --git a/src/chrome/content/rules/Federal-Bureau-of-Investigation.xml b/src/chrome/content/rules/Federal-Bureau-of-Investigation.xml
index fd77e5149c92..daa1a7d26e93 100644
--- a/src/chrome/content/rules/Federal-Bureau-of-Investigation.xml
+++ b/src/chrome/content/rules/Federal-Bureau-of-Investigation.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://foia.fbi.gov/ => https://foia.fbi.gov/: (28, 'Connection timed out after 10001 milliseconds')
+
 	Federal Bureau of Investigation
 
 	For other US government coverage, see US-government.xml.
@@ -9,7 +13,7 @@
 		- .fbi.gov
 
 -->
-<ruleset name="FBI.gov (partial)">
+<ruleset name="FBI.gov (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Federation-of-Small-Businesses.xml b/src/chrome/content/rules/Federation-of-Small-Businesses.xml
index f31f96dcd96f..4fc8f244b0cb 100644
--- a/src/chrome/content/rules/Federation-of-Small-Businesses.xml
+++ b/src/chrome/content/rules/Federation-of-Small-Businesses.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://fsb.org.uk/ => http://fsb.org.uk/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Nonfunctional domains:
 
 		- forum.fsb.org.uk	(times out)
 
 -->
-<ruleset name="Federation of Small Businesses (partial)">
+<ruleset name="Federation of Small Businesses (partial)" default_off='failed ruleset test'>
 
 	<target host="fsb.org.uk" />
 	<target host="*.fsb.org.uk" />
diff --git a/src/chrome/content/rules/FilmBreak.xml b/src/chrome/content/rules/FilmBreak.xml
index 5e8626f23659..b2803eb82f59 100644
--- a/src/chrome/content/rules/FilmBreak.xml
+++ b/src/chrome/content/rules/FilmBreak.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://filmbreak.com/ => https://filmbreak.com/: (35, 'Unknown SSL protocol error in connection to filmbreak.com:443 ')
+
 	CDN buckets:
 
 		- s3.amazonaws.com/filmbreak_production/
@@ -9,7 +13,7 @@
 		- ^
 
 -->
-<ruleset name="FilmBreak">
+<ruleset name="FilmBreak" default_off='failed ruleset test'>
 
 	<target host="filmbreak.com" />
 	<target host="*.filmbreak.com" />
diff --git a/src/chrome/content/rules/Fimfiction.net.xml b/src/chrome/content/rules/Fimfiction.net.xml
index f88fc2582ecb..dcd7f723e900 100644
--- a/src/chrome/content/rules/Fimfiction.net.xml
+++ b/src/chrome/content/rules/Fimfiction.net.xml
@@ -1,4 +1,11 @@
-<ruleset name="Fimfiction.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://fimfiction-static.net/ => https://www.fimfiction-static.net/: (28, 'Resolving timed out after 10519 milliseconds')
+Fetch error: http://www.fimfiction-static.net/ => https://www.fimfiction-static.net/: (28, 'Resolving timed out after 10518 milliseconds')
+
+-->
+<ruleset name="Fimfiction.net" default_off='failed ruleset test'>
   <target host="fimfiction.net" />
   <target host="www.fimfiction.net" />
   <rule from="^http://(?:www\.)?fimfiction\.net/" to="https://www.fimfiction.net/"/>
diff --git a/src/chrome/content/rules/Financial-Cryptography.xml b/src/chrome/content/rules/Financial-Cryptography.xml
index 011a5f1846cc..05414eca2840 100644
--- a/src/chrome/content/rules/Financial-Cryptography.xml
+++ b/src/chrome/content/rules/Financial-Cryptography.xml
@@ -1,4 +1,11 @@
-<ruleset name="Financial Cryptography" platform="cacert">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://financialcryptography.com/ => https://financialcryptography.com/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://www.financialcryptography.com/ => https://www.financialcryptography.com/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
+-->
+<ruleset name="Financial Cryptography" platform="cacert" default_off='failed ruleset test'>
 	<target host="financialcryptography.com" />
 	<target host="www.financialcryptography.com" />
 
diff --git a/src/chrome/content/rules/FindTheBest.xml b/src/chrome/content/rules/FindTheBest.xml
index e260f4c10f22..764e6f7d0ac9 100644
--- a/src/chrome/content/rules/FindTheBest.xml
+++ b/src/chrome/content/rules/FindTheBest.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://findthebest.com/ => https://findthebest.com/: (51, "SSL: no alternative certificate subject name matches target host name 'findthebest.com'")
+
 	CDN buckets:
 
 		- d3jpkdcwyize5y.cloudfront.net
@@ -18,7 +22,7 @@
 			- *		(per-client domains)
 
 -->
-<ruleset name="FindTheBest.com">
+<ruleset name="FindTheBest.com" default_off='failed ruleset test'>
 
 	<target host="findthebest.com" />
 	<target host="*.findthebest.com" />
diff --git a/src/chrome/content/rules/Firedoglake.xml b/src/chrome/content/rules/Firedoglake.xml
index 4de73e520caf..31721a6b0b36 100644
--- a/src/chrome/content/rules/Firedoglake.xml
+++ b/src/chrome/content/rules/Firedoglake.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://members.firedoglake.com/ => https://members.firedoglake.com/: (51, "SSL: no alternative certificate subject name matches target host name 'members.firedoglake.com'")
+
 	Nonfunctional subdomains:
 
 		- static1
 
 -->
-<ruleset name="Firedoglake (partial)">
+<ruleset name="Firedoglake (partial)" default_off='failed ruleset test'>
 
 	<target host="members.firedoglake.com" />
 
diff --git a/src/chrome/content/rules/First_Class_Magazine.se-falsemixed.xml b/src/chrome/content/rules/First_Class_Magazine.se-falsemixed.xml
index 79569ec4378f..bff66603df83 100644
--- a/src/chrome/content/rules/First_Class_Magazine.se-falsemixed.xml
+++ b/src/chrome/content/rules/First_Class_Magazine.se-falsemixed.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://firstclassmagazine.se/ => https://firstclassmagazine.se/: (51, "SSL: no alternative certificate subject name matches target host name 'www.firstclassmagazine.se'")
+
 	For rules not causing false/broken MCB, see First_Class_Magazine.se.xml.
 
 -->
-<ruleset name="First Class Magazine.se (false MCB)" platform="mixedcontent">
+<ruleset name="First Class Magazine.se (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="firstclassmagazine.se" />
 	<target host="*.firstclassmagazine.se" />
diff --git a/src/chrome/content/rules/FoECV_LiaB.com.xml b/src/chrome/content/rules/FoECV_LiaB.com.xml
index f7c8897a6452..b6458df41039 100644
--- a/src/chrome/content/rules/FoECV_LiaB.com.xml
+++ b/src/chrome/content/rules/FoECV_LiaB.com.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://foecvliab.com/ => https://www.foecvliab.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.foecvliab.com/ => https://www.foecvliab.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	^: refused
 
 -->
-<ruleset name="FoECV LiaB.com">
+<ruleset name="FoECV LiaB.com" default_off='failed ruleset test'>
 
 	<target host="foecvliab.com" />
 	<target host="www.foecvliab.com" />
diff --git a/src/chrome/content/rules/Forge_Software.xml b/src/chrome/content/rules/Forge_Software.xml
index 23203ba46257..67c0c297a33c 100644
--- a/src/chrome/content/rules/Forge_Software.xml
+++ b/src/chrome/content/rules/Forge_Software.xml
@@ -1,4 +1,10 @@
-<ruleset name="Forge Software">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://forgesoftware.com/ => https://forgesoftware.com/: (7, 'Failed to connect to forgesoftware.com port 443: Connection refused')
+
+-->
+<ruleset name="Forge Software" default_off='failed ruleset test'>
 
 	<target host="forgesoftware.com" />
 	<target host="*.forgesoftware.com" />
diff --git a/src/chrome/content/rules/FormSanity.com.xml b/src/chrome/content/rules/FormSanity.com.xml
index 4583153cddbc..4749c3fc2a55 100644
--- a/src/chrome/content/rules/FormSanity.com.xml
+++ b/src/chrome/content/rules/FormSanity.com.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://staging.formsanity.com/ => https://staging.formsanity.com/: (28, 'Connection timed out after 10001 milliseconds')
+
 	www: refused
 
 -->
-<ruleset name="FormSanity.com (partial)">
+<ruleset name="FormSanity.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Freegeoip.net.xml b/src/chrome/content/rules/Freegeoip.net.xml
index 79c68a38a23d..e5deb2d6a581 100644
--- a/src/chrome/content/rules/Freegeoip.net.xml
+++ b/src/chrome/content/rules/Freegeoip.net.xml
@@ -1,4 +1,10 @@
-<ruleset name="freegeoip.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.freegeoip.net/ => https://www.freegeoip.net/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
+-->
+<ruleset name="freegeoip.net" default_off='failed ruleset test'>
 
 	<target host="freegeoip.net" />
 	<target host="www.freegeoip.net" />
diff --git a/src/chrome/content/rules/FrenchTouch.pro.xml b/src/chrome/content/rules/FrenchTouch.pro.xml
index b9bd30656f22..d60706ef6058 100644
--- a/src/chrome/content/rules/FrenchTouch.pro.xml
+++ b/src/chrome/content/rules/FrenchTouch.pro.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://frenchtouch.pro/ => https://frenchtouch.pro/: (6, 'Could not resolve host: frenchtouch.pro')
+Fetch error: http://www.frenchtouch.pro/ => https://frenchtouch.pro/: (6, 'Could not resolve host: frenchtouch.pro')
+
 	www: dropped
 
 -->
-<ruleset name="FrenchTouch.pro">
+<ruleset name="FrenchTouch.pro" default_off='failed ruleset test'>
 
 	<target host="frenchtouch.pro" />
 	<target host="www.frenchtouch.pro" />
diff --git a/src/chrome/content/rules/Friendfeed.xml b/src/chrome/content/rules/Friendfeed.xml
index 1a9a9a727275..9c44e34f845a 100644
--- a/src/chrome/content/rules/Friendfeed.xml
+++ b/src/chrome/content/rules/Friendfeed.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://friendfeed.com/ => https://friendfeed.com/: (51, "SSL: no alternative certificate subject name matches target host name 'friendfeed.com'")
+Fetch error: http://friendfeed-media.com/ => https://friendfeed.com/: (51, "SSL: no alternative certificate subject name matches target host name 'friendfeed.com'")
+
 	CDN buckets:
 
 		- s3.amazonaws.com/friendfeed-media/
@@ -20,7 +25,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Friendfeed">
+<ruleset name="Friendfeed" default_off='failed ruleset test'>
 
 	<target host="friendfeed.com" />
 	<target host="*.friendfeed.com" />
diff --git a/src/chrome/content/rules/Fundacion_Televisa.org.xml b/src/chrome/content/rules/Fundacion_Televisa.org.xml
index 9352cb3e402e..dd683034ec38 100644
--- a/src/chrome/content/rules/Fundacion_Televisa.org.xml
+++ b/src/chrome/content/rules/Fundacion_Televisa.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://fundaciontelevisa.org/ => https://fundaciontelevisa.org/: (60, 'SSL certificate problem: self signed certificate')
+
 	Mixed content:
 
 		- css on www from www *
@@ -10,7 +14,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Fundacion Televisa.org (false MCB)" platform="mixedcontent">
+<ruleset name="Fundacion Televisa.org (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="fundaciontelevisa.org" />
 	<target host="*.fundaciontelevisa.org" />
diff --git a/src/chrome/content/rules/Funky_Android.com.xml b/src/chrome/content/rules/Funky_Android.com.xml
index ab555fa3c982..90f22f707d22 100644
--- a/src/chrome/content/rules/Funky_Android.com.xml
+++ b/src/chrome/content/rules/Funky_Android.com.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://funkyandroid.com/ => https://funkyandroid.com/: (51, "SSL: no alternative certificate subject name matches target host name 'funkyandroid.com'")
+Fetch error: http://www.funkyandroid.com/ => https://funkyandroid.com/: (51, "SSL: no alternative certificate subject name matches target host name 'funkyandroid.com'")
+
 	Cert only matches ^funkyandroid.com
 
 -->
-<ruleset name="Funky Android.com">
+<ruleset name="Funky Android.com" default_off='failed ruleset test'>
 
 	<target host="funkyandroid.com" />
 	<target host="www.funkyandroid.com" />
diff --git a/src/chrome/content/rules/GCaptain.com.xml b/src/chrome/content/rules/GCaptain.com.xml
index a7a07519e5e5..06fe3b572670 100644
--- a/src/chrome/content/rules/GCaptain.com.xml
+++ b/src/chrome/content/rules/GCaptain.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://gcaptain.com/ => https://gcaptain.com/: Too many redirects while fetching 'https://gcaptain.com/'
+
 	CDN buckets:
 
 		- d2m8pnbf2v4ae2.cloudfront.net
@@ -24,7 +28,7 @@
 	* cloudfront
 
 -->
-<ruleset name="gCaptain.com (partial)">
+<ruleset name="gCaptain.com (partial)" default_off='failed ruleset test'>
 
 	<target host="gcaptain.com" />
 	<target host="*.gcaptain.com" />
diff --git a/src/chrome/content/rules/GMO_Cloud.com.xml b/src/chrome/content/rules/GMO_Cloud.com.xml
index 4ec17358fe51..79585f41e0f0 100644
--- a/src/chrome/content/rules/GMO_Cloud.com.xml
+++ b/src/chrome/content/rules/GMO_Cloud.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://blog.gmocloud.com/ => https://blog.gmocloud.com/: (51, "SSL: no alternative certificate subject name matches target host name 'blog.gmocloud.com'")
+Fetch error: http://home.gmocloud.com/ => https://home.gmocloud.com/: (28, 'Connection timed out after 10000 milliseconds')
+
 	For other GMO coverage, see GMO_Internet.xml.
 
 
@@ -53,7 +58,7 @@
 	³ Unsecurable <= 404
 
 -->
-<ruleset name="GMO Cloud.com (partial)">
+<ruleset name="GMO Cloud.com (partial)" default_off='failed ruleset test'>
 
 	<target host="gmocloud.com" />
 	<target host="blog.gmocloud.com" />
diff --git a/src/chrome/content/rules/GMO_Internet.xml b/src/chrome/content/rules/GMO_Internet.xml
index 933ceb563b73..02bf489d661d 100644
--- a/src/chrome/content/rules/GMO_Internet.xml
+++ b/src/chrome/content/rules/GMO_Internet.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mng.gmo.jp/ => https://mng.gmo.jp/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Other GMO rulesets:
 
 		- Click-Sec.com.xml
@@ -66,7 +70,7 @@
 	* Secured by us
 
 -->
-<ruleset name="GMO.jp (partial)">
+<ruleset name="GMO.jp (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/GMO_Registry.com.xml b/src/chrome/content/rules/GMO_Registry.com.xml
index abc13e736c5e..e21bc3ef0321 100644
--- a/src/chrome/content/rules/GMO_Registry.com.xml
+++ b/src/chrome/content/rules/GMO_Registry.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://gmo-registry.com/ => https://gmo-registry.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.gmo-registry.com/ => https://www.gmo-registry.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	For other GMO coverage, see GMO_Internet.xml.
 
 
@@ -7,7 +12,7 @@
 		- Images on www.gmoregistry.com from cache.img.gmo.jp
 
 -->
-<ruleset name="GMO-Registry.com">
+<ruleset name="GMO-Registry.com" default_off='failed ruleset test'>
 
 	<target host="gmoregistry.com" />
 	<target host="www.gmoregistry.com" />
diff --git a/src/chrome/content/rules/Gaminator.xml b/src/chrome/content/rules/Gaminator.xml
index 2e944fb50ae9..b70a4dee4d1a 100644
--- a/src/chrome/content/rules/Gaminator.xml
+++ b/src/chrome/content/rules/Gaminator.xml
@@ -1,10 +1,16 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://gaminatorslots.com/ => https://slotsgaminator.com/: (28, 'Operation timed out after 15002 milliseconds with 0 bytes received')
+Fetch error: http://www.gaminatorslots.com/ => https://www.slotsgaminator.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://slotsgaminator.com/ => https://slotsgaminator.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	Problematic domains:
 
 		- (www.)gaminatorslots.com	(expired 2012-05-18)
 
 -->
-<ruleset name="Gaminator">
+<ruleset name="Gaminator" default_off='failed ruleset test'>
 
 	<target host="gaminatorslots.com" />
 	<target host="www.gaminatorslots.com" />
diff --git a/src/chrome/content/rules/Gannett_Ridge.xml b/src/chrome/content/rules/Gannett_Ridge.xml
index d085915b73f7..b2c5d03c2694 100644
--- a/src/chrome/content/rules/Gannett_Ridge.xml
+++ b/src/chrome/content/rules/Gannett_Ridge.xml
@@ -1,4 +1,11 @@
-<ruleset name="Gannett Ridge">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://gannettridge.com/ => https://gannettridge.com/: (51, "SSL: no alternative certificate subject name matches target host name 'gannettridge.com'")
+Fetch error: http://www.gannettridge.com/ => https://www.gannettridge.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.gannettridge.com'")
+
+-->
+<ruleset name="Gannett Ridge" default_off='failed ruleset test'>
 
 	<target host="gannettridge.com" />
 	<target host="www.gannettridge.com" />
diff --git a/src/chrome/content/rules/GeForce.com.xml b/src/chrome/content/rules/GeForce.com.xml
index f11e5284d836..424e14e3abaa 100644
--- a/src/chrome/content/rules/GeForce.com.xml
+++ b/src/chrome/content/rules/GeForce.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://origin-www.geforce.com/ => https://origin-www.geforce.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	For other nVidia coverage, see NVidia.xml.
 
 
@@ -17,7 +21,7 @@
 		- origin-www.geforce.com
 
 -->
-<ruleset name="GeForce.com (partial)">
+<ruleset name="GeForce.com (partial)" default_off='failed ruleset test'>
 
 	<target host="forums.geforce.com" />
 	<target host="origin-www.geforce.com" />
diff --git a/src/chrome/content/rules/GearSourceEurope.xml b/src/chrome/content/rules/GearSourceEurope.xml
index 48cc148d75de..fa0dec08dfd0 100644
--- a/src/chrome/content/rules/GearSourceEurope.xml
+++ b/src/chrome/content/rules/GearSourceEurope.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://gearsourceeurope.com/ => https://gearsourceeurope.com/: Too many redirects while fetching 'https://gearsourceeurope.com/'
+
 	Nonfunctional subdomains:
 
 		- cdn	(redirects to www)
 
 -->
-<ruleset name="GearSourceEurope (partial)">
+<ruleset name="GearSourceEurope (partial)" default_off='failed ruleset test'>
 
 	<target host="gearsourceeurope.com" />
 	<target host="*.gearsourceeurope.com" />
diff --git a/src/chrome/content/rules/Geek_Tech_Labs.com.xml b/src/chrome/content/rules/Geek_Tech_Labs.com.xml
index 0838ef240af7..b91977599b38 100644
--- a/src/chrome/content/rules/Geek_Tech_Labs.com.xml
+++ b/src/chrome/content/rules/Geek_Tech_Labs.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://geektechlabs.com/ => https://www.geektechlabs.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Problematic subdomains:
 
 		- ^	(prints "down for maintenance"; mismatched, CN: cryptonetwork.com)
@@ -25,7 +29,7 @@
 	*** Rule not on by default, doesn't trip MCB
 
 -->
-<ruleset name="Geek Tech Labs.com">
+<ruleset name="Geek Tech Labs.com" default_off='failed ruleset test'>
 
 	<target host="geektechlabs.com" />
 	<target host="*.geektechlabs.com" />
diff --git a/src/chrome/content/rules/Gemnasium.com.xml b/src/chrome/content/rules/Gemnasium.com.xml
index 23dfd1a7ec2e..61ccd2795033 100644
--- a/src/chrome/content/rules/Gemnasium.com.xml
+++ b/src/chrome/content/rules/Gemnasium.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://assets.gemnasium.com/ => https://assets.gemnasium.com/: (6, 'Could not resolve host: assets.gemnasium.com')
+
 	Problematic subdomains:
 
 		- blog ¹
@@ -14,7 +18,7 @@
 		- assets.gemnasium.com
 
 -->
-<ruleset name="Gemnasium.com (partial)">
+<ruleset name="Gemnasium.com (partial)" default_off='failed ruleset test'>
 
 	<target host="gemnasium.com" />
 	<target host="assets.gemnasium.com" />
diff --git a/src/chrome/content/rules/Gentoo.xml b/src/chrome/content/rules/Gentoo.xml
index 8a55059980d2..437e8897c484 100644
--- a/src/chrome/content/rules/Gentoo.xml
+++ b/src/chrome/content/rules/Gentoo.xml
@@ -1,4 +1,11 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ads.gentoo.org/ => https://ads.gentoo.org/: (6, 'Could not resolve host: ads.gentoo.org')
+Fetch error: http://sidebar.gentoo.org/ => https://sidebar.gentoo.org/: (6, 'Could not resolve host: sidebar.gentoo.org')
+
+-->
+
 <!--
 	Nonfunctional subdomains:
 
@@ -64,7 +71,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Gentoo.org (partial)">
+<ruleset name="Gentoo.org (partial)" default_off='failed ruleset test'>
 
 	<target host="gentoo.org" />
 	<target host="*.gentoo.org" />
diff --git a/src/chrome/content/rules/George-Mason-University.xml b/src/chrome/content/rules/George-Mason-University.xml
index 47276f107fb5..f0d34b0028ac 100644
--- a/src/chrome/content/rules/George-Mason-University.xml
+++ b/src/chrome/content/rules/George-Mason-University.xml
@@ -1,4 +1,10 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ulife.gmu.edu/ => https://ulife.gmu.edu/: Too many redirects while fetching 'https://ulife.gmu.edu/'
+
+-->
+
 <!--
 	George Mason University
 
@@ -71,7 +77,7 @@
 			- si from www.facebook.com
 
 -->
-<ruleset name="GMU.edu (partial)" platform="mixedcontent">
+<ruleset name="GMU.edu (partial)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="gmu.edu"/>
 	<target host="chnm.gmu.edu"/>
diff --git a/src/chrome/content/rules/Georgetown_University.xml b/src/chrome/content/rules/Georgetown_University.xml
index 24ded06f9efe..2cfece129b77 100644
--- a/src/chrome/content/rules/Georgetown_University.xml
+++ b/src/chrome/content/rules/Georgetown_University.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://georgetown.edu/ => https://georgetown.edu/: (51, "SSL: no alternative certificate subject name matches target host name 'georgetown.edu'")
+
 	Nonfunctional subdomains:
 
 		- acmcu ¹
@@ -281,7 +285,7 @@
 	³ Cert expired
 
 -->
-<ruleset name="Georgetown University (partial)" platform="mixedcontent">
+<ruleset name="Georgetown University (partial)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="georgetown.edu" />
 	<target host="*.georgetown.edu" />
diff --git a/src/chrome/content/rules/Get.CM.xml b/src/chrome/content/rules/Get.CM.xml
index 830ebc98e78d..eee3adf009af 100644
--- a/src/chrome/content/rules/Get.CM.xml
+++ b/src/chrome/content/rules/Get.CM.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://get.cm/ => https://get.cm/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.get.cm/ => https://www.get.cm/: (60, 'SSL certificate problem: certificate has expired')
+
 	For other CyanogenMod.org coverage, see CyanogenMod.org.xml.
 
 -->
-<ruleset name="Get.CM">
+<ruleset name="Get.CM" default_off='failed ruleset test'>
 
 	<target host="get.cm" />
 	<target host="www.get.cm" />
diff --git a/src/chrome/content/rules/GetTraffic.com.xml b/src/chrome/content/rules/GetTraffic.com.xml
index aa0b2aafc12f..cfb116746a88 100644
--- a/src/chrome/content/rules/GetTraffic.com.xml
+++ b/src/chrome/content/rules/GetTraffic.com.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://gettraffic.com/ => https://gettraffic.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Fully covered subdomains:
 
 		- (www.)
 		- cdn-w
 
 -->
-<ruleset name="GetTraffic.com">
+<ruleset name="GetTraffic.com" default_off='failed ruleset test'>
 
 	<target host="gettraffic.com" />
 	<target host="*.gettraffic.com" />
diff --git a/src/chrome/content/rules/GifBook.io.xml b/src/chrome/content/rules/GifBook.io.xml
index e7d28ea59299..b1a30d9c34fb 100644
--- a/src/chrome/content/rules/GifBook.io.xml
+++ b/src/chrome/content/rules/GifBook.io.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.gifbook.io/ => https://www.gifbook.io/: (6, 'Could not resolve host: http')
+
 	For other levels.io coverage, see Levels.io.xml.
 
 -->
-<ruleset name="GifBook.io">
+<ruleset name="GifBook.io" default_off='failed ruleset test'>
 
 	<target host="gifbook.io" />
 	<target host="www.gifbook.io" />
diff --git a/src/chrome/content/rules/GitBook.io.xml b/src/chrome/content/rules/GitBook.io.xml
index 322ac96beeb0..4f54eb1a40f0 100644
--- a/src/chrome/content/rules/GitBook.io.xml
+++ b/src/chrome/content/rules/GitBook.io.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://push.gitbook.io/ => https://push.gitbook.io/: (51, "SSL: no alternative certificate subject name matches target host name 'push.gitbook.io'")
+Fetch error: http://www.gitbook.io/ => https://www.gitbook.io/: (51, "SSL: no alternative certificate subject name matches target host name 'www.gitbook.io'")
+Fetch error: http://gitbook.io/ => https://www.gitbook.io/: (51, "SSL: no alternative certificate subject name matches target host name 'www.gitbook.io'")
+
 	For other GitBook IO coverage, see GitBook.com.xml.
 
 
@@ -13,7 +19,7 @@
 	² statuspage.io
 
 -->
-<ruleset name="GitBook.IO (partial)">
+<ruleset name="GitBook.IO (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/GoDaddy.xml b/src/chrome/content/rules/GoDaddy.xml
index e45db42741df..c218efe69678 100644
--- a/src/chrome/content/rules/GoDaddy.xml
+++ b/src/chrome/content/rules/GoDaddy.xml
@@ -1,4 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://idp.m.godaddy.com/user/retrieveloginname.aspx?spkey= => https://idp.m.godaddy.com/user/retrieveloginname.aspx?spkey=: (35, 'Unknown SSL protocol error in connection to idp.m.godaddy.com:443 ')
+Fetch error: http://sg.m.godaddy.com/ => https://sg.m.godaddy.com/: Too many redirects while fetching 'https://sg.m.godaddy.com/'
+Fetch error: http://idp.godaddy.com/ => https://idp.godaddy.com/: (35, 'Unknown SSL protocol error in connection to idp.godaddy.com:443 ')
+Fetch error: http://mcc.godaddy.com/ => https://mcc.godaddy.com/: (35, 'Unknown SSL protocol error in connection to idp.godaddy.com:443 ')
+Fetch error: http://shops.godaddy.com/ => https://shops.godaddy.com/: (28, 'Connection timed out after 10001 milliseconds')
+
 	Other GoDaddy rulesets:
 
 		- GoDaddy.net.xml
@@ -114,7 +122,7 @@
 		- who.godaddy.com
 
 -->
-<ruleset name="GoDaddy.com (partial)">
+<ruleset name="GoDaddy.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/GoGetSSL.com.xml b/src/chrome/content/rules/GoGetSSL.com.xml
index 3c939a8a69bd..5c3de0539a4d 100644
--- a/src/chrome/content/rules/GoGetSSL.com.xml
+++ b/src/chrome/content/rules/GoGetSSL.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="GoGetSSL.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://dev.gogetssl.com/ => https://dev.gogetssl.com/: (52, 'Empty reply from server')
+
+-->
+<ruleset name="GoGetSSL.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Go_Lucid.co.xml b/src/chrome/content/rules/Go_Lucid.co.xml
index 19917552e695..771258d08e29 100644
--- a/src/chrome/content/rules/Go_Lucid.co.xml
+++ b/src/chrome/content/rules/Go_Lucid.co.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://golucid.co/ => https://golucid.co/: (7, 'Failed to connect to golucid.co port 443: Connection refused')
+Fetch error: http://www.golucid.co/ => https://golucid.co/: (7, 'Failed to connect to golucid.co port 443: Connection refused')
+
 	Other Lucid Software rulesets:
 
 		- Lucidchart.com.xml
@@ -8,7 +13,7 @@
 	www.golucid.co: Refused
 
 -->
-<ruleset name="Go Lucid.co">
+<ruleset name="Go Lucid.co" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/GoalWorthy.com.xml b/src/chrome/content/rules/GoalWorthy.com.xml
index 2bf911f707af..0d0731445649 100644
--- a/src/chrome/content/rules/GoalWorthy.com.xml
+++ b/src/chrome/content/rules/GoalWorthy.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="GoalWorthy.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://goalworthy.com/ => https://goalworthy.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://www.goalworthy.com/ => https://www.goalworthy.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
+-->
+<ruleset name="GoalWorthy.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Gogoyoko.xml b/src/chrome/content/rules/Gogoyoko.xml
index e86fe5cf655b..d8ff26ad0029 100644
--- a/src/chrome/content/rules/Gogoyoko.xml
+++ b/src/chrome/content/rules/Gogoyoko.xml
@@ -1,10 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://gogoyoko.com/ => https://gogoyoko.com/: (28, 'Connection timed out after 10001 milliseconds')
+Fetch error: http://www.gogoyoko.com/ => https://www.gogoyoko.com/: (28, 'Connection timed out after 10001 milliseconds')
+
 	Nonfunctional subdomains:
 
 		- blog	(cert: www; 302s there)
 
 -->
-<ruleset name="gogoyoko.com (partial)">
+<ruleset name="gogoyoko.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Golden_Adventures.xml b/src/chrome/content/rules/Golden_Adventures.xml
index e5b5bac0a637..53e8db519a33 100644
--- a/src/chrome/content/rules/Golden_Adventures.xml
+++ b/src/chrome/content/rules/Golden_Adventures.xml
@@ -1,4 +1,10 @@
-<ruleset name="Golden Adventures.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://goldenadventures.com/ => https://goldenadventures.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Golden Adventures.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Goldenarium.xml b/src/chrome/content/rules/Goldenarium.xml
index 753c132aac8b..def0a4a38070 100644
--- a/src/chrome/content/rules/Goldenarium.xml
+++ b/src/chrome/content/rules/Goldenarium.xml
@@ -1,4 +1,11 @@
-<ruleset name="Goldenarium.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://goldenarium.com/ => https://goldenarium.com/: (7, 'Failed to connect to goldenarium.com port 443: Connection refused')
+Fetch error: http://www.goldenarium.com/ => https://www.goldenarium.com/: (7, 'Failed to connect to www.goldenarium.com port 443: Connection refused')
+
+-->
+<ruleset name="Goldenarium.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Goldsboro_Web_Development.xml b/src/chrome/content/rules/Goldsboro_Web_Development.xml
index 2b5b746b0f2f..29041ea862a8 100644
--- a/src/chrome/content/rules/Goldsboro_Web_Development.xml
+++ b/src/chrome/content/rules/Goldsboro_Web_Development.xml
@@ -1,4 +1,10 @@
-<ruleset name="Goldsboro Web Development.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://my.goldsborowebdevelopment.com/ => https://my.goldsborowebdevelopment.com/: (6, 'Could not resolve host: my.goldsborowebdevelopment.com')
+
+-->
+<ruleset name="Goldsboro Web Development.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Goo.im.xml b/src/chrome/content/rules/Goo.im.xml
index d9abd51e0180..7e2727c01978 100644
--- a/src/chrome/content/rules/Goo.im.xml
+++ b/src/chrome/content/rules/Goo.im.xml
@@ -1,4 +1,11 @@
-<ruleset name="Goo.im">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://goo.im/ => https://goo.im/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.goo.im/ => https://www.goo.im/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Goo.im" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/GoogleMaps.xml b/src/chrome/content/rules/GoogleMaps.xml
index 0f82c52673d5..e6568b8a8d69 100644
--- a/src/chrome/content/rules/GoogleMaps.xml
+++ b/src/chrome/content/rules/GoogleMaps.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://maps-api-ssl.google.com/ (200) => https://maps-api-ssl.google.com/ (404)
+
 	Problematic domains:
 
 		- khms *
@@ -15,7 +19,7 @@
 			- khms[0-3]
 
 -->
-<ruleset name="Google Maps">
+<ruleset name="Google Maps" default_off='failed ruleset test'>
 
 	<target host="maps.google.*" />
 		<!--
diff --git a/src/chrome/content/rules/GoogleServices.xml b/src/chrome/content/rules/GoogleServices.xml
index 5ad73281d9f9..a25fb68b97de 100644
--- a/src/chrome/content/rules/GoogleServices.xml
+++ b/src/chrome/content/rules/GoogleServices.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://googleusercontent.com/ => http://googleusercontent.com/: (6, 'Could not resolve host: googleusercontent.com')
+
 	Other Google rulesets:
 
 		- 2mdn.net.xml
@@ -180,7 +184,7 @@
 	XXX: Needs more testing
 
 -->
-<ruleset name="Google Services">
+<ruleset name="Google Services" default_off='failed ruleset test'>
 
 	<target host="*.ggpht.com" />
 	<target host="gmail.com" />
diff --git a/src/chrome/content/rules/Google_App_Engine.xml b/src/chrome/content/rules/Google_App_Engine.xml
index 851e051d153c..694c485d02d3 100644
--- a/src/chrome/content/rules/Google_App_Engine.xml
+++ b/src/chrome/content/rules/Google_App_Engine.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://appspot.com/ (200) => https://appspot.com/ (404)
+
 	For other Google coverage, see GoogleServices.xml.
 
 -->
-<ruleset name="Google App Engine">
+<ruleset name="Google App Engine" default_off='failed ruleset test'>
 
 	<target host="appspot.com" />
 	<target host="*.appspot.com" />
diff --git a/src/chrome/content/rules/Gotland_Ring.com.xml b/src/chrome/content/rules/Gotland_Ring.com.xml
index 8865f1baf20d..3dfbace8d72d 100644
--- a/src/chrome/content/rules/Gotland_Ring.com.xml
+++ b/src/chrome/content/rules/Gotland_Ring.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Gotland Ring.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.gotlandring.com/ => https://www.gotlandring.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.gotlandring.com'")
+
+-->
+<ruleset name="Gotland Ring.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Gov1.info.xml b/src/chrome/content/rules/Gov1.info.xml
index 22b362fb0739..fb79319af43a 100644
--- a/src/chrome/content/rules/Gov1.info.xml
+++ b/src/chrome/content/rules/Gov1.info.xml
@@ -1,4 +1,10 @@
-<ruleset name="gov1.info">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://1.gov1.info/ => https://1.gov1.info/: (6, 'Could not resolve host: 1.gov1.info')
+
+-->
+<ruleset name="gov1.info" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Gov_Waste.co.uk.xml b/src/chrome/content/rules/Gov_Waste.co.uk.xml
index 683950e303f8..7b488e7ce64e 100644
--- a/src/chrome/content/rules/Gov_Waste.co.uk.xml
+++ b/src/chrome/content/rules/Gov_Waste.co.uk.xml
@@ -1,4 +1,11 @@
-<ruleset name="Gov Waste.co.uk">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://govwaste.co.uk/ (200) => https://govwaste.co.uk/ (526)
+Non-2xx HTTP code: http://www.govwaste.co.uk/ (200) => https://www.govwaste.co.uk/ (526)
+
+-->
+<ruleset name="Gov Waste.co.uk" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/GreenIT-BB.xml b/src/chrome/content/rules/GreenIT-BB.xml
index 76d2d83a2f02..2973e324c3c0 100644
--- a/src/chrome/content/rules/GreenIT-BB.xml
+++ b/src/chrome/content/rules/GreenIT-BB.xml
@@ -1,4 +1,10 @@
-<ruleset name="GreenIT-BB (partial)">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://benchmarking.greenit-bb.de/ => https://benchmarking.greenit-bb.de/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="GreenIT-BB (partial)" default_off='failed ruleset test'>
 
 	<target host="benchmarking.greenit-bb.de"/>
 
diff --git a/src/chrome/content/rules/Greenpeace.de.xml b/src/chrome/content/rules/Greenpeace.de.xml
index c77b0772e4fb..fbf15eec7bde 100644
--- a/src/chrome/content/rules/Greenpeace.de.xml
+++ b/src/chrome/content/rules/Greenpeace.de.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://greenpeace.de/ => https://greenpeace.de/: (51, "SSL: no alternative certificate subject name matches target host name 'greenpeace.de'")
+
 	Problematic domains:
 		- (www.)?umweltstiftung-greenpeace.de
 		- www.*.greenpeace.de
 		- gruppen.greenpeace.de
 -->
-<ruleset name="Greenpeace Germany">
+<ruleset name="Greenpeace Germany" default_off='failed ruleset test'>
 	<target host="greenpeace.de" />
 	<target host="www.greenpeace.de" />
 	<target host="kids.greenpeace.de" />
diff --git a/src/chrome/content/rules/Grilling_is_Happiness.com.xml b/src/chrome/content/rules/Grilling_is_Happiness.com.xml
index 21cec774560e..9ecd34908a06 100644
--- a/src/chrome/content/rules/Grilling_is_Happiness.com.xml
+++ b/src/chrome/content/rules/Grilling_is_Happiness.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://grillingishappiness.com/ => https://grillingishappiness.com/: (56, 'SSL read: error:00000000:lib(0):func(0):reason(0), errno 104')
+
 	Mixed content:
 
 		- css from fonts.googleapis.com ¹
@@ -18,7 +22,7 @@
 	¹ Secured by us
 
 -->
-<ruleset name="Grilling is Happiness.com">
+<ruleset name="Grilling is Happiness.com" default_off='failed ruleset test'>
 
 	<target host="grillingishappiness.com" />
 	<target host="*.grillingishappiness.com" />
diff --git a/src/chrome/content/rules/Grit.io.xml b/src/chrome/content/rules/Grit.io.xml
index ad178c2c1cbc..356607ad4461 100644
--- a/src/chrome/content/rules/Grit.io.xml
+++ b/src/chrome/content/rules/Grit.io.xml
@@ -1,4 +1,11 @@
-<ruleset name="grit.io">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://grit.io/ => https://grit.io/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.grit.io/ => https://www.grit.io/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="grit.io" default_off='failed ruleset test'>
 
 	<target host="grit.io" />
 	<target host="www.grit.io" />
diff --git a/src/chrome/content/rules/Grupfoni.xml b/src/chrome/content/rules/Grupfoni.xml
index 620296705f85..64f2159f9e21 100644
--- a/src/chrome/content/rules/Grupfoni.xml
+++ b/src/chrome/content/rules/Grupfoni.xml
@@ -1,4 +1,10 @@
-<ruleset name="Grupfoni">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://images.grupfoni.com/ => https://images.grupfoni.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Grupfoni" default_off='failed ruleset test'>
   <target host="www.grupfoni.com" />
   <target host="grupfoni.com" />
   <target host="images.grupfoni.com" />
diff --git a/src/chrome/content/rules/HSV.se.xml b/src/chrome/content/rules/HSV.se.xml
index 50d10be17ab8..bbaf76b631af 100644
--- a/src/chrome/content/rules/HSV.se.xml
+++ b/src/chrome/content/rules/HSV.se.xml
@@ -1,5 +1,10 @@
-<!-- hogskoleverket -->
-<ruleset name="HSV.se" platform="mixedcontent">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.hsv.se/ => https://www.hsv.se/: (51, "SSL: no alternative certificate subject name matches target host name 'www.hsv.se'")
+Fetch error: http://hsv.se/ => https://www.hsv.se/: (51, "SSL: no alternative certificate subject name matches target host name 'www.hsv.se'")
+ hogskoleverket -->
+<ruleset name="HSV.se" platform="mixedcontent" default_off='failed ruleset test'>
 	<target host="www.hsv.se" />
 	<target host="hsv.se" />
 	<rule from="^http://hsv\.se/" to="https://www.hsv.se/"/>
diff --git a/src/chrome/content/rules/HacktionLab.org.xml b/src/chrome/content/rules/HacktionLab.org.xml
index 2120f805311e..35ff92853d62 100644
--- a/src/chrome/content/rules/HacktionLab.org.xml
+++ b/src/chrome/content/rules/HacktionLab.org.xml
@@ -1,4 +1,11 @@
-<ruleset name="HacktionLab.org">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://hacktionlab.org/ => https://hacktionlab.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.hacktionlab.org/ => https://www.hacktionlab.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
+-->
+<ruleset name="HacktionLab.org" default_off='failed ruleset test'>
 
 	<target host="hacktionlab.org" />
 	<target host="www.hacktionlab.org" />
diff --git a/src/chrome/content/rules/HashTalk.org.xml b/src/chrome/content/rules/HashTalk.org.xml
index 91c1cc6258e1..933b2459e9e0 100644
--- a/src/chrome/content/rules/HashTalk.org.xml
+++ b/src/chrome/content/rules/HashTalk.org.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://hashtalk.org/ => https://hashtalk.org/: (7, 'Failed to connect to hashtalk.org port 443: Connection refused')
+Fetch error: http://www.hashtalk.org/ => https://hashtalk.org/: (7, 'Failed to connect to hashtalk.org port 443: Connection refused')
+
 	www: Mismatched
 
 
@@ -7,7 +12,7 @@
 		- hashtalk.org
 
 -->
-<ruleset name="HashTalk.org">
+<ruleset name="HashTalk.org" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Haskell.org.xml b/src/chrome/content/rules/Haskell.org.xml
index 3b961a96e327..f2da5abf19de 100644
--- a/src/chrome/content/rules/Haskell.org.xml
+++ b/src/chrome/content/rules/Haskell.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://darcs.haskell.org/ => https://darcs.haskell.org/: (60, 'SSL certificate problem: certificate has expired')
+
 	Nonfunctional subdomains:
 
 		- code *
@@ -39,7 +43,7 @@
 		- .haskell.org
 
 -->
-<ruleset name="Haskell.org (partial)">
+<ruleset name="Haskell.org (partial)" default_off='failed ruleset test'>
 
 	<target host="haskell.org" />
 	<target host="blog.haskell.org" />
diff --git a/src/chrome/content/rules/Hastexo.com.xml b/src/chrome/content/rules/Hastexo.com.xml
index f1866bba8bc0..31f96ceca717 100644
--- a/src/chrome/content/rules/Hastexo.com.xml
+++ b/src/chrome/content/rules/Hastexo.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="hastexo.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://hastexo.com/ => https://hastexo.com/: Too many redirects while fetching 'https://hastexo.com/'
+
+-->
+<ruleset name="hastexo.com" default_off='failed ruleset test'>
 
 	<target host="hastexo.com" />
 	<target host="*.hastexo.com" />
diff --git a/src/chrome/content/rules/Healthfuze.com.xml b/src/chrome/content/rules/Healthfuze.com.xml
index ff0d28c0a274..5912488b0098 100644
--- a/src/chrome/content/rules/Healthfuze.com.xml
+++ b/src/chrome/content/rules/Healthfuze.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Healthfuze.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://healthfuze.com/ => https://healthfuze.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Healthfuze.com" default_off='failed ruleset test'>
 
 	<target host="healthfuze.com" />
 	<target host="*.healthfuze.com" />
diff --git a/src/chrome/content/rules/Hello.tokyo.xml b/src/chrome/content/rules/Hello.tokyo.xml
index 540af77738ce..43db6fa60a8a 100644
--- a/src/chrome/content/rules/Hello.tokyo.xml
+++ b/src/chrome/content/rules/Hello.tokyo.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://hello.tokyo/ => https://hello.tokyo/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+Fetch error: http://www.hello.tokyo/ => https://www.hello.tokyo/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+
 	For other GMO coverage, see GMO_Internet.xml.
 
 -->
-<ruleset name="hello.tokyo">
+<ruleset name="hello.tokyo" default_off='failed ruleset test'>
 
 	<target host="hello.tokyo" />
 	<target host="www.hello.tokyo" />
diff --git a/src/chrome/content/rules/Hideme.today.xml b/src/chrome/content/rules/Hideme.today.xml
index 7c77d64ce8cd..5a9d1786ac9b 100644
--- a/src/chrome/content/rules/Hideme.today.xml
+++ b/src/chrome/content/rules/Hideme.today.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://hideme.today/ => https://hideme.today/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.hideme.today/ => https://hideme.today/: (60, 'SSL certificate problem: certificate has expired')
+
 	www: cert only matches ^hideme.today
 
 -->
-<ruleset name="hideme.today">
+<ruleset name="hideme.today" default_off='failed ruleset test'>
 
 	<target host="hideme.today" />
 	<target host="www.hideme.today" />
diff --git a/src/chrome/content/rules/Highwebmedia.com.xml b/src/chrome/content/rules/Highwebmedia.com.xml
index 7451278fdecc..016d1b195432 100644
--- a/src/chrome/content/rules/Highwebmedia.com.xml
+++ b/src/chrome/content/rules/Highwebmedia.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="highwebmedia.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://ssl-ccstatic.highwebmedia.com/ (200) => https://ssl-ccstatic.highwebmedia.com/ (403)
+
+-->
+<ruleset name="highwebmedia.com" default_off='failed ruleset test'>
 
 	<target host="ssl-ccstatic.highwebmedia.com" />
 	<target host="ssl-cdn.highwebmedia.com" />
diff --git a/src/chrome/content/rules/Hivos.org.xml b/src/chrome/content/rules/Hivos.org.xml
index 9ba359aa5e0f..f22c41042dc8 100644
--- a/src/chrome/content/rules/Hivos.org.xml
+++ b/src/chrome/content/rules/Hivos.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://m.hivos.org/ (200) => https://m.hivos.org/ (404)
+
 	For other Hivos coverage, see Hivos.nl.xml.
 
 	Problematic subdomains:
@@ -8,7 +12,7 @@
 	¹ different content; mismatched, CN: digitaldefenders.org
 
 -->
-<ruleset name="Hivos.org">
+<ruleset name="Hivos.org" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 					-->
diff --git a/src/chrome/content/rules/Hollywood_Life.com.xml b/src/chrome/content/rules/Hollywood_Life.com.xml
index 39761d051ae2..6ac3e4b408ea 100644
--- a/src/chrome/content/rules/Hollywood_Life.com.xml
+++ b/src/chrome/content/rules/Hollywood_Life.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.hollywoodlife.com/ => https://www.hollywoodlife.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.hollywoodlife.com'")
+
 	Mixed content:
 
 		- css from fonts.googleapis.com *
@@ -11,7 +15,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Hollywood Life.com">
+<ruleset name="Hollywood Life.com" default_off='failed ruleset test'>
 
 	<target host="hollywoodlife.com" />
 	<target host="www.hollywoodlife.com" />
diff --git a/src/chrome/content/rules/Hope.net-falsemixed.xml b/src/chrome/content/rules/Hope.net-falsemixed.xml
index f2479dbc5898..b485f596d308 100644
--- a/src/chrome/content/rules/Hope.net-falsemixed.xml
+++ b/src/chrome/content/rules/Hope.net-falsemixed.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://wiki.hope.net/ => https://wiki.hope.net/: (51, "SSL: no alternative certificate subject name matches target host name 'wiki.hope.net'")
+
 	For rules not causing false/broken MCB, see Hope.net.xml.
 
 -->
-<ruleset name="hope.net (false MCB)" platform="mixedcontent">
+<ruleset name="hope.net (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="wiki.hope.net" />
 
diff --git a/src/chrome/content/rules/Hornstra_Farms.com.xml b/src/chrome/content/rules/Hornstra_Farms.com.xml
index f515f37a97d6..f72903b37a07 100644
--- a/src/chrome/content/rules/Hornstra_Farms.com.xml
+++ b/src/chrome/content/rules/Hornstra_Farms.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://hornstrafarms.com/ => https://hornstrafarms.com/: (51, "SSL: no alternative certificate subject name matches target host name 'hornstrafarms.com'")
+Fetch error: http://www.hornstrafarms.com/ => https://hornstrafarms.com/: (51, "SSL: no alternative certificate subject name matches target host name 'hornstrafarms.com'")
+
 	Problematic hosts in *hornstrafarms.com:
 
 		- www *
@@ -11,7 +16,7 @@
 		- (www.)?	(www → ^)
 
 -->
-<ruleset name="Hornstra Farms.com">
+<ruleset name="Hornstra Farms.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Hotel_Wifi.com.xml b/src/chrome/content/rules/Hotel_Wifi.com.xml
index f97b27f27652..01869b59d65c 100644
--- a/src/chrome/content/rules/Hotel_Wifi.com.xml
+++ b/src/chrome/content/rules/Hotel_Wifi.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://hotelwifi.com/ => https://hotelwifi.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Nonfunctional subdomains:
 
 		- kb *
@@ -7,7 +11,7 @@
 	* Plaintext reply
 
 -->
-<ruleset name="Hotel Wifi.com (partial)">
+<ruleset name="Hotel Wifi.com (partial)" default_off='failed ruleset test'>
 
 	<target host="hotelwifi.com" />
 	<target host="*.hotelwifi.com" />
diff --git a/src/chrome/content/rules/HubSpot.xml b/src/chrome/content/rules/HubSpot.xml
index b5ec1e79affb..a4f407bbe99b 100644
--- a/src/chrome/content/rules/HubSpot.xml
+++ b/src/chrome/content/rules/HubSpot.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cdn2.hubspot.com/ => https://cdn2.hubspot.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Other HubSpot rulesets:
 
 		- HS-analytics.net.xml
@@ -96,7 +100,7 @@
 			- academy, developers from cdn[12].hubspot.com
 
 -->
-<ruleset name="HubSpot.com">
+<ruleset name="HubSpot.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/I2P.xml b/src/chrome/content/rules/I2P.xml
index a589742cef84..a169d15f212c 100644
--- a/src/chrome/content/rules/I2P.xml
+++ b/src/chrome/content/rules/I2P.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://forum.i2p2.de/ => https://forum.i2p2.de/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Nonfunctional subdomains:
 
 		- syndie *
@@ -14,7 +18,7 @@
 		- trac
 
 -->
-<ruleset name="I2P2.de (partial)">
+<ruleset name="I2P2.de (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/IAS.edu.xml b/src/chrome/content/rules/IAS.edu.xml
index a87e8bd2e8c0..69882e803408 100644
--- a/src/chrome/content/rules/IAS.edu.xml
+++ b/src/chrome/content/rules/IAS.edu.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://rt.ias.edu/ => https://rt.ias.edu/: (6, 'Could not resolve host: rt.ias.edu')
+
 	Institute for Advanced Study
 
 
@@ -43,7 +47,7 @@
 		- rt.ias.edu
 
 -->
-<ruleset name="IAS.edu (partial)">
+<ruleset name="IAS.edu (partial)" default_off='failed ruleset test'>
 
 	<target host="admin.ias.edu" />
 	<target host="www.admin.ias.edu" />
diff --git a/src/chrome/content/rules/IIS.se.xml b/src/chrome/content/rules/IIS.se.xml
index 08b33be204c2..74fdfe96975f 100644
--- a/src/chrome/content/rules/IIS.se.xml
+++ b/src/chrome/content/rules/IIS.se.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://domainmanager.iis.se/ => https://domainmanager.iis.se/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	IIS handles the swedish TLD, .se.
 
 
@@ -9,7 +13,7 @@
 		- domanhanteraren
 
 -->
-<ruleset name="IIS.se">
+<ruleset name="IIS.se" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/INaturalist.org.xml b/src/chrome/content/rules/INaturalist.org.xml
index 9c01834ac996..142c61cd9994 100644
--- a/src/chrome/content/rules/INaturalist.org.xml
+++ b/src/chrome/content/rules/INaturalist.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://inaturalist.org/ => https://inaturalist.org/: (51, "SSL: no alternative certificate subject name matches target host name 'inaturalist.org'")
+
 	CDN buckets:
 
 		- s3.amazonaws.com/static.inaturalist.org/
@@ -14,7 +18,7 @@
 	* Secured by us, doesn't trip MCB
 
 -->
-<ruleset name="iNaturalist.org">
+<ruleset name="iNaturalist.org" default_off='failed ruleset test'>
 
 	<target host="inaturalist.org" />
 	<target host="*.inaturalist.org" />
diff --git a/src/chrome/content/rules/IOSPP.xml b/src/chrome/content/rules/IOSPP.xml
index 98335da617ae..afe7c2b67b01 100644
--- a/src/chrome/content/rules/IOSPP.xml
+++ b/src/chrome/content/rules/IOSPP.xml
@@ -1,4 +1,10 @@
-<ruleset name="IOSPP">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://iospp.org/ => https://iospp.org/: (6, 'Could not resolve host: iospp.org')
+
+-->
+<ruleset name="IOSPP" default_off='failed ruleset test'>
 
 	<target host="iospp.org" />
 	<target host="*.iospp.org" />
diff --git a/src/chrome/content/rules/ISOC.org.br.xml b/src/chrome/content/rules/ISOC.org.br.xml
index 21430d5419fb..e8e98a54db95 100644
--- a/src/chrome/content/rules/ISOC.org.br.xml
+++ b/src/chrome/content/rules/ISOC.org.br.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://isoc.org.br/ => https://isoc.org.br/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+Fetch error: http://www.isoc.org.br/ => https://www.isoc.org.br/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+
 	Mixed content:
 
 		- Bugs, from:
@@ -10,7 +15,7 @@
 	¹ Secured by us
 
 -->
-<ruleset name="ISOC.org.br">
+<ruleset name="ISOC.org.br" default_off='failed ruleset test'>
 
 	<target host="isoc.org.br" />
 	<target host="www.isoc.org.br" />
diff --git a/src/chrome/content/rules/ISPID.nl.xml b/src/chrome/content/rules/ISPID.nl.xml
index 8dfad151bed2..e26aebc35e2c 100644
--- a/src/chrome/content/rules/ISPID.nl.xml
+++ b/src/chrome/content/rules/ISPID.nl.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ispid.nl/ => https://ispid.nl/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.ispid.nl/ => https://www.ispid.nl/: (60, 'SSL certificate problem: certificate has expired')
+
 	For other xCAT coverage, XCAT.nl.xml.
 
 -->
-<ruleset name="ISPID.nl">
+<ruleset name="ISPID.nl" default_off='failed ruleset test'>
 
 	<target host="ispid.nl" />
 	<target host="www.ispid.nl" />
diff --git a/src/chrome/content/rules/IT_Works.xml b/src/chrome/content/rules/IT_Works.xml
index d283a5576835..fb89ae812ef3 100644
--- a/src/chrome/content/rules/IT_Works.xml
+++ b/src/chrome/content/rules/IT_Works.xml
@@ -1,4 +1,10 @@
-<ruleset name="IT Works!">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://myitworksevents.com/ => https://myitworksevents.com/: (51, "SSL: no alternative certificate subject name matches target host name 'myitworksevents.com'")
+
+-->
+<ruleset name="IT Works!" default_off='failed ruleset test'>
 
 	<target host="myitworks.com" />
 	<target host="*.myitworks.com" />
diff --git a/src/chrome/content/rules/IiBuy.com.au.xml b/src/chrome/content/rules/IiBuy.com.au.xml
index 4c094d51ee12..41cfcb58adc9 100644
--- a/src/chrome/content/rules/IiBuy.com.au.xml
+++ b/src/chrome/content/rules/IiBuy.com.au.xml
@@ -1,4 +1,10 @@
-<ruleset name="iiBuy.com.au">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://iibuy.com.au/ => https://iibuy.com.au/: (28, 'Connection timed out after 10000 milliseconds')
+
+-->
+<ruleset name="iiBuy.com.au" default_off='failed ruleset test'>
 
 	<target host="iibuy.com.au" />
 	<target host="*.iibuy.com.au" />
diff --git a/src/chrome/content/rules/Ikoula.com.xml b/src/chrome/content/rules/Ikoula.com.xml
index 3edfcd346d2b..083766d5e24b 100644
--- a/src/chrome/content/rules/Ikoula.com.xml
+++ b/src/chrome/content/rules/Ikoula.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ikoula.com/ => https://ikoula.com/: (35, 'Unknown SSL protocol error in connection to www.ikoula.com:443 ')
+
 	Other Ikoula rulesets:
 
 		- Ex10.biz.xml
@@ -27,7 +31,7 @@
 		- support
 
 -->
-<ruleset name="Ikoula.com (partial)">
+<ruleset name="Ikoula.com (partial)" default_off='failed ruleset test'>
 
 	<target host="ikoula.com" />
 	<target host="*.ikoula.com" />
diff --git a/src/chrome/content/rules/Influencers_Conference.xml b/src/chrome/content/rules/Influencers_Conference.xml
index 68bd2205fb71..dbc9d805a0a9 100644
--- a/src/chrome/content/rules/Influencers_Conference.xml
+++ b/src/chrome/content/rules/Influencers_Conference.xml
@@ -1,4 +1,10 @@
-<ruleset name="Influencers Conference">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://influencersconference.com/ (200) => https://influencersconference.com/ (525)
+
+-->
+<ruleset name="Influencers Conference" default_off='failed ruleset test'>
 
 	<target host="influencersconference.com" />
 	<target host="*.influencersconference.com" />
diff --git a/src/chrome/content/rules/InfoWar.com.xml b/src/chrome/content/rules/InfoWar.com.xml
index f9d5c8c65f92..d4f1ed9eb666 100644
--- a/src/chrome/content/rules/InfoWar.com.xml
+++ b/src/chrome/content/rules/InfoWar.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://infowar.com/ => https://www.infowar.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Problematic subdomains:
 
 		- ^	(prints "currently down for maintenance", valid cert)
@@ -19,7 +23,7 @@
 	* Secured by us
 
 -->
-<ruleset name="InfoWar.com">
+<ruleset name="InfoWar.com" default_off='failed ruleset test'>
 
 	<target host="infowar.com" />
 	<target host="*.infowar.com" />
diff --git a/src/chrome/content/rules/Infogroup.xml b/src/chrome/content/rules/Infogroup.xml
index 51eb69410383..82664ca43bcb 100644
--- a/src/chrome/content/rules/Infogroup.xml
+++ b/src/chrome/content/rules/Infogroup.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ca.infousa.com/ => https://ca.infousa.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://secured.infousa.com/ => https://secured.infousa.com/: (35, 'Unknown SSL protocol error in connection to secured.infousa.com:443 ')
+
 	Nonfunctional domains:
 
 		- (www.)infogroup.com
@@ -29,7 +34,7 @@
 		- .link.p0.com
 
 -->
-<ruleset name="Infogroup (partial)">
+<ruleset name="Infogroup (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Informa_Healthcare.xml b/src/chrome/content/rules/Informa_Healthcare.xml
index 1f5598e5a072..4ecd937e64ab 100644
--- a/src/chrome/content/rules/Informa_Healthcare.xml
+++ b/src/chrome/content/rules/Informa_Healthcare.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://informahealthcarestore.com/ => https://informahealthcarestore.com/: (51, "SSL: no alternative certificate subject name matches target host name 'informahealthcarestore.com'")
+
 	For problematic rules, see Informa_Healthcare-problematic.xml.
 
 
@@ -24,7 +28,7 @@
 		- (www.)informahealthcare.com		(most pages redirect to http)
 
 -->
-<ruleset name="Informa Healthcare (partial)">
+<ruleset name="Informa Healthcare (partial)" default_off='failed ruleset test'>
 
 	<target host="informahealthcare.com" />
 	<target host="www.informahealthcare.com" />
diff --git a/src/chrome/content/rules/Inria.fr.xml b/src/chrome/content/rules/Inria.fr.xml
index d2cbdcf89148..3ecf07f8593d 100644
--- a/src/chrome/content/rules/Inria.fr.xml
+++ b/src/chrome/content/rules/Inria.fr.xml
@@ -1,4 +1,11 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://admin-www.inria.fr/ => https://admin-www.inria.fr/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://gforge-qualif.inria.fr/ => https://gforge-qualif.inria.fr/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://lists.gforge-qualif.inria.fr/ => https://lists.gforge-qualif.inria.fr/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://planete.inria.fr/ => https://planete.inria.fr/: (51, "SSL: no alternative certificate subject name matches target host name 'planete.inria.fr'")
+
 	Other Inria rulesets:
 
 		- Interstices.info.xml
@@ -40,7 +47,7 @@
 		- www
 
 -->
-<ruleset name="Inria.fr (partial)">
+<ruleset name="Inria.fr (partial)" default_off='failed ruleset test'>
 
 	<target host="admin-www.inria.fr" />
 	<target host="annuaire.inria.fr" />
diff --git a/src/chrome/content/rules/Integrity.pt.xml b/src/chrome/content/rules/Integrity.pt.xml
index a4de9901cc3a..e4869d4524b5 100644
--- a/src/chrome/content/rules/Integrity.pt.xml
+++ b/src/chrome/content/rules/Integrity.pt.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://integrity.pt/ => https://integrity.pt/: (28, 'Operation timed out after 15002 milliseconds with 0 bytes received')
+
 	NB: Tor users cannot view* this website due to CloudFlare settings.
 
 	See:
@@ -14,7 +18,7 @@
 		- https://panopticlick.eff.org
 
 -->
-<ruleset name="Integrity.pt">
+<ruleset name="Integrity.pt" default_off='failed ruleset test'>
 
 	<target host="integrity.pt" />
 	<target host="*.integrity.pt" />
diff --git a/src/chrome/content/rules/Interactive-Media-Awards.xml b/src/chrome/content/rules/Interactive-Media-Awards.xml
index 51296d9ce4e1..f6843c52e74c 100644
--- a/src/chrome/content/rules/Interactive-Media-Awards.xml
+++ b/src/chrome/content/rules/Interactive-Media-Awards.xml
@@ -1,4 +1,11 @@
-<ruleset name="Interactive Media Awards">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://interactivemediaawards.com/ => https://www.interactivemediaawards.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.interactivemediaawards.com/ => https://www.interactivemediaawards.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Interactive Media Awards" default_off='failed ruleset test'>
 
 	<target host="interactivemediaawards.com"/>
 	<target host="www.interactivemediaawards.com"/>
diff --git a/src/chrome/content/rules/Interclick.xml b/src/chrome/content/rules/Interclick.xml
index d8073fec184a..050c7bf45e11 100644
--- a/src/chrome/content/rules/Interclick.xml
+++ b/src/chrome/content/rules/Interclick.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://idcs.interclick.com/Segment.aspx => https://idcs.interclick.com/Segment.aspx: (6, 'Could not resolve host: idcs.interclick.com')
+
 	Fully covered subdomains:
 
 		- idcs
 
 -->
-<ruleset name="Interclick.com">
+<ruleset name="Interclick.com" default_off='failed ruleset test'>
 
 	<target host="*.interclick.com"/>
 		<exclusion pattern="^http://(?:blog|ir|www)\."/>
diff --git a/src/chrome/content/rules/Intermundo_Media.com.xml b/src/chrome/content/rules/Intermundo_Media.com.xml
index 57d3b5547de4..e719cd2789cb 100644
--- a/src/chrome/content/rules/Intermundo_Media.com.xml
+++ b/src/chrome/content/rules/Intermundo_Media.com.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://intermundomedia.com/ => https://intermundomedia.com/: (51, "SSL: no alternative certificate subject name matches target host name 'intermundomedia.com'")
+
 	Fully covered subdomains:
 
 		- (www.)
 		- media
 
 -->
-<ruleset name="Intermundo Media.com">
+<ruleset name="Intermundo Media.com" default_off='failed ruleset test'>
 
 	<target host="intermundomedia.com" />
 	<target host="*.intermundomedia.com" />
diff --git a/src/chrome/content/rules/Ionic_Framework.com.xml b/src/chrome/content/rules/Ionic_Framework.com.xml
index bed54369a456..088d2b1c4bf7 100644
--- a/src/chrome/content/rules/Ionic_Framework.com.xml
+++ b/src/chrome/content/rules/Ionic_Framework.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://forum.ionicframework.com/ => https://forum.ionicframework.com/: (7, 'Failed to connect to forum.ionicframework.com port 443: Connection refused')
+
 	For rules causing false/broken MCB, see Ionic_Framework.com-falsemixed.xml.
 
 
@@ -52,7 +56,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Ionic Framework.com (partial)">
+<ruleset name="Ionic Framework.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Ireeco.com.xml b/src/chrome/content/rules/Ireeco.com.xml
index 4e554d0e730f..d4bc60822d7a 100644
--- a/src/chrome/content/rules/Ireeco.com.xml
+++ b/src/chrome/content/rules/Ireeco.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Ireeco.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ireeco.com/ => https://ireeco.com/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+
+-->
+<ruleset name="Ireeco.com" default_off='failed ruleset test'>
 
 	<target host="ireeco.com" />
 	<target host="*.ireeco.com" />
diff --git a/src/chrome/content/rules/Isocket.xml b/src/chrome/content/rules/Isocket.xml
index 2efc915e55bd..822891f1549a 100644
--- a/src/chrome/content/rules/Isocket.xml
+++ b/src/chrome/content/rules/Isocket.xml
@@ -1,10 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://isocket.com/ => https://isocket.com/: (28, 'Connection timed out after 10001 milliseconds')
+Fetch error: http://www.isocket.com/ => https://www.isocket.com/: (7, 'Failed to connect to www.isocket.com port 443: Connection refused')
+
 	Nonfunctional domains:
 
 		- blog.isocket.com	(cert: *.wpengine.com; 403)
 
 -->
-<ruleset name="isocket (partial)">
+<ruleset name="isocket (partial)" default_off='failed ruleset test'>
 
 	<!--	* for cross-domain cookie.	-->
 	<target host="*.adsbyisocket.com" />
diff --git a/src/chrome/content/rules/Jabber.ru.xml b/src/chrome/content/rules/Jabber.ru.xml
index 0cf23ac19b6f..470983a564ea 100644
--- a/src/chrome/content/rules/Jabber.ru.xml
+++ b/src/chrome/content/rules/Jabber.ru.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://jabber.ru/ => https://www.jabber.ru/: (60, 'SSL certificate problem: certificate has expired')
+
 	Nonfunctional subdomains:
 
 		- chatlogs	(times out)
@@ -20,7 +24,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Jabber.ru (partial)">
+<ruleset name="Jabber.ru (partial)" default_off='failed ruleset test'>
 
 	<target host="jabber.ru" />
 	<target host="*.jabber.ru" />
diff --git a/src/chrome/content/rules/Jabberd.org.xml b/src/chrome/content/rules/Jabberd.org.xml
index 101648787293..0246e1e1c8b2 100644
--- a/src/chrome/content/rules/Jabberd.org.xml
+++ b/src/chrome/content/rules/Jabberd.org.xml
@@ -1,10 +1,16 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://jabberd.org/ => https://jabberd.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://download.jabberd.org/ => https://download.jabberd.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.jabberd.org/ => https://www.jabberd.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	These altnames don't exist:
 
 		- www.download.jabberd.org
 
 -->
-<ruleset name="jabberd.org" platform="cacert">
+<ruleset name="jabberd.org" platform="cacert" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Jamie-Oliver.xml b/src/chrome/content/rules/Jamie-Oliver.xml
index 45bc6f746cce..abf103a71f87 100644
--- a/src/chrome/content/rules/Jamie-Oliver.xml
+++ b/src/chrome/content/rules/Jamie-Oliver.xml
@@ -1,9 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://jamieoliver.com/ => https://www.jamieoliver.com/: Too many redirects while fetching 'https://www.jamieoliver.com/'
+Fetch error: http://www.jamieoliver.com/ => https://www.jamieoliver.com/: Too many redirects while fetching 'https://www.jamieoliver.com/'
+
 	c466531.r31.cf0.rackcdn.com
 	c466531.ssl.cf0.rackcdn.com
 
 -->
-<ruleset name="Jamie Oliver" platform="mixedcontent">
+<ruleset name="Jamie Oliver" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="jamieoliver.com" />
 	<target host="www.jamieoliver.com" />
diff --git a/src/chrome/content/rules/Jappix.net.xml b/src/chrome/content/rules/Jappix.net.xml
index 80b68237cc46..79912f4237a1 100644
--- a/src/chrome/content/rules/Jappix.net.xml
+++ b/src/chrome/content/rules/Jappix.net.xml
@@ -1,11 +1,16 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://jappix.net/ => https://jappix.net/: (7, 'Failed to connect to jappix.net port 443: No route to host')
+Fetch error: http://www.jappix.net/ => https://jappix.net/: (7, 'Failed to connect to jappix.net port 443: No route to host')
+
 	For other Jappix coverage, see Jappix.xml.
 
 
 	www: dropped
 
 -->
-<ruleset name="Jappix.net">
+<ruleset name="Jappix.net" default_off='failed ruleset test'>
 
 	<target host="jappix.net" />
 	<target host="www.jappix.net" />
diff --git a/src/chrome/content/rules/Jappix.pro.xml b/src/chrome/content/rules/Jappix.pro.xml
index 7cb8d21de9b0..f1fe3f146bb4 100644
--- a/src/chrome/content/rules/Jappix.pro.xml
+++ b/src/chrome/content/rules/Jappix.pro.xml
@@ -1,11 +1,16 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://jappix.pro/ => https://jappix.pro/: (6, 'Could not resolve host: jappix.pro')
+Fetch error: http://www.jappix.pro/ => https://jappix.pro/: (6, 'Could not resolve host: jappix.pro')
+
 	For other Jappix coverage, see Jappix.xml.
 
 
 	www: dropped
 
 -->
-<ruleset name="Jappix.pro">
+<ruleset name="Jappix.pro" default_off='failed ruleset test'>
 
 	<target host="jappix.pro" />
 	<target host="www.jappix.pro" />
diff --git a/src/chrome/content/rules/Jdeslip.com.xml b/src/chrome/content/rules/Jdeslip.com.xml
index 8dcf484de30c..cb018f71e120 100644
--- a/src/chrome/content/rules/Jdeslip.com.xml
+++ b/src/chrome/content/rules/Jdeslip.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="jdeslip.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://jdeslip.com/ => https://jdeslip.com/: (6, 'Could not resolve host: jdeslip.com')
+Fetch error: http://www.jdeslip.com/ => https://www.jdeslip.com/: (6, 'Could not resolve host: www.jdeslip.com')
+
+-->
+<ruleset name="jdeslip.com" default_off='failed ruleset test'>
 
 	<target host="jdeslip.com" />
 	<target host="www.jdeslip.com" />
diff --git a/src/chrome/content/rules/Jolexa.net-cacert.xml b/src/chrome/content/rules/Jolexa.net-cacert.xml
index 9271497d9925..6ea1a153f8ac 100644
--- a/src/chrome/content/rules/Jolexa.net-cacert.xml
+++ b/src/chrome/content/rules/Jolexa.net-cacert.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://jolexa.net/ => https://www.jolexa.net/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.jolexa.net/ => https://www.jolexa.net/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	For rules not subject to CAcert, see Jolexa.net.xml.
 
 -->
-<ruleset name="jolexa.net (CAcert)" platform="cacert">
+<ruleset name="jolexa.net (CAcert)" platform="cacert" default_off='failed ruleset test'>
 
 	<target host="jolexa.net"/>
 	<target host="www.jolexa.net" />
diff --git a/src/chrome/content/rules/JuicyAds.com.xml b/src/chrome/content/rules/JuicyAds.com.xml
index 81b1f26fa042..aa14e44399d3 100644
--- a/src/chrome/content/rules/JuicyAds.com.xml
+++ b/src/chrome/content/rules/JuicyAds.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ads-a.juicyads.com/ => https://ads-a.juicyads.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Nonfunctional subdomains:
 
 		- support ²
@@ -22,7 +26,7 @@
 		- adserver.juicyads.com
 
 -->
-<ruleset name="JuicyAds.com (partial)">
+<ruleset name="JuicyAds.com (partial)" default_off='failed ruleset test'>
 
 	<target host="juicyads.com" />
 	<target host="ads-a.juicyads.com" />
diff --git a/src/chrome/content/rules/KDE.xml b/src/chrome/content/rules/KDE.xml
index 6a517aa79a45..d4acab4b8998 100644
--- a/src/chrome/content/rules/KDE.xml
+++ b/src/chrome/content/rules/KDE.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://files.kde.org/edu/logo/KDEdu%20versiones.svg.metalink (200) => https://files.kde.org/edu/logo/KDEdu%20versiones.svg.metalink (404)
+Fetch error: http://admin.bugs.kde.org/ => https://admin.bugs.kde.org/: (6, 'Could not resolve host: admin.bugs.kde.org')
+Fetch error: http://sandbox.bugs.kde.org/ => https://sandbox.bugs.kde.org/: (6, 'Could not resolve host: sandbox.bugs.kde.org')
+
 	Other KDE rulesets:
 
 		- Calligra.org.xml
@@ -106,7 +112,7 @@
 		- sysadmin.kde.org
 
 -->
-<ruleset name="KDE.org (partial)">
+<ruleset name="KDE.org (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/KISSmetrics.xml b/src/chrome/content/rules/KISSmetrics.xml
index 53d9b9a5d491..c4b94854d081 100644
--- a/src/chrome/content/rules/KISSmetrics.xml
+++ b/src/chrome/content/rules/KISSmetrics.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://support.kissmetrics.com/ => https://support.kissmetrics.com/: (51, "SSL: no alternative certificate subject name matches target host name 'support.kissmetrics.com'")
+
 	CDN buckets:
 
 		- doug1izaerwt3.cloudfront.net
@@ -15,7 +19,7 @@
 		- kvcd
 
 -->
-<ruleset name="KISSmetrics.com">
+<ruleset name="KISSmetrics.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/KSA_Glass.xml b/src/chrome/content/rules/KSA_Glass.xml
index fe6e13222e0d..46b416f04575 100644
--- a/src/chrome/content/rules/KSA_Glass.xml
+++ b/src/chrome/content/rules/KSA_Glass.xml
@@ -1,4 +1,10 @@
-<ruleset name="KSA Glass">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ksaglass.com/ => https://ksaglass.com/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+
+-->
+<ruleset name="KSA Glass" default_off='failed ruleset test'>
 
 	<target host="ksaglass.com" />
 	<target host="*.ksaglass.com" />
diff --git a/src/chrome/content/rules/Karagarga.xml b/src/chrome/content/rules/Karagarga.xml
index c4ddb0ca0031..10b416343bf7 100644
--- a/src/chrome/content/rules/Karagarga.xml
+++ b/src/chrome/content/rules/Karagarga.xml
@@ -1,4 +1,11 @@
-<ruleset name="Karagarga">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://karagarga.net/ => https://karagarga.net/: (6, 'Could not resolve host: karagarga.net')
+Fetch error: http://www.karagarga.net/ => https://karagarga.net/: (6, 'Could not resolve host: karagarga.net')
+
+-->
+<ruleset name="Karagarga" default_off='failed ruleset test'>
   <target host="karagarga.net" />
   <target host="www.karagarga.net" />
 
diff --git a/src/chrome/content/rules/Kargo.com.xml b/src/chrome/content/rules/Kargo.com.xml
index c237bcc413c4..b98cfd22ac5a 100644
--- a/src/chrome/content/rules/Kargo.com.xml
+++ b/src/chrome/content/rules/Kargo.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://storage.cloud.kargo.com/ => https://storage.cloud.kargo.com/: (51, "SSL: no alternative certificate subject name matches target host name 'storage.cloud.kargo.com'")
+
 	Problematic hosts:
 
 		- (www.)? *
@@ -19,7 +23,7 @@
 	* Not secured by us <= mismatched
 
 -->
-<ruleset name="Kargo.com (partial)">
+<ruleset name="Kargo.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Kart_Fighter.com.xml b/src/chrome/content/rules/Kart_Fighter.com.xml
index d30c37e5e5cd..3022329ee795 100644
--- a/src/chrome/content/rules/Kart_Fighter.com.xml
+++ b/src/chrome/content/rules/Kart_Fighter.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://kartfighter.com/ (200) => https://www.kartfighter.com/ (503)
+
 	For other Red Bull coverage, see Red_Bull.xml.
 
 
@@ -24,7 +28,7 @@
 		- worldtour
 
 -->
-<ruleset name="Kart Fighter.com (partial)">
+<ruleset name="Kart Fighter.com (partial)" default_off='failed ruleset test'>
 
 	<target host="kartfighter.com" />
 	<target host="*.kartfighter.com" />
diff --git a/src/chrome/content/rules/KarwansarayPublishers.xml b/src/chrome/content/rules/KarwansarayPublishers.xml
index 1c43270eb34b..f8a4f0ca7055 100644
--- a/src/chrome/content/rules/KarwansarayPublishers.xml
+++ b/src/chrome/content/rules/KarwansarayPublishers.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://karwansaraypublishers.com/ => https://karwansaraypublishers.com/: Too many redirects while fetching 'https://karwansaraypublishers.com/'
+Fetch error: http://www.karwansaraypublishers.com/ => https://karwansaraypublishers.com/: Too many redirects while fetching 'https://karwansaraypublishers.com/'
+
 	For rules causing false/broken MCB, see Karwansaray_Publishers.com-falsemixed.xml.
 
 
@@ -12,7 +17,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Karwansaray Publishers (partial)">
+<ruleset name="Karwansaray Publishers (partial)" default_off='failed ruleset test'>
 
 	<target host="karwansaraypublishers.com"/>
 	<target host="www.karwansaraypublishers.com"/>
diff --git a/src/chrome/content/rules/Karwansaray_Publishers.com-falsemixed.xml b/src/chrome/content/rules/Karwansaray_Publishers.com-falsemixed.xml
index b87eb33a22fc..cc192b9c7c25 100644
--- a/src/chrome/content/rules/Karwansaray_Publishers.com-falsemixed.xml
+++ b/src/chrome/content/rules/Karwansaray_Publishers.com-falsemixed.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://karwansaraypublishers.com/ => https://karwansaraypublishers.com/: Too many redirects while fetching 'https://karwansaraypublishers.com/'
+
 	For rules not causing false/broken MCB, see KarwansarayPublishers.xml.
 
 -->
-<ruleset name="Karwansaray Publishers.com (false MCB)" platform="mixedcontent">
+<ruleset name="Karwansaray Publishers.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="karwansaraypublishers.com" />
 	<target host="*.karwansaraypublishers.com" />
diff --git a/src/chrome/content/rules/Katholieke-Universiteit-Leuven.xml b/src/chrome/content/rules/Katholieke-Universiteit-Leuven.xml
index 9c7b2dcc2bd4..89f56d395b1d 100644
--- a/src/chrome/content/rules/Katholieke-Universiteit-Leuven.xml
+++ b/src/chrome/content/rules/Katholieke-Universiteit-Leuven.xml
@@ -1,4 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://alum.kuleuven.be/ => https://www.alum.kuleuven.be/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://www.alum.kuleuven.be/ => https://www.alum.kuleuven.be/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://alumni.kuleuven.be/ => https://alumni.kuleuven.be/: (7, 'Failed to connect to alumni.kuleuven.be port 443: Connection refused')
+Fetch error: http://videolab.avnet.kuleuven.be/ => https://videolab.avnet.kuleuven.be/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://dml.kuleuven.be/ => https://dml.kuleuven.be/: (51, "SSL: no alternative certificate subject name matches target host name 'www.dml.kuleuven.be'")
+Fetch error: http://www.dml.kuleuven.be/ => https://www.dml.kuleuven.be/: (51, "SSL: no alternative certificate subject name matches target host name 'www.dml.kuleuven.be'")
+Fetch error: http://services.libis.kuleuven.be/ => https://services.libis.kuleuven.be/: (51, "SSL: no alternative certificate subject name matches target host name 'services.libis.kuleuven.be'")
+Fetch error: http://netlogin.kuleuven.be/ => https://netlogin.kuleuven.be/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Katholieke Universiteit Leuven
 
 
@@ -98,7 +109,7 @@
 	¹ * Secured by us
 
 -->
-<ruleset name="KU Leuven.be (partial)">
+<ruleset name="KU Leuven.be (partial)" default_off='failed ruleset test'>
 
 	<target host="alum.kuleuven.be" />
 	<target host="www.alum.kuleuven.be" />
diff --git a/src/chrome/content/rules/Kimberly-Clark.xml b/src/chrome/content/rules/Kimberly-Clark.xml
index 06b1ee44c09b..8f9d78e01a7a 100644
--- a/src/chrome/content/rules/Kimberly-Clark.xml
+++ b/src/chrome/content/rules/Kimberly-Clark.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://kimberly-clark.com/ => https://www.kimberly-clark.com/: Too many redirects while fetching 'https://www.kimberly-clark.com/'
+Fetch error: http://www.kimberly-clark.com/ => https://www.kimberly-clark.com/: Too many redirects while fetching 'https://www.kimberly-clark.com/'
+
 	Other Kimberly-Clark rulesets:
 
 		- Huggies_Australia.xml
@@ -19,7 +24,7 @@
 	* Mismatched, CN: www.kcprofessional.co.in
 
 -->
-<ruleset name="Kimberly-Clark (partial)">
+<ruleset name="Kimberly-Clark (partial)" default_off='failed ruleset test'>
 
 	<target host="kimberly-clark.com" />
 	<target host="www.kimberly-clark.com" />
diff --git a/src/chrome/content/rules/KnCMiner.com.xml b/src/chrome/content/rules/KnCMiner.com.xml
index c69973243e20..7514df103e30 100644
--- a/src/chrome/content/rules/KnCMiner.com.xml
+++ b/src/chrome/content/rules/KnCMiner.com.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://kncminer.com/ => https://www.kncminer.com/: Too many redirects while fetching 'https://www.kncminer.com/'
+
 	^: cert only matches www
 
 -->
-<ruleset name="KnCMiner.com">
+<ruleset name="KnCMiner.com" default_off='failed ruleset test'>
 
 	<target host="kncminer.com" />
 	<target host="*.kncminer.com" />
diff --git a/src/chrome/content/rules/KnightSwarm.xml b/src/chrome/content/rules/KnightSwarm.xml
index 3f868172e204..ad4fc9156bf0 100644
--- a/src/chrome/content/rules/KnightSwarm.xml
+++ b/src/chrome/content/rules/KnightSwarm.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://order.knightswarm.com/ => https://order.knightswarm.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Insecure cookies are set for these domains and hosts:
 
 		- knightswarm.com
@@ -6,7 +10,7 @@
 		- www.knightswarm.com
 
 -->
-<ruleset name="KnightSwarm.com">
+<ruleset name="KnightSwarm.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Kohls.xml b/src/chrome/content/rules/Kohls.xml
index 0e2a086f67fb..dee81b5925e3 100644
--- a/src/chrome/content/rules/Kohls.xml
+++ b/src/chrome/content/rules/Kohls.xml
@@ -1,4 +1,11 @@
-<ruleset name="Kohls.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://kohls.com/ => https://www.kohls.com/: Too many redirects while fetching 'https://www.kohls.com/'
+Fetch error: http://www.kohls.com/ => https://www.kohls.com/: Too many redirects while fetching 'https://www.kohls.com/'
+
+-->
+<ruleset name="Kohls.com" default_off='failed ruleset test'>
   <target host="kohls.com"/>
   <target host="www.kohls.com"/>
   <rule from="^http://kohls\.com/" to="https://www.kohls.com/"/>
diff --git a/src/chrome/content/rules/Kpopstage.co.xml b/src/chrome/content/rules/Kpopstage.co.xml
index a8297abd1b22..82f7c46ba730 100644
--- a/src/chrome/content/rules/Kpopstage.co.xml
+++ b/src/chrome/content/rules/Kpopstage.co.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://kpopstage.co/ => https://www.kpopstage.co/: (6, 'Could not resolve host: www.kpopstage.co')
+
 	Problematic subdomains:
 
 		- ^	(503)
 
 -->
-<ruleset name="kpopstage.co">
+<ruleset name="kpopstage.co" default_off='failed ruleset test'>
 
 	<target host="attictv.com" />
 	<target host="*.attictv.com" />
diff --git a/src/chrome/content/rules/Kuonamaoni.com.xml b/src/chrome/content/rules/Kuonamaoni.com.xml
index 7ffa2dbf9b28..8be1a98c3354 100644
--- a/src/chrome/content/rules/Kuonamaoni.com.xml
+++ b/src/chrome/content/rules/Kuonamaoni.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="kuonamaoni.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://i.kuonamaoni.com/ => https://i.kuonamaoni.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="kuonamaoni.com" default_off='failed ruleset test'>
 
 	<target host="i.kuonamaoni.com" />
 
diff --git a/src/chrome/content/rules/Kura.io.xml b/src/chrome/content/rules/Kura.io.xml
index 16408adb2952..9826a6543502 100644
--- a/src/chrome/content/rules/Kura.io.xml
+++ b/src/chrome/content/rules/Kura.io.xml
@@ -1,4 +1,11 @@
-<ruleset name="Kura.io">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://kura.io/ => https://kura.io/: (28, 'Connection timed out after 10001 milliseconds')
+Fetch error: http://www.kura.io/ => https://www.kura.io/: (28, 'Connection timed out after 10001 milliseconds')
+
+-->
+<ruleset name="Kura.io" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Kyani.net.xml b/src/chrome/content/rules/Kyani.net.xml
index 0047d4de8a2c..a83194d423e7 100644
--- a/src/chrome/content/rules/Kyani.net.xml
+++ b/src/chrome/content/rules/Kyani.net.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://kyani.net/ => https://eu.kyani.net/public/eu/en/main: Too many redirects while fetching 'https://eu.kyani.net/public/eu/en/main'
+
 	Problematic subdomains:
 
 		- (www.)	(redirects to http before eu)
 
 -->
-<ruleset name="Kyani.net">
+<ruleset name="Kyani.net" default_off='failed ruleset test'>
 
 	<target host="kyani.net" />
 	<target host="*.kyani.net" />
diff --git a/src/chrome/content/rules/LFAIT.com.xml b/src/chrome/content/rules/LFAIT.com.xml
index 1f43f4e6a06d..c512366f5f36 100644
--- a/src/chrome/content/rules/LFAIT.com.xml
+++ b/src/chrome/content/rules/LFAIT.com.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://lfait.com/ => https://lfait.com/: Too many redirects while fetching 'https://lfait.com/'
+Fetch error: http://www.lfait.com/ => https://lfait.com/: Too many redirects while fetching 'https://lfait.com/'
+
 	Cert only matches ^lfait.com.
 
 -->
-<ruleset name="LFAIT.com">
+<ruleset name="LFAIT.com" default_off='failed ruleset test'>
 
 	<target host="lfait.com" />
 	<target host="www.lfait.com" />
diff --git a/src/chrome/content/rules/LaPatilla.com.xml b/src/chrome/content/rules/LaPatilla.com.xml
index 654bf9ed253b..1ef328797e3a 100644
--- a/src/chrome/content/rules/LaPatilla.com.xml
+++ b/src/chrome/content/rules/LaPatilla.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://lapatilla.com/ => https://lapatilla.com/: Too many redirects while fetching 'https://lapatilla.com/'
+
 	CDN buckets:
 
 		- watermelon.vo.llnwd.net
@@ -11,7 +15,7 @@
 		- cdn.lapatilla.com	(400, CN: *.hs.llnwd.net)
 
 -->
-<ruleset name="LaPatilla.com">
+<ruleset name="LaPatilla.com" default_off='failed ruleset test'>
 
 	<target host="lapatilla.com" />
 	<target host="*.lapatilla.com" />
diff --git a/src/chrome/content/rules/LayerVault.com.xml b/src/chrome/content/rules/LayerVault.com.xml
index 72c02397e102..0ca10212a1a7 100644
--- a/src/chrome/content/rules/LayerVault.com.xml
+++ b/src/chrome/content/rules/LayerVault.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://layervault.com/ => https://layervault.com/: (7, 'Failed to connect to layervault.com port 443: Connection refused')
+
 	Nonfunctional subdomains:
 
 		- cosmos *
@@ -22,7 +26,7 @@
 		- news
 
 -->
-<ruleset name="LayerVault.com (partial)">
+<ruleset name="LayerVault.com (partial)" default_off='failed ruleset test'>
 
 	<target host="layervault.com" />
 	<target host="*.layervault.com" />
diff --git a/src/chrome/content/rules/LeadSpend.com.xml b/src/chrome/content/rules/LeadSpend.com.xml
index 262e08dadfe2..3594d04e5b6f 100644
--- a/src/chrome/content/rules/LeadSpend.com.xml
+++ b/src/chrome/content/rules/LeadSpend.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="LeadSpend.com (partial)">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://leadspend.com/ => https://leadspend.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="LeadSpend.com (partial)" default_off='failed ruleset test'>
 
 	<target host="leadspend.com" />
 	<target host="www.leadspend.com" />
diff --git a/src/chrome/content/rules/Leet_Media.com.xml b/src/chrome/content/rules/Leet_Media.com.xml
index fa2d6825eb0c..87c5991cc600 100644
--- a/src/chrome/content/rules/Leet_Media.com.xml
+++ b/src/chrome/content/rules/Leet_Media.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Leet Media.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://leetmedia.com/ => https://leetmedia.com/: (28, 'Operation timed out after 15000 milliseconds with 0 bytes received')
+
+-->
+<ruleset name="Leet Media.com" default_off='failed ruleset test'>
 
 	<target host="leetmedia.com" />
 	<target host="*.leetmedia.com" />
diff --git a/src/chrome/content/rules/Leetway.com.xml b/src/chrome/content/rules/Leetway.com.xml
index 091c93f2b1a0..f8cdd007749b 100644
--- a/src/chrome/content/rules/Leetway.com.xml
+++ b/src/chrome/content/rules/Leetway.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://leetway.com/ => https://leetway.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	Mixed content:
 
 		- Video on www from www.youtube.com *
@@ -23,7 +27,7 @@
 	and css from (www.).
 
 -->
-<ruleset name="Leetway.com (false MCB)" platform="mixedcontent">
+<ruleset name="Leetway.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="leetway.com" />
 	<target host="*.leetway.com" />
diff --git a/src/chrome/content/rules/Lenovo.xml b/src/chrome/content/rules/Lenovo.xml
index f9dca6870ee0..f10edc418f1b 100644
--- a/src/chrome/content/rules/Lenovo.xml
+++ b/src/chrome/content/rules/Lenovo.xml
@@ -1,4 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://consumersupport.lenovo.com => https://consumersupport.lenovo.com: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://news.lenovo.com => https://news.lenovo.com: (51, "SSL: no alternative certificate subject name matches target host name 'news.lenovo.com'")
+Fetch error: http://www.partnerinfo.lenovo.com => https://www.partnerinfo.lenovo.com: (7, 'Failed to connect to www.partnerinfo.lenovo.com port 443: Connection refused')
+Fetch error: http://social.lenovo.com => https://social.lenovo.com: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://lenovo.com/friendsandfamily => https://shop.lenovo.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=lenovofamily&ConfigContext=StdAffinityPortal: Too many redirects while fetching 'https://shop.lenovo.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=lenovofamily&ConfigContext=StdAffinityPortal'
+Fetch error: http://lenovo.com/friendsandfamily/ => https://shop.lenovo.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=lenovofamily&ConfigContext=StdAffinityPortal: Too many redirects while fetching 'https://shop.lenovo.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=lenovofamily&ConfigContext=StdAffinityPortal'
+Fetch error: http://www.lenovo.com/friendsandfamily/ => https://shop.lenovo.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=lenovofamily&ConfigContext=StdAffinityPortal: Too many redirects while fetching 'https://shop.lenovo.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=lenovofamily&ConfigContext=StdAffinityPortal'
+Fetch error: http://support.lenovo.com/ => https://support.lenovo.com/: Too many redirects while fetching 'https://support.lenovo.com/'
+
 	Other Lenovo rulesets:
 
 		- Lenovo_Orders.com.xml
@@ -101,7 +112,7 @@
 		- Bug on forums from lenovoblogs.112.2o7.net
 
 -->
-<ruleset name="Lenovo (partial)">
+<ruleset name="Lenovo (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Levels.io.xml b/src/chrome/content/rules/Levels.io.xml
index 124fa030cfdb..de1c6284f12c 100644
--- a/src/chrome/content/rules/Levels.io.xml
+++ b/src/chrome/content/rules/Levels.io.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.levels.io/ => https://www.levels.io/: (6, 'Could not resolve host: http')
+
 	Other levels.io rulesets:
 
 		- GifBook.io.xml
 
 -->
-<ruleset name="levels.io">
+<ruleset name="levels.io" default_off='failed ruleset test'>
 
 	<target host="levels.io" />
 	<target host="www.levels.io" />
diff --git a/src/chrome/content/rules/LibreOffice.xml b/src/chrome/content/rules/LibreOffice.xml
index 12c0b6e9937b..f54ee46ff74c 100644
--- a/src/chrome/content/rules/LibreOffice.xml
+++ b/src/chrome/content/rules/LibreOffice.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://owncloud.libreoffice.org/ => https://owncloud.libreoffice.org/: (6, 'Could not resolve host: owncloud.libreoffice.org')
+Fetch error: http://pad.libreoffice.org/ => https://pad.libreoffice.org/: (6, 'Could not resolve host: pad.libreoffice.org')
+Fetch error: http://wiki.libreoffice.org/ => https://wiki.libreoffice.org/: (6, 'Could not resolve host: wiki.libreoffice.org')
+
 	Nonfunctional subdomains:
 
 		- ask *
@@ -20,7 +26,7 @@
 	* Secured by us
 
 -->
-<ruleset name="LibreOffice">
+<ruleset name="LibreOffice" default_off='failed ruleset test'>
 	<target host="libreoffice.org" />
 	<target host="*.libreoffice.org" />
 
diff --git a/src/chrome/content/rules/Linguee.xml b/src/chrome/content/rules/Linguee.xml
index 575dcea4a8bc..17b8c0280118 100644
--- a/src/chrome/content/rules/Linguee.xml
+++ b/src/chrome/content/rules/Linguee.xml
@@ -1,4 +1,10 @@
-<ruleset name="Linguee">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://tool.linguee.com/ => https://tool.linguee.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
+-->
+<ruleset name="Linguee" default_off='failed ruleset test'>
   <target host="linguee.com" />
   <target host="www.linguee.com" />
   <target host="tool.linguee.com" />
diff --git a/src/chrome/content/rules/LinkedIn.xml b/src/chrome/content/rules/LinkedIn.xml
index 32dec56780db..495670f573ea 100644
--- a/src/chrome/content/rules/LinkedIn.xml
+++ b/src/chrome/content/rules/LinkedIn.xml
@@ -1,4 +1,10 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://marketing.linkedin.com/ => https://marketing.linkedin.com/: Too many redirects while fetching 'https://marketing.linkedin.com/'
+
+-->
+
 <!--
 	NB: massively important => backport this
 
@@ -223,7 +229,7 @@
 		- Bug on business from www.pubads.g.doubleclick.net
 
 -->
-<ruleset name="LinkedIn.com (partial)">
+<ruleset name="LinkedIn.com (partial)" default_off='failed ruleset test'>
 
 	<target host="linkedin.com" />
 	<target host="*.linkedin.com" />
diff --git a/src/chrome/content/rules/Linux-Magazin-Online.xml b/src/chrome/content/rules/Linux-Magazin-Online.xml
index 90de53079ef8..a2825425b4cc 100644
--- a/src/chrome/content/rules/Linux-Magazin-Online.xml
+++ b/src/chrome/content/rules/Linux-Magazin-Online.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://streaming.linux-magazin.de/ => https://streaming.linux-magazin.de/: (51, "SSL: no alternative certificate subject name matches target host name 'streaming.linux-magazin.de'")
+Fetch error: http://linux-magazin.de/ => https://www.linux-magazin.de/: Too many redirects while fetching 'https://www.linux-magazin.de/'
+
 	Linux-Magazin Online
 
 	For other Linux New Media coverage, see Linux-New-Media.xml.
@@ -11,7 +16,7 @@
 	* Expired
 
 -->
-<ruleset name="Linux-Magazin.de (partial)">
+<ruleset name="Linux-Magazin.de (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/LinuxFoundation.xml b/src/chrome/content/rules/LinuxFoundation.xml
index 39097914c3c3..b3f61227fe08 100644
--- a/src/chrome/content/rules/LinuxFoundation.xml
+++ b/src/chrome/content/rules/LinuxFoundation.xml
@@ -1,4 +1,29 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://collabprojects.linuxfoundation.org/sites/all/modules/custom/lf_assets/includes/img/di_blue.png => https://collabprojects.linuxfoundation.org/sites/all/modules/custom/lf_assets/includes/img/di_blue.png: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://events.linuxfoundation.org/sites/events/files/styles/events_listing_192x192/public/ccc_eu_color.png => https://events.linuxfoundation.org/sites/events/files/styles/events_listing_192x192/public/ccc_eu_color.png: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://eventsstg.linuxfoundation.org/sites/all/themes/lfevents/css/homepage-pardot_new.css => https://eventsstg.linuxfoundation.org/sites/all/themes/lfevents/css/homepage-pardot_new.css: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.linuxfoundation.org/about/join/individual => https://www.linuxfoundation.org/about/join/individual: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.linuxfoundation.org/cas?destination=homepage => https://www.linuxfoundation.org/cas?destination=homepage: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.linuxfoundation.org/sites/all/modules/custom/lf_assets/includes/img/di_blue.png => https://www.linuxfoundation.org/sites/all/modules/custom/lf_assets/includes/img/di_blue.png: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.linuxfoundation.org/user => https://www.linuxfoundation.org/user: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://go.linuxfoundation.org/? => https://www.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://go.linuxfoundation.org/?f => https://www.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://go.linuxfoundation.org// => https://www.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://go.linuxfoundation.org//? => https://www.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://linuxfoundation.org/ => https://linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://admin.linuxfoundation.org/ => https://admin.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://automotive.linuxfoundation.org/ => https://automotive.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://developerbugs.linuxfoundation.org/ => https://developerbugs.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://identity.linuxfoundation.org/ => https://identity.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://ldn.linuxfoundation.org/ => https://ldn.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://lists.linuxfoundation.org/ => https://lists.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://lsbbugs.linuxfoundation.org/ => https://lsbbugs.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://training.linuxfoundation.org/ => https://training.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://lists.linux-foundation.org/ => https://lists.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://go.linuxfoundation.org/ => https://www.linuxfoundation.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Other Linux Foundation rulesets:
 
 		- AllSeen_Alliance.org.xml
@@ -43,7 +68,7 @@
 		- developerbugs.linuxfoundation.org
 
 -->
-<ruleset name="Linux Foundation (partial)">
+<ruleset name="Linux Foundation (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Linuxslut.net.xml b/src/chrome/content/rules/Linuxslut.net.xml
index cb20ee90f54d..c573808de015 100644
--- a/src/chrome/content/rules/Linuxslut.net.xml
+++ b/src/chrome/content/rules/Linuxslut.net.xml
@@ -1,4 +1,10 @@
-<ruleset name="linuxslut.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.linuxslut.net/ => https://www.linuxslut.net/: (51, "SSL: no alternative certificate subject name matches target host name 'www.linuxslut.net'")
+
+-->
+<ruleset name="linuxslut.net" default_off='failed ruleset test'>
 
 	<target host="linuxslut.net" />
 	<target host="www.linuxslut.net" />
diff --git a/src/chrome/content/rules/Liquidmatrix.org.xml b/src/chrome/content/rules/Liquidmatrix.org.xml
index 7e481132e64f..0853f10912c9 100644
--- a/src/chrome/content/rules/Liquidmatrix.org.xml
+++ b/src/chrome/content/rules/Liquidmatrix.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://liquidmatrix.org/ => https://liquidmatrix.org/: (60, 'SSL certificate problem: certificate has expired')
+
 	Mixed content:
 
 		- Images from $self *
@@ -12,7 +16,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Liquidmatrix.org">
+<ruleset name="Liquidmatrix.org" default_off='failed ruleset test'>
 
 	<target host="liquidmatrix.org" />
 	<target host="*.liquidmatrix.org" />
diff --git a/src/chrome/content/rules/Listener_Approved.xml b/src/chrome/content/rules/Listener_Approved.xml
index a25d505c68e7..7790b2092a9f 100644
--- a/src/chrome/content/rules/Listener_Approved.xml
+++ b/src/chrome/content/rules/Listener_Approved.xml
@@ -1,4 +1,10 @@
-<ruleset name="Listener Approved">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://listenerapproved.com/ (200) => https://listenerapproved.com/ (500)
+
+-->
+<ruleset name="Listener Approved" default_off='failed ruleset test'>
 
 	<target host="listenerapproved.com" />
 	<target host="*.listenerapproved.com" />
diff --git a/src/chrome/content/rules/LiveCorp.xml b/src/chrome/content/rules/LiveCorp.xml
index dc63c869441c..a5867b5b7bf9 100644
--- a/src/chrome/content/rules/LiveCorp.xml
+++ b/src/chrome/content/rules/LiveCorp.xml
@@ -1,4 +1,10 @@
-<ruleset name="LiveCorp">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://livecorp.com.au/ => https://www.livecorp.com.au/: Too many redirects while fetching 'https://www.livecorp.com.au/'
+
+-->
+<ruleset name="LiveCorp" default_off='failed ruleset test'>
 	<target host="livecorp.com.au" />
 	<target host="*.livecorp.com.au" />
 
diff --git a/src/chrome/content/rules/LiveRamp.xml b/src/chrome/content/rules/LiveRamp.xml
index 03170f31abfe..3c25ae553179 100644
--- a/src/chrome/content/rules/LiveRamp.xml
+++ b/src/chrome/content/rules/LiveRamp.xml
@@ -1,4 +1,10 @@
-<ruleset name="LiveRamp">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://liveramp.com/ => https://liveramp.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="LiveRamp" default_off='failed ruleset test'>
 
 	<target host="liveramp.com" />
 	<target host="*.liveramp.com" />
diff --git a/src/chrome/content/rules/Livestream.xml b/src/chrome/content/rules/Livestream.xml
index 4a35905810bb..6ede61a27140 100644
--- a/src/chrome/content/rules/Livestream.xml
+++ b/src/chrome/content/rules/Livestream.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://upload-downloads.livestream.com/ => https://upload-downloads.livestream.com/: (7, 'Failed to connect to upload-downloads.livestream.com port 443: Connection refused')
+
 	Fully covered subdomains:
 
 		- *.api		(per-account subdomains)
@@ -11,7 +15,7 @@
 		- www
 
 -->
-<ruleset name="Livestream.com">
+<ruleset name="Livestream.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Loanliner.com.xml b/src/chrome/content/rules/Loanliner.com.xml
index 68a4a5877539..6f9bdab8c1fe 100644
--- a/src/chrome/content/rules/Loanliner.com.xml
+++ b/src/chrome/content/rules/Loanliner.com.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://loanliner.com/ => https://www.loanliner.com/: (56, 'SSL read: error:00000000:lib(0):func(0):reason(0), errno 104')
+Fetch error: http://www.loanliner.com/ => https://www.loanliner.com/: (56, 'SSL read: error:00000000:lib(0):func(0):reason(0), errno 104')
+
 	^: cert only matches www
 
 -->
-<ruleset name="Loanliner.com">
+<ruleset name="Loanliner.com" default_off='failed ruleset test'>
 
 	<target host="loanliner.com" />
 	<target host="www.loanliner.com" />
diff --git a/src/chrome/content/rules/LogMeIn.xml b/src/chrome/content/rules/LogMeIn.xml
index d377954fc856..fb23d9dc91fc 100644
--- a/src/chrome/content/rules/LogMeIn.xml
+++ b/src/chrome/content/rules/LogMeIn.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://usva.logmein.com/ => https://usva.logmein.com/: (7, 'Failed to connect to usva.logmein.com port 443: Connection refused')
+
 	For problematic rules, see LogMeIn-mismatches.xml.
 
 
@@ -34,7 +38,7 @@
 		- .logmein.com
 
 -->
-<ruleset name="LogMeIn.com (partial)">
+<ruleset name="LogMeIn.com (partial)" default_off='failed ruleset test'>
 
 	<target host="logmein.com" />
 	<target host="content.logmein.com" />
diff --git a/src/chrome/content/rules/Lolicore.ch.xml b/src/chrome/content/rules/Lolicore.ch.xml
index 6e3725e457b7..4e533d5ebe8f 100644
--- a/src/chrome/content/rules/Lolicore.ch.xml
+++ b/src/chrome/content/rules/Lolicore.ch.xml
@@ -1,4 +1,8 @@
-<!-- This rule was automatically generated based on an HSTS
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://lolicore.ch/ => https://lolicore.ch/: (60, 'SSL certificate problem: certificate has expired')
+ This rule was automatically generated based on an HSTS
      preload rule in the Chromium browser.  See
      https://src.chromium.org/viewvc/chrome/trunk/src/net/http/transport_security_state_static.h
      for the list of preloads.  Sites are added to the Chromium HSTS
@@ -7,7 +11,7 @@
 
      Because Chromium and derived browsers automatically force HTTPS for
      every access to this site, this rule applies only to Firefox. -->
-<ruleset name="Lolicore.ch" platform="firefox">
+<ruleset name="Lolicore.ch" platform="firefox" default_off='failed ruleset test'>
 <target host="lolicore.ch" />
 
 <securecookie host="^lolicore\.ch$" name=".+" />
diff --git a/src/chrome/content/rules/Lynch_Interactive.com.xml b/src/chrome/content/rules/Lynch_Interactive.com.xml
index 00c692208385..ea57b065ecc6 100644
--- a/src/chrome/content/rules/Lynch_Interactive.com.xml
+++ b/src/chrome/content/rules/Lynch_Interactive.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Lynch Interactive.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://lynchinteractive.com/ (200) => https://lynchinteractive.com/ (404)
+
+-->
+<ruleset name="Lynch Interactive.com" default_off='failed ruleset test'>
 
 	<target host="lynchinteractive.com" />
 	<target host="www.lynchinteractive.com" />
diff --git a/src/chrome/content/rules/MAAWG.xml b/src/chrome/content/rules/MAAWG.xml
index c48962b7cca3..368bc106d75c 100644
--- a/src/chrome/content/rules/MAAWG.xml
+++ b/src/chrome/content/rules/MAAWG.xml
@@ -1,4 +1,10 @@
-<ruleset name="MAAWG">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://maawg.org/ => https://maawg.org/: (51, "SSL: no alternative certificate subject name matches target host name 'maawg.org'")
+
+-->
+<ruleset name="MAAWG" default_off='failed ruleset test'>
   <target host="maawg.org" />
   <target host="www.maawg.org" />
 
diff --git a/src/chrome/content/rules/MIT.xml b/src/chrome/content/rules/MIT.xml
index 1025c1671066..5f0ed02a289b 100644
--- a/src/chrome/content/rules/MIT.xml
+++ b/src/chrome/content/rules/MIT.xml
@@ -1,4 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://mit.edu/ (200) => https://mit.edu/ (401)
+Fetch error: http://calendars.mit.edu/ => https://calendars.mit.edu/: Too many redirects while fetching 'https://calendars.mit.edu/'
+Non-2xx HTTP code: http://people.csail.mit.edu/ (200) => https://people.csail.mit.edu/ (403)
+Fetch error: http://entrepreneurship.mit.edu/ => https://entrepreneurship.mit.edu/: Too many redirects while fetching 'https://entrepreneurship.mit.edu/'
+Fetch error: http://linerva.mit.edu/ => https://linerva.mit.edu/: (28, 'Connection timed out after 10001 milliseconds')
+Fetch error: http://mail.mit.edu/ => https://mail.mit.edu/: (6, 'Could not resolve host: mail.mit.edu')
+Fetch error: http://webmail.mit.edu/ => https://webmail.mit.edu/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Most of this ruleset is commented out, because large parts fail automated tests.
 	Reasons for failing are described below.
 	Feel free to reenable functional subdomains.
@@ -247,7 +257,7 @@
 	³ Rule disabled by default <= expired & self-signed
 
 -->
-<ruleset name="MIT.edu (partial)">
+<ruleset name="MIT.edu (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/MSDN.xml b/src/chrome/content/rules/MSDN.xml
index b094834d25aa..1ef45e092ab1 100644
--- a/src/chrome/content/rules/MSDN.xml
+++ b/src/chrome/content/rules/MSDN.xml
@@ -1,4 +1,16 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://public.create.msdn.com/assets/ => https://www.create.msdn.com/assets/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://create.msdn.com/ => https://create.msdn.com/: (6, 'Could not resolve host: create.msdn.com')
+Fetch error: http://forums.create.msdn.com/ => https://forums.create.msdn.com/: (6, 'Could not resolve host: forums.create.msdn.com')
+Fetch error: http://profile.create.msdn.com/ => https://profile.create.msdn.com/: (28, 'Connection timed out after 10001 milliseconds')
+Fetch error: http://users.create.msdn.com/ => https://users.create.msdn.com/: (6, 'Could not resolve host: users.create.msdn.com')
+Fetch error: http://windowsphone.create.msdn.com/ => https://windowsphone.create.msdn.com/: (6, 'Could not resolve host: windowsphone.create.msdn.com')
+Fetch error: http://www.create.msdn.com/ => https://www.create.msdn.com/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://social.msdn.com/ => https://social.msdn.com/: (6, 'Could not resolve host: social.msdn.com')
+Fetch error: http://i1.social.msdn.com/ => https://social.msdn.com/: (6, 'Could not resolve host: social.msdn.com')
+
 	For other Microsoft coverage, see Microsoft.xml.
 
 
@@ -57,7 +69,7 @@
 	* Secured by us
 
 -->
-<ruleset name="MSDN.com (partial)">
+<ruleset name="MSDN.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Makezine.com.xml b/src/chrome/content/rules/Makezine.com.xml
index fc8621d9a8c7..e16998c43581 100644
--- a/src/chrome/content/rules/Makezine.com.xml
+++ b/src/chrome/content/rules/Makezine.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://makezine.com/ => https://makezine.com/: Too many redirects while fetching 'https://makezine.com/'
+Fetch error: http://www.makezine.com/ => https://www.makezine.com/: Too many redirects while fetching 'https://www.makezine.com/'
+
 	Mixed content:
 
 		- css from disqus.com ¹
@@ -14,7 +19,7 @@
 	² Secured by us
 
 -->
-<ruleset name="Makezine.com">
+<ruleset name="Makezine.com" default_off='failed ruleset test'>
 
 	<target host="makezine.com" />
 	<target host="www.makezine.com" />
diff --git a/src/chrome/content/rules/Malcovery.com.xml b/src/chrome/content/rules/Malcovery.com.xml
index 569e007ab541..c8f57f7b042f 100644
--- a/src/chrome/content/rules/Malcovery.com.xml
+++ b/src/chrome/content/rules/Malcovery.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://malcovery.com/ => https://malcovery.com/: (35, 'Unknown SSL protocol error in connection to malcovery.com:443 ')
+
 	Problematic subdomains:
 
 		- blog *
@@ -11,7 +15,7 @@
 		- Ads from malcovery.marketspaceagency.com
 
 -->
-<ruleset name="Malcovery.com (partial)">
+<ruleset name="Malcovery.com (partial)" default_off='failed ruleset test'>
 
 	<target host="malcovery.com" />
 	<target host="www.malcovery.com" />
diff --git a/src/chrome/content/rules/Mandriva.com-falsemixed.xml b/src/chrome/content/rules/Mandriva.com-falsemixed.xml
index 3fe698ba99de..ff179adacf71 100644
--- a/src/chrome/content/rules/Mandriva.com-falsemixed.xml
+++ b/src/chrome/content/rules/Mandriva.com-falsemixed.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://blog.mandriva.com/ => https://blog.mandriva.com/: (28, 'Resolving timed out after 10519 milliseconds')
+Fetch error: http://forum.mandriva.com/ => https://forum.mandriva.com/: (28, 'Resolving timed out after 10518 milliseconds')
+
 	For rules not causing false/broken MCB, see Mandriva.com.xml.
 
 -->
-<ruleset name="Mandriva.com (false MCB)" platform="mixedcontent">
+<ruleset name="Mandriva.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="blog.mandriva.com" />
 	<target host="forum.mandriva.com" />
diff --git a/src/chrome/content/rules/Mandriva.com.xml b/src/chrome/content/rules/Mandriva.com.xml
index 78482925dc5c..524d48f5d934 100644
--- a/src/chrome/content/rules/Mandriva.com.xml
+++ b/src/chrome/content/rules/Mandriva.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mandriva.com/ => https://mandriva.com/: (28, 'Resolving timed out after 10519 milliseconds')
+
 	For rules causing false/broken MCB, see Mandriva.com-falsemixed.xml.
 
 
@@ -72,7 +76,7 @@
 	falsemixed should be merged for Ffx 24.
 
 -->
-<ruleset name="Mandriva.com">
+<ruleset name="Mandriva.com" default_off='failed ruleset test'>
 
 	<target host="mandriva.com" />
 	<target host="*.mandriva.com" />
diff --git a/src/chrome/content/rules/Manta.xml b/src/chrome/content/rules/Manta.xml
index 779aa356782d..c9cc4418e6df 100644
--- a/src/chrome/content/rules/Manta.xml
+++ b/src/chrome/content/rules/Manta.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://manta.com/ => https://manta.com/: (51, "SSL: no alternative certificate subject name matches target host name 'manta.com'")
+
 	Nonfunctional domains:
 
 		- services.manta-r1.com		(400; mismatched, CN: *.hs.llnwd.net)
@@ -13,7 +17,7 @@
 	* Works; mismatched, CN: www.manta.com
 
 -->
-<ruleset name="Manta (partial)">
+<ruleset name="Manta (partial)" default_off='failed ruleset test'>
 
 	<target host="manta.com" />
 	<target host="*.manta.com" />
diff --git a/src/chrome/content/rules/Marin_Software.xml b/src/chrome/content/rules/Marin_Software.xml
index c652d6623835..2f044c2c75e4 100644
--- a/src/chrome/content/rules/Marin_Software.xml
+++ b/src/chrome/content/rules/Marin_Software.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://marinsm.com/ => https://www.marinsm.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.marinsm.com'")
+
 	For problematic rules, see Marin_Software-problematic.xml.
 
 
@@ -17,7 +21,7 @@
 		- www.marinsoftware.de		(works, mismatched, CN: *.marinsoftware.com)
 
 -->
-<ruleset name="Marin Software (partial)">
+<ruleset name="Marin Software (partial)" default_off='failed ruleset test'>
 
 	<target host="marinsm.com" />
 	<target host="*.marinsm.com" />
diff --git a/src/chrome/content/rules/MateLife.xml b/src/chrome/content/rules/MateLife.xml
index ece8b72690c5..1fd5b0d06fd1 100644
--- a/src/chrome/content/rules/MateLife.xml
+++ b/src/chrome/content/rules/MateLife.xml
@@ -1,4 +1,10 @@
-<ruleset name="MateLife">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://matelife.net/ => https://matelife.net/: (7, 'Failed to connect to matelife.net port 443: Connection refused')
+
+-->
+<ruleset name="MateLife" default_off='failed ruleset test'>
 
 	<target host="matelife.net" />
 	<target host="*.matelife.net" />
diff --git a/src/chrome/content/rules/Matt_Wilcox.net.xml b/src/chrome/content/rules/Matt_Wilcox.net.xml
index 7958f4e71f65..248b50e6543e 100644
--- a/src/chrome/content/rules/Matt_Wilcox.net.xml
+++ b/src/chrome/content/rules/Matt_Wilcox.net.xml
@@ -1,4 +1,11 @@
-<ruleset name="Matt Wilcox.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mattwilcox.net/ => https://mattwilcox.net/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://www.mattwilcox.net/ => https://www.mattwilcox.net/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
+-->
+<ruleset name="Matt Wilcox.net" default_off='failed ruleset test'>
 
 	<target host="mattwilcox.net" />
 	<target host="www.mattwilcox.net" />
diff --git a/src/chrome/content/rules/Max_Kitap.com.xml b/src/chrome/content/rules/Max_Kitap.com.xml
index fb09e2c3b748..9bd05c57d95b 100644
--- a/src/chrome/content/rules/Max_Kitap.com.xml
+++ b/src/chrome/content/rules/Max_Kitap.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Max Kitap.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://maxkitap.com/ => https://maxkitap.com/: (60, 'SSL certificate problem: self signed certificate')
+
+-->
+<ruleset name="Max Kitap.com" default_off='failed ruleset test'>
 
 	<target host="maxkitap.com" />
 	<target host="*.maxkitap.com" />
diff --git a/src/chrome/content/rules/Mcssl.com.xml b/src/chrome/content/rules/Mcssl.com.xml
index 2c6c6d3c3153..2c59e4d76e77 100644
--- a/src/chrome/content/rules/Mcssl.com.xml
+++ b/src/chrome/content/rules/Mcssl.com.xml
@@ -1,11 +1,16 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mcssl.com/ => https://www.mcssl.com/: (56, 'Recv failure: Connection reset by peer')
+Fetch error: http://www.mcssl.com/ => https://www.mcssl.com/: (56, 'Recv failure: Connection reset by peer')
+
 	For other Web.com coverage, see Web.com.xml.
 
 
 	!www: cert only matches www
 
 -->
-<ruleset name="mcssl.com">
+<ruleset name="mcssl.com" default_off='failed ruleset test'>
 
 	<target host="mcssl.com" />
 	<target host="www.mcssl.com" />
diff --git a/src/chrome/content/rules/McxNOW.com.xml b/src/chrome/content/rules/McxNOW.com.xml
index 50eef1489c78..5c32ff6201c8 100644
--- a/src/chrome/content/rules/McxNOW.com.xml
+++ b/src/chrome/content/rules/McxNOW.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="mcxNOW.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mcxnow.com/ => https://mcxnow.com/: (7, 'Failed to connect to mcxnow.com port 443: Connection refused')
+Fetch error: http://www.mcxnow.com/ => https://www.mcxnow.com/: (7, 'Failed to connect to www.mcxnow.com port 443: Connection refused')
+
+-->
+<ruleset name="mcxNOW.com" default_off='failed ruleset test'>
 
 	<target host="mcxnow.com" />
 	<target host="www.mcxnow.com" />
diff --git a/src/chrome/content/rules/Medgadget.xml b/src/chrome/content/rules/Medgadget.xml
index effc421f4164..defbb7483ff3 100644
--- a/src/chrome/content/rules/Medgadget.xml
+++ b/src/chrome/content/rules/Medgadget.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://medgadget.com/ => https://medgadget.com/: Too many redirects while fetching 'https://medgadget.com/'
+
 	CDN buckets:
 
 		- medgadgetenglish.s3.amazonaws.com
@@ -20,7 +24,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Medgadget">
+<ruleset name="Medgadget" default_off='failed ruleset test'>
 
 	<target host="medgadget.com" />
 	<target host="*.medgadget.com"/>
diff --git a/src/chrome/content/rules/Mediacru.sh.xml b/src/chrome/content/rules/Mediacru.sh.xml
index e431d2a98acd..35c2dec07b21 100644
--- a/src/chrome/content/rules/Mediacru.sh.xml
+++ b/src/chrome/content/rules/Mediacru.sh.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mediacru.sh/ => https://mediacru.sh/: (60, 'SSL certificate problem: self signed certificate')
+
 	This rule was automatically generated based on an HSTS
 	preload rule in the Chromium browser.  See
 	https://src.chromium.org/viewvc/chrome/trunk/src/net/http/transport_security_state_static.h
@@ -7,7 +11,7 @@
 	work properly everywhere on this site.
 
 -->
-<ruleset name="Mediacru.sh">
+<ruleset name="Mediacru.sh" default_off='failed ruleset test'>
 
 	<target host="mediacru.sh" />
 	<target host="*.mediacru.sh" />
diff --git a/src/chrome/content/rules/MediciGlobal.com-falsemixed.xml b/src/chrome/content/rules/MediciGlobal.com-falsemixed.xml
index 847179ee8824..6ca279a6637d 100644
--- a/src/chrome/content/rules/MediciGlobal.com-falsemixed.xml
+++ b/src/chrome/content/rules/MediciGlobal.com-falsemixed.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mediciglobal.com/ => https://mediciglobal.com/: (51, "SSL: no alternative certificate subject name matches target host name 'mediciglobal.com'")
+Fetch error: http://www.mediciglobal.com/ => https://www.mediciglobal.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.mediciglobal.com'")
+
 	For rules not causing false/broken MCB, see MediciGlobal.com.xml.
 
 -->
-<ruleset name="MediciGlobal.com (false MCB)" platform="mixedcontent">
+<ruleset name="MediciGlobal.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="mediciglobal.com" />
 	<target host="www.mediciglobal.com" />
diff --git a/src/chrome/content/rules/Mercy_Ships.xml b/src/chrome/content/rules/Mercy_Ships.xml
index 093ac1d1fc16..29e0bedcaa8f 100644
--- a/src/chrome/content/rules/Mercy_Ships.xml
+++ b/src/chrome/content/rules/Mercy_Ships.xml
@@ -1,4 +1,10 @@
-<ruleset name="Mercy Ships (partial)">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mercyships.org/ => https://mercyships.org/: Too many redirects while fetching 'https://mercyships.org/'
+
+-->
+<ruleset name="Mercy Ships (partial)" default_off='failed ruleset test'>
 
 	<target host="www.mercyships.org.s3.amazonaws.com" />
 	<target host="mercyships.org" />
diff --git a/src/chrome/content/rules/MereThis.com.xml b/src/chrome/content/rules/MereThis.com.xml
index 14135063d3bb..4b191b3ce64f 100644
--- a/src/chrome/content/rules/MereThis.com.xml
+++ b/src/chrome/content/rules/MereThis.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="MereThis.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://merethis.com/ => https://merethis.com/: (51, "SSL: no alternative certificate subject name matches target host name 'merethis.com'")
+
+-->
+<ruleset name="MereThis.com" default_off='failed ruleset test'>
 
 	<target host="merethis.com" />
 	<target host="*.merethis.com" />
diff --git a/src/chrome/content/rules/Mibbit.xml b/src/chrome/content/rules/Mibbit.xml
index 9974fa6c0566..7653e64a4f9b 100644
--- a/src/chrome/content/rules/Mibbit.xml
+++ b/src/chrome/content/rules/Mibbit.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://data.mibbit.com/ => https://data.mibbit.com/: (6, 'Could not resolve host: data.mibbit.com')
+
 	CDN buckets:
 
 		- s3.amazonaws.com/mibbit/
@@ -31,7 +35,7 @@
 		- widgetmanager
 
 -->
-<ruleset name="Mibbit">
+<ruleset name="Mibbit" default_off='failed ruleset test'>
 
 	<target host="mibbit.com" />
 	<target host="*.mibbit.com" />
diff --git a/src/chrome/content/rules/Micro_Focus.com.xml b/src/chrome/content/rules/Micro_Focus.com.xml
index d77d605aca65..1ee178993eb1 100644
--- a/src/chrome/content/rules/Micro_Focus.com.xml
+++ b/src/chrome/content/rules/Micro_Focus.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://images.online.microfocus.com/ => https://images.online.microfocus.com/: (51, "SSL: no alternative certificate subject name matches target host name 'images.online.microfocus.com'")
+
 	Other Micro Focus rulesets:
 
 		- Attachmate.xml
@@ -59,7 +63,7 @@
 	² Secured by us
 
 -->
-<ruleset name="Micro Focus.com (partial)">
+<ruleset name="Micro Focus.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/MicropartsUSA.xml b/src/chrome/content/rules/MicropartsUSA.xml
index 399a8385254c..14ee793d777c 100644
--- a/src/chrome/content/rules/MicropartsUSA.xml
+++ b/src/chrome/content/rules/MicropartsUSA.xml
@@ -1,4 +1,11 @@
-<ruleset name="MicropartsUSA">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://micropartsusa.com/ => https://micropartsusa.com/: (28, 'Operation timed out after 0 milliseconds with 0 out of 0 bytes received')
+Fetch error: http://www.micropartsusa.com/ => https://www.micropartsusa.com/: (28, 'Operation timed out after 0 milliseconds with 0 out of 0 bytes received')
+
+-->
+<ruleset name="MicropartsUSA" default_off='failed ruleset test'>
 
 	<target host="micropartsusa.com" />
 	<target host="www.micropartsusa.com" />
diff --git a/src/chrome/content/rules/Microsoft-Atlas.xml b/src/chrome/content/rules/Microsoft-Atlas.xml
index c0ded3f5bf60..3ac48c1e4fb4 100644
--- a/src/chrome/content/rules/Microsoft-Atlas.xml
+++ b/src/chrome/content/rules/Microsoft-Atlas.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://h.atdmt.com/ => https://h.atdmt.com/: (51, "SSL: no alternative certificate subject name matches target host name 'h.atdmt.com'")
+Fetch error: http://image.atdmt.com/ => https://image.atdmt.com/: (51, "SSL: no alternative certificate subject name matches target host name 'image.atdmt.com'")
+Fetch error: http://spe.atdmt.com/ => https://image.atdmt.com/: (51, "SSL: no alternative certificate subject name matches target host name 'image.atdmt.com'")
+
 	For other Facebook coverage, see Facebook.xml.
 
 
@@ -45,7 +51,7 @@
 	whichever domain it is loaded from.
 
 -->
-<ruleset name="Atdmt.com">
+<ruleset name="Atdmt.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Microsoft.xml b/src/chrome/content/rules/Microsoft.xml
index 18c35b8fcd73..38154bd31165 100644
--- a/src/chrome/content/rules/Microsoft.xml
+++ b/src/chrome/content/rules/Microsoft.xml
@@ -1,4 +1,27 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://search.microsoft.com/shared/ (200) => https://www.microsoft.com/shared/ (404)
+Fetch error: http://adcenter.microsoft.com/ => https://adcenter.microsoft.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://feedback.adcenter.microsoft.com/ => https://feedback.adcenter.microsoft.com/: (7, 'Failed to connect to feedback.adcenter.microsoft.com port 443: Connection timed out')
+Fetch error: http://innovation.connect.microsoft.com/ => https://innovation.connect.microsoft.com/: (51, "SSL: no alternative certificate subject name matches target host name 'innovation.connect.microsoft.com'")
+Fetch error: http://services.connect.microsoft.com/ => https://services.connect.microsoft.com/: (51, "SSL: no alternative certificate subject name matches target host name 'services.connect.microsoft.com'")
+Fetch error: http://events.microsoft.com/ => https://events.microsoft.com/: (51, "SSL: no alternative certificate subject name matches target host name 'events.microsoft.com'")
+Fetch error: http://insider.microsoft.com/ => https://insider.microsoft.com/: (6, 'Could not resolve host: insider.microsoft.com')
+Fetch error: http://learning.microsoft.com/ => https://learning.microsoft.com/: Too many redirects while fetching 'https://learning.microsoft.com/'
+Fetch error: http://m.microsoft.com/ => https://m.microsoft.com/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://widgets.membership.microsoft.com/ => https://widgets.membership.microsoft.com/: (51, "SSL: no alternative certificate subject name matches target host name 'widgets.membership.microsoft.com'")
+Fetch error: http://mobile.microsoft.com/ => https://mobile.microsoft.com/: (28, 'Connection timed out after 10001 milliseconds')
+Non-2xx HTTP code: http://oem.microsoft.com/ (200) => https://oem.microsoft.com/ (404)
+Fetch error: http://office365.microsoft.com/ => https://office365.microsoft.com/: (7, 'Failed to connect to office365.microsoft.com port 443: Connection timed out')
+Fetch error: http://research.microsoft.com/ => https://research.microsoft.com/: Too many redirects while fetching 'https://research.microsoft.com/'
+Fetch error: http://snackbox.microsoft.com/ => https://snackbox.microsoft.com/: (51, "SSL: no alternative certificate subject name matches target host name 'snackbox.microsoft.com'")
+Fetch error: http://windowsupdate.microsoft.com/ => https://windowsupdate.microsoft.com/: (51, "SSL: certificate subject name 'www.update.microsoft.com' does not match target host name 'windowsupdate.microsoft.com'")
+Fetch error: http://v4.windowsupdate.microsoft.com/ => https://v4.windowsupdate.microsoft.com/: (51, "SSL: certificate subject name 'www.update.microsoft.com' does not match target host name 'v4.windowsupdate.microsoft.com'")
+Fetch error: http://v5.windowsupdate.microsoft.com/ => https://v5.windowsupdate.microsoft.com/: (51, "SSL: certificate subject name 'www.update.microsoft.com' does not match target host name 'v5.windowsupdate.microsoft.com'")
+Fetch error: http://i1.connect.microsoft.com/ => https://services.connect.microsoft.com/: (51, "SSL: no alternative certificate subject name matches target host name 'services.connect.microsoft.com'")
+Fetch error: http://i1.mobile.microsoft.com/ => https://m.microsoft.com/: (28, 'Connection timed out after 10000 milliseconds')
+
 	For rules causing false/broken MCB, see Microsoft.com-falsemixed.xml.
 
 
@@ -339,7 +362,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Microsoft.com (partial)">
+<ruleset name="Microsoft.com (partial)" default_off='failed ruleset test'>
 
 	<target host="microsoft.com" />
 	<target host="*.microsoft.com" />
diff --git a/src/chrome/content/rules/Microsoft_Ventures.com.xml b/src/chrome/content/rules/Microsoft_Ventures.com.xml
index fc6309a1e436..7a7c104a51ad 100644
--- a/src/chrome/content/rules/Microsoft_Ventures.com.xml
+++ b/src/chrome/content/rules/Microsoft_Ventures.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://microsoftventures.com/ => https://microsoftventures.com/: (51, "SSL: no alternative certificate subject name matches target host name 'microsoftventures.com'")
+
 	For other Microsoft coverage, see Microsoft.xml.
 
 
@@ -10,7 +14,7 @@
 		- .www.microsoftventures.com
 
 -->
-<ruleset name="Microsoft Ventures.com">
+<ruleset name="Microsoft Ventures.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Mike_Masin.xml b/src/chrome/content/rules/Mike_Masin.xml
index 633151598306..130468b0bccb 100644
--- a/src/chrome/content/rules/Mike_Masin.xml
+++ b/src/chrome/content/rules/Mike_Masin.xml
@@ -1,4 +1,10 @@
-<ruleset name="Mike Masin">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mikemasin.com/ => https://mikemasin.com/: (7, 'Failed to connect to mikemasin.com port 443: Connection refused')
+
+-->
+<ruleset name="Mike Masin" default_off='failed ruleset test'>
 
 	<target host="mikemasin.com" />
 	<target host="*.mikemasin.com" />
diff --git a/src/chrome/content/rules/Mixxx.org.xml b/src/chrome/content/rules/Mixxx.org.xml
index ae5c5f416ff2..1e6a8ffe6ffe 100644
--- a/src/chrome/content/rules/Mixxx.org.xml
+++ b/src/chrome/content/rules/Mixxx.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mixxx.org/ => https://mixxx.org/: Too many redirects while fetching 'https://mixxx.org/'
+
 	Mixed content:
 
 		- css from fonts.googleapis.com *
@@ -8,7 +12,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Mixxx.org">
+<ruleset name="Mixxx.org" default_off='failed ruleset test'>
 
 	<target host="mixxx.org" />
 	<target host="*.mixxx.org" />
diff --git a/src/chrome/content/rules/Mjanja.ch.xml b/src/chrome/content/rules/Mjanja.ch.xml
index 1874417282b1..2dde63806409 100644
--- a/src/chrome/content/rules/Mjanja.ch.xml
+++ b/src/chrome/content/rules/Mjanja.ch.xml
@@ -1,4 +1,10 @@
-<ruleset name="Mjanja.ch">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.mjanja.ch/ => https://www.mjanja.ch/: (60, 'SSL certificate problem: self signed certificate')
+
+-->
+<ruleset name="Mjanja.ch" default_off='failed ruleset test'>
 	<target host="mjanja.ch" />
 	<target host="www.mjanja.ch" />
 
diff --git a/src/chrome/content/rules/Moat_ads.com.xml b/src/chrome/content/rules/Moat_ads.com.xml
index 578f4329e32e..7cc39641b09f 100644
--- a/src/chrome/content/rules/Moat_ads.com.xml
+++ b/src/chrome/content/rules/Moat_ads.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://js.moatads.com/ => https://js.moatads.com/: (51, "SSL: no alternative certificate subject name matches target host name 'js.moatads.com'")
+Fetch error: http://s.moatads.com/ => https://s.moatads.com/: (51, "SSL: no alternative certificate subject name matches target host name 's.moatads.com'")
+
 	For other Moat coverage, see Moat.xml.
 
 
@@ -8,7 +13,7 @@
 		- s
 
 -->
-<ruleset name="Moat ads.com">
+<ruleset name="Moat ads.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Mobclix.com.xml b/src/chrome/content/rules/Mobclix.com.xml
index 20ca69ec448c..c2256e448806 100644
--- a/src/chrome/content/rules/Mobclix.com.xml
+++ b/src/chrome/content/rules/Mobclix.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cdn.mobclix.com/ => https://cdn.mobclix.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Nonfunctional subdomains:
 
 		- ads *
@@ -7,7 +11,7 @@
 	* Refused
 
 -->
-<ruleset name="Mobclix.com (partial)">
+<ruleset name="Mobclix.com (partial)" default_off='failed ruleset test'>
 
 	<target host="cdn.mobclix.com" />
 
diff --git a/src/chrome/content/rules/Mollom.xml b/src/chrome/content/rules/Mollom.xml
index 1f47ebbc79dd..d1c9f5d9cf31 100644
--- a/src/chrome/content/rules/Mollom.xml
+++ b/src/chrome/content/rules/Mollom.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://wdc-api04.mollom.com/ => https://wdc-api04.mollom.com/: (28, 'Connection timed out after 10001 milliseconds')
+
 	Fully covered hosts in *mollom.com:
 
 		- (www.)?
@@ -8,7 +12,7 @@
 		- xmlrpc2
 
 -->
-<ruleset name="Mollom.com">
+<ruleset name="Mollom.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/MonkeyGuts.com.xml b/src/chrome/content/rules/MonkeyGuts.com.xml
index 7b1989953e62..c4718529480b 100644
--- a/src/chrome/content/rules/MonkeyGuts.com.xml
+++ b/src/chrome/content/rules/MonkeyGuts.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="MonkeyGuts.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://monkeyguts.com/ => https://monkeyguts.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.monkeyguts.com/ => https://www.monkeyguts.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="MonkeyGuts.com" default_off='failed ruleset test'>
 
 	<target host="monkeyguts.com" />
 	<target host="www.monkeyguts.com" />
diff --git a/src/chrome/content/rules/Monty_Program.xml b/src/chrome/content/rules/Monty_Program.xml
index 611c8f048101..7ba7b2ff69b2 100644
--- a/src/chrome/content/rules/Monty_Program.xml
+++ b/src/chrome/content/rules/Monty_Program.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://montyprogram.com/ => https://montyprogram.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Other Monty Program rulesets:
 
 		- AskMonty.xml
@@ -10,7 +14,7 @@
 		- www	(redirects to blog.mariadb.org over https)
 
 -->
-<ruleset name="Monty Program">
+<ruleset name="Monty Program" default_off='failed ruleset test'>
 
 	<target host="montyprogram.com" />
 	<target host="*.montyprogram.com" />
diff --git a/src/chrome/content/rules/Moreinterop.com.xml b/src/chrome/content/rules/Moreinterop.com.xml
index f132ace51682..d2b914bbfce9 100644
--- a/src/chrome/content/rules/Moreinterop.com.xml
+++ b/src/chrome/content/rules/Moreinterop.com.xml
@@ -1,11 +1,16 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.moreinterop.com/ => https://www.moreinterop.com/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://moreinterop.com/ => https://www.moreinterop.com/: (28, 'Connection timed out after 10000 milliseconds')
+
 	For other Microsoft coverage, see Microsoft.xml.
 
 
 	!www: cert only matches www
 
 -->
-<ruleset name="moreinterop.com">
+<ruleset name="moreinterop.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Mozilla.com.xml b/src/chrome/content/rules/Mozilla.com.xml
index 0413d8dd6a5b..2d8c8e7852a9 100644
--- a/src/chrome/content/rules/Mozilla.com.xml
+++ b/src/chrome/content/rules/Mozilla.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mail.mozilla.com/ => https://mail.mozilla.com/: (6, 'Could not resolve host: mail.mozilla.com')
+Fetch error: http://mail.corp.phx1.mozilla.com/ => https://mail.corp.phx1.mozilla.com/: (6, 'Could not resolve host: mail.corp.phx1.mozilla.com')
+
 	NB: If a host ceases to exist, just remove the respective test.
 
 	For other Mozilla coverage, see Mozilla.xml.
@@ -69,7 +74,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Mozilla.com (partial)">
+<ruleset name="Mozilla.com (partial)" default_off='failed ruleset test'>
 
 	<target host="mozilla.com" />
 	<target host="*.mozilla.com" />
diff --git a/src/chrome/content/rules/Mozilla.net.xml b/src/chrome/content/rules/Mozilla.net.xml
index 9f12339e3f39..69851a29a287 100644
--- a/src/chrome/content/rules/Mozilla.net.xml
+++ b/src/chrome/content/rules/Mozilla.net.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://getpersonas-cdn.mozilla.net/ => https://getpersonas.cdn.mozilla.net/: (6, 'Could not resolve host: getpersonas.cdn.mozilla.net')
+
 	For other Mozilla coverage, see Mozilla.xml.
 
 
@@ -61,7 +65,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Mozilla.net (partial)">
+<ruleset name="Mozilla.net (partial)" default_off='failed ruleset test'>
 
 	<target host="*.mozilla.net" />
 
diff --git a/src/chrome/content/rules/Mozilla_Ignite.org.xml b/src/chrome/content/rules/Mozilla_Ignite.org.xml
index 97dfc85d877a..d8af723a7022 100644
--- a/src/chrome/content/rules/Mozilla_Ignite.org.xml
+++ b/src/chrome/content/rules/Mozilla_Ignite.org.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://mozillaignite.com/ => https://mozillaignite.com/: (51, "SSL: no alternative certificate subject name matches target host name 'mozillaignite.com'")
+Fetch error: http://www.mozillaignite.com/ => https://www.mozillaignite.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.mozillaignite.com'")
+
 	For other Mozilla coverage, see Mozilla.xml.
 
 
@@ -12,7 +17,7 @@
 		- (www.)?
 
 -->
-<ruleset name="Mozilla Ignite.org (partial)">
+<ruleset name="Mozilla Ignite.org (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Mozilla_Labs.com.xml b/src/chrome/content/rules/Mozilla_Labs.com.xml
index 10ef1be35fd1..6b9026d710a2 100644
--- a/src/chrome/content/rules/Mozilla_Labs.com.xml
+++ b/src/chrome/content/rules/Mozilla_Labs.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bespin.mozillalabs.com/ => https://bespin.mozillalabs.com/: (51, "SSL: no alternative certificate subject name matches target host name 'bespin.mozillalabs.com'")
+Fetch error: http://bespinplugins.mozillalabs.com/ => https://bespinplugins.mozillalabs.com/: (51, "SSL: no alternative certificate subject name matches target host name 'bespinplugins.mozillalabs.com'")
+
 	For other Mozilla coverage, see Mozilla.xml.
 
 
@@ -22,7 +27,7 @@
 		- webmaker
 
 -->
-<ruleset name="Mozilla Labs.com (partial)">
+<ruleset name="Mozilla Labs.com (partial)" default_off='failed ruleset test'>
 
 	<target host="mozillalabs.com" />
 	<target host="*.mozillalabs.com" />
diff --git a/src/chrome/content/rules/Mozilla_Persona.xml b/src/chrome/content/rules/Mozilla_Persona.xml
index 7cff71f0c3f7..cfaef05b2c2c 100644
--- a/src/chrome/content/rules/Mozilla_Persona.xml
+++ b/src/chrome/content/rules/Mozilla_Persona.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://apps.persona.org/ => https://apps.persona.org/: (6, 'Could not resolve host: apps.persona.org')
+
 	Mozilla Persona
 
 	For other Mozilla coverage, see Mozilla.xml.
 
 -->
-<ruleset name="Persona.org">
+<ruleset name="Persona.org" default_off='failed ruleset test'>
 
 	<target host="persona.org" />
 	<target host="apps.persona.org" />
diff --git a/src/chrome/content/rules/MultiVPN.xml b/src/chrome/content/rules/MultiVPN.xml
index 89c25ac3a40f..7c04fb959714 100644
--- a/src/chrome/content/rules/MultiVPN.xml
+++ b/src/chrome/content/rules/MultiVPN.xml
@@ -1,4 +1,10 @@
-<ruleset name="MultiVPN">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://multi-vpn.biz/ => https://multi-vpn.biz/: (51, "SSL: no alternative certificate subject name matches target host name 'multi-vpn.biz'")
+
+-->
+<ruleset name="MultiVPN" default_off='failed ruleset test'>
 
 	<target host="multi-vpn.biz" />
 	<target host="*.multi-vpn.biz" />
diff --git a/src/chrome/content/rules/Multicore-DevCon.com.xml b/src/chrome/content/rules/Multicore-DevCon.com.xml
index 36cda60e6a23..57fe3330afb0 100644
--- a/src/chrome/content/rules/Multicore-DevCon.com.xml
+++ b/src/chrome/content/rules/Multicore-DevCon.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="Multicore-DevCon.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://multicore-devcon.com/ => https://multicore-devcon.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.multicore-devcon.com/ => https://www.multicore-devcon.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Multicore-DevCon.com" default_off='failed ruleset test'>
 
 	<target host="multicore-devcon.com" />
 	<target host="www.multicore-devcon.com" />
diff --git a/src/chrome/content/rules/MusicBrainz.xml b/src/chrome/content/rules/MusicBrainz.xml
index f62be9293968..a1efcc83ff45 100644
--- a/src/chrome/content/rules/MusicBrainz.xml
+++ b/src/chrome/content/rules/MusicBrainz.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://test.musicbrainz.org/ => https://test.musicbrainz.org/: (6, 'Could not resolve host: test.musicbrainz.org')
+
 	As of 2015-01-05, known unprotected subdomains are:
 
 		- forums
@@ -10,7 +14,7 @@
 
 		- metabrainz.org
 -->
-<ruleset name="MusicBrainz">
+<ruleset name="MusicBrainz" default_off='failed ruleset test'>
 	<target host="musicbrainz.org" />
 	<target host="www.musicbrainz.org" />
 	<target host="wiki.musicbrainz.org" />
diff --git a/src/chrome/content/rules/Mutual_of_America.xml b/src/chrome/content/rules/Mutual_of_America.xml
index c0208f087cb4..16e56f6ebbeb 100644
--- a/src/chrome/content/rules/Mutual_of_America.xml
+++ b/src/chrome/content/rules/Mutual_of_America.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bocam.mutualofamerica.com/ => https://bocam.mutualofamerica.com/: (6, 'Could not resolve host: bocam.mutualofamerica.com')
+
 	Problematic subdomains:
 
 		- ^	(cert only matches www)
@@ -13,7 +17,7 @@
 		- myaccount
 
 -->
-<ruleset name="Mutual of America.com">
+<ruleset name="Mutual of America.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/My_Aloe_Cleanse.com.xml b/src/chrome/content/rules/My_Aloe_Cleanse.com.xml
index 37fd908d6e48..4df03439898f 100644
--- a/src/chrome/content/rules/My_Aloe_Cleanse.com.xml
+++ b/src/chrome/content/rules/My_Aloe_Cleanse.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="My Aloe Cleanse.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://tryprocleanse.com/ => http://tryprocleanse.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="My Aloe Cleanse.com" default_off='failed ruleset test'>
 
 	<target host="myaloecleanse.com" />
 	<target host="*.myaloecleanse.com" />
diff --git a/src/chrome/content/rules/My_Portable_World.com.xml b/src/chrome/content/rules/My_Portable_World.com.xml
index 7da7a02a24a4..c2ef4a5688d4 100644
--- a/src/chrome/content/rules/My_Portable_World.com.xml
+++ b/src/chrome/content/rules/My_Portable_World.com.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://myportableworld.com/ => https://myportableworld.com/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+
 	CDN buckets:
 
 		- mpw-myportableworld.netdna-ssl.com
 		- i[012].wp.com/myportableworld.com/
 
 -->
-<ruleset name="My Portable World.com">
+<ruleset name="My Portable World.com" default_off='failed ruleset test'>
 
 	<target host="myportableworld.com" />
 	<target host="*.myportableworld.com" />
diff --git a/src/chrome/content/rules/NASA.gov.xml b/src/chrome/content/rules/NASA.gov.xml
index 941ff2319f86..14bd36a4dad8 100644
--- a/src/chrome/content/rules/NASA.gov.xml
+++ b/src/chrome/content/rules/NASA.gov.xml
@@ -1,4 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://www.grc.nasa.gov/ (200) => https://www.grc.nasa.gov/ (403)
+Fetch error: http://careerlaunch.jpl.nasa.gov/ => https://careerlaunch.jpl.nasa.gov/: (7, 'Failed to connect to careerlaunch.jpl.nasa.gov port 443: Connection refused')
+Fetch error: http://jplnet.jpl.nasa.gov/ => https://jplnet.jpl.nasa.gov/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://nightsky.jpl.nasa.gov/ => https://nightsky.jpl.nasa.gov/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://solarsystem.jpl.nasa.gov/ => https://solarsystem.jpl.nasa.gov/: (51, "SSL: no alternative certificate subject name matches target host name 'solarsystem.jpl.nasa.gov'")
+Fetch error: http://sse.jpl.nasa.gov/ => https://sse.jpl.nasa.gov/: (51, "SSL: no alternative certificate subject name matches target host name 'sse.jpl.nasa.gov'")
+Fetch error: http://ras.nasa.gov/ => https://ras.nasa.gov/: (6, 'Could not resolve host: ras.nasa.gov')
+
 	For other US government coverage, see US-government.xml.
 
 
@@ -218,7 +228,7 @@
 	² Unsecurable <= 404
 
 -->
-<ruleset name="NASA.gov (partial)">
+<ruleset name="NASA.gov (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/NHN-Corporation.xml b/src/chrome/content/rules/NHN-Corporation.xml
index 5eab244f1d2b..e85a2da66686 100644
--- a/src/chrome/content/rules/NHN-Corporation.xml
+++ b/src/chrome/content/rules/NHN-Corporation.xml
@@ -1,11 +1,18 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://nhn.com/ => https://www.nhncorp.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.nhn.com/ => https://www.nhncorp.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://nhncorp.com/ => https://www.nhncorp.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.nhncorp.com/ => https://www.nhncorp.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Other NHN Corporation rulesets:
 
 		- Anker.xml
 		- Unthem.xml
 
 -->
-<ruleset name="NHN Corporation">
+<ruleset name="NHN Corporation" default_off='failed ruleset test'>
 
 	<target host="nhn.com" />
 	<target host="www.nhn.com" />
diff --git a/src/chrome/content/rules/NTP.org.xml b/src/chrome/content/rules/NTP.org.xml
index 4a625d5abcec..f5ff7052e33e 100644
--- a/src/chrome/content/rules/NTP.org.xml
+++ b/src/chrome/content/rules/NTP.org.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bugs.ntp.org/ => https://bugs.ntp.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://lists.ntp.org/ => https://lists.ntp.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
 	Nonfunctional subdomains:
 
 		- (www.)	(ssl_error_rx_record_too_long)
@@ -25,7 +30,7 @@
 			- support from www.ipligence.com
 
 -->
-<ruleset name="NTP.org (partial)" platform="cacert">
+<ruleset name="NTP.org (partial)" platform="cacert" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/NYK_Europe.com-falsemixed.xml b/src/chrome/content/rules/NYK_Europe.com-falsemixed.xml
index 6b7ee240405e..f3f18e785378 100644
--- a/src/chrome/content/rules/NYK_Europe.com-falsemixed.xml
+++ b/src/chrome/content/rules/NYK_Europe.com-falsemixed.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://nykeurope.com/ => https://nykeurope.com/: Too many redirects while fetching 'https://nykeurope.com/'
+
 	For rules not causing mixed content, see NYK_Europe.com.xml.
 
 -->
-<ruleset name="NYK Europe.com (false MCB)" platform="mixedcontent">
+<ruleset name="NYK Europe.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="nykeurope.com" />
 	<target host="*.nykeurope.com" />
diff --git a/src/chrome/content/rules/NYSE_Euronext.xml b/src/chrome/content/rules/NYSE_Euronext.xml
index 864fddbf2f78..629b858cb9ab 100644
--- a/src/chrome/content/rules/NYSE_Euronext.xml
+++ b/src/chrome/content/rules/NYSE_Euronext.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://nyx.com/ => https://www.nyx.com/: (28, 'Resolving timed out after 10519 milliseconds')
+
 	Problematic subdomains:
 
 		- ^	(times out)
@@ -22,7 +26,7 @@
 		- usequities
 
 -->
-<ruleset name="NYSE Euronext">
+<ruleset name="NYSE Euronext" default_off='failed ruleset test'>
 
 	<target host="nyx.com" />
 	<target host="*.nyx.com" />
diff --git a/src/chrome/content/rules/Nabers.com.xml b/src/chrome/content/rules/Nabers.com.xml
index 3ada376fe612..c5167cad900c 100644
--- a/src/chrome/content/rules/Nabers.com.xml
+++ b/src/chrome/content/rules/Nabers.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://nabers.com/ => https://nabers.com/: Too many redirects while fetching 'https://nabers.com/'
+
 	Mixed content:
 
 		- css from fonts.googleapis.com *
@@ -8,7 +12,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Nabers.com">
+<ruleset name="Nabers.com" default_off='failed ruleset test'>
 
 	<target host="nabers.com" />
 	<target host="*.nabers.com" />
diff --git a/src/chrome/content/rules/Naked_citizens.xml b/src/chrome/content/rules/Naked_citizens.xml
index 81eef715ca9c..23a0e4cd2bcf 100644
--- a/src/chrome/content/rules/Naked_citizens.xml
+++ b/src/chrome/content/rules/Naked_citizens.xml
@@ -1,4 +1,11 @@
-<ruleset name="Naked citizens">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://nakedcitizens.eu/ => https://nakedcitizens.eu/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.nakedcitizens.eu/ => https://www.nakedcitizens.eu/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Naked citizens" default_off='failed ruleset test'>
 
 	<target host="nakedcitizens.eu" />
 	<target host="www.nakedcitizens.eu" />
diff --git a/src/chrome/content/rules/Nanyang-Technological-University.xml b/src/chrome/content/rules/Nanyang-Technological-University.xml
index f75ffe6b632e..07ea09e1dfc0 100644
--- a/src/chrome/content/rules/Nanyang-Technological-University.xml
+++ b/src/chrome/content/rules/Nanyang-Technological-University.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://wis.ntu.edu.sg/ => https://wis.ntu.edu.sg/: (35, 'Unknown SSL protocol error in connection to wis.ntu.edu.sg:443 ')
+
 	Nanyang Technological University
 
 
@@ -16,7 +20,7 @@
 		- wis
 
 -->
-<ruleset name="NTU.edu.sg (partial)">
+<ruleset name="NTU.edu.sg (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/National-Institute-of-Standards-and-Technology.xml b/src/chrome/content/rules/National-Institute-of-Standards-and-Technology.xml
index 6ff1ad20e5b2..56695f4b0a30 100644
--- a/src/chrome/content/rules/National-Institute-of-Standards-and-Technology.xml
+++ b/src/chrome/content/rules/National-Institute-of-Standards-and-Technology.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://web.nvd.nist.gov/ => https://web.nvd.nist.gov/: Too many redirects while fetching 'https://web.nvd.nist.gov/'
+
 	National Institute of Standards and Technology
 
 	For other US government coverage, see US-government.xml.
@@ -28,7 +32,7 @@
 		- web.nvd.nist.gov
 
 -->
-<ruleset name="NIST.gov (partial)">
+<ruleset name="NIST.gov (partial)" default_off='failed ruleset test'>
 
 	<target host="nvd.nist.gov" />
 	<target host="web.nvd.nist.gov" />
diff --git a/src/chrome/content/rules/National_Abortion_Federation.xml b/src/chrome/content/rules/National_Abortion_Federation.xml
index 6ce1ac738570..5973c969fc3b 100644
--- a/src/chrome/content/rules/National_Abortion_Federation.xml
+++ b/src/chrome/content/rules/National_Abortion_Federation.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://prochoice.org/ => https://www.prochoice.org/: Too many redirects while fetching 'https://www.prochoice.org/'
+Fetch error: http://www.prochoice.org/ => https://www.prochoice.org/: Too many redirects while fetching 'https://www.prochoice.org/'
+
 	!www: cert only matches www
 
 -->
-<ruleset name="National Abortion Federation">
+<ruleset name="National Abortion Federation" default_off='failed ruleset test'>
 
 	<target host="prochoice.org" />
 	<target host="www.prochoice.org" />
diff --git a/src/chrome/content/rules/Natl-Childrens-Leukemia-Foundation.xml b/src/chrome/content/rules/Natl-Childrens-Leukemia-Foundation.xml
index 3c2df444f3af..823ecc9dcdcb 100644
--- a/src/chrome/content/rules/Natl-Childrens-Leukemia-Foundation.xml
+++ b/src/chrome/content/rules/Natl-Childrens-Leukemia-Foundation.xml
@@ -1,4 +1,11 @@
-<ruleset name="National Children's Leukemia Foundation">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://leukemiafoundation.org/ => https://www.leukemiafoundation.org/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://www.leukemiafoundation.org/ => https://www.leukemiafoundation.org/: (28, 'Connection timed out after 10001 milliseconds')
+
+-->
+<ruleset name="National Children's Leukemia Foundation" default_off='failed ruleset test'>
 	<target host="leukemiafoundation.org" />
 	<target host="www.leukemiafoundation.org" />
 
diff --git a/src/chrome/content/rules/Neave.tv.xml b/src/chrome/content/rules/Neave.tv.xml
index 79c4f395334c..fda257f51d7b 100644
--- a/src/chrome/content/rules/Neave.tv.xml
+++ b/src/chrome/content/rules/Neave.tv.xml
@@ -1,4 +1,10 @@
-<ruleset name="Neave.tv">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://neave.tv/ => https://neave.tv/: Too many redirects while fetching 'https://neave.tv/'
+
+-->
+<ruleset name="Neave.tv" default_off='failed ruleset test'>
 
 	<target host="neave.tv" />
 	<target host="*.neave.tv" />
diff --git a/src/chrome/content/rules/NegotiatingSalary.com.xml b/src/chrome/content/rules/NegotiatingSalary.com.xml
index cb15272e7e53..71dcca76f4fe 100644
--- a/src/chrome/content/rules/NegotiatingSalary.com.xml
+++ b/src/chrome/content/rules/NegotiatingSalary.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="NegotiatingSalary.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://negotiatingsalary.com/ => https://negotiatingsalary.com/: Too many redirects while fetching 'https://negotiatingsalary.com/'
+
+-->
+<ruleset name="NegotiatingSalary.com" default_off='failed ruleset test'>
 
 	<target host="negotiatingsalary.com" />
 	<target host="*.negotiatingsalary.com" />
diff --git a/src/chrome/content/rules/NetApp.xml b/src/chrome/content/rules/NetApp.xml
index e8c1ad0a9f1d..2d60d3915838 100644
--- a/src/chrome/content/rules/NetApp.xml
+++ b/src/chrome/content/rules/NetApp.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://services-new.netapp.com/ => https://services-new.netapp.com/: (28, 'Connection timed out after 10000 milliseconds')
+
 	fast, fast-new, login: Gone
 
 
@@ -64,7 +68,7 @@
 	* Secured by us
 
 -->
-<ruleset name="NetApp.com (partial)">
+<ruleset name="NetApp.com (partial)" default_off='failed ruleset test'>
 
 	<target host="learningcenter.netapp.com" />
 	<target host="learningcentre.netapp.com" />
diff --git a/src/chrome/content/rules/NetFronts.xml b/src/chrome/content/rules/NetFronts.xml
index 590dcf4c6074..91f93655872a 100644
--- a/src/chrome/content/rules/NetFronts.xml
+++ b/src/chrome/content/rules/NetFronts.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://hosting-advantage.com/ => https://hosting-advantage.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	For problematic rules, see NetFronts-mismatches.xml.
 
 
@@ -8,7 +12,7 @@
 		- (www.)web-hsoting.com	(ditto)
 
 -->
-<ruleset name="NetFronts (partial)">
+<ruleset name="NetFronts (partial)" default_off='failed ruleset test'>
 
 	<target host="hosting-advantage.com" />
 	<target host="*.hosting-advantage.com" />
diff --git a/src/chrome/content/rules/Net_Mundial.net.xml b/src/chrome/content/rules/Net_Mundial.net.xml
index a390501bce82..d191020a2641 100644
--- a/src/chrome/content/rules/Net_Mundial.net.xml
+++ b/src/chrome/content/rules/Net_Mundial.net.xml
@@ -1,4 +1,11 @@
-<ruleset name="Net Mundial.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://netmundial.net/ => https://netmundial.net/: (6, 'Could not resolve host: netmundial.net')
+Fetch error: http://www.netmundial.net/ => https://www.netmundial.net/: (6, 'Could not resolve host: www.netmundial.net')
+
+-->
+<ruleset name="Net Mundial.net" default_off='failed ruleset test'>
 
 	<target host="netmundial.net" />
 	<target host="www.netmundial.net" />
diff --git a/src/chrome/content/rules/Netistrar.com.xml b/src/chrome/content/rules/Netistrar.com.xml
index aaf7c4022387..7c2f38f3490b 100644
--- a/src/chrome/content/rules/Netistrar.com.xml
+++ b/src/chrome/content/rules/Netistrar.com.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://netistrar.com/ => https://netistrar.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Insecure cookies are set for these domains:
 
 		- secure.netistrar.com
 		- www.netistrar.com
 
 -->
-<ruleset name="Netistrar.com">
+<ruleset name="Netistrar.com" default_off='failed ruleset test'>
 
 	<target host="netistrar.com" />
 	<target host="*.netistrar.com" />
diff --git a/src/chrome/content/rules/Netpol.org.xml b/src/chrome/content/rules/Netpol.org.xml
index 0f579b643b9d..3f455e01dd5e 100644
--- a/src/chrome/content/rules/Netpol.org.xml
+++ b/src/chrome/content/rules/Netpol.org.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://netpol.org/ => https://netpol.org/: (35, 'Unknown SSL protocol error in connection to netpol.org:443 ')
+
 	Insecure cookies are set for these hosts:
 
 		- netpol.org
 		- www.netpol.org
 
 -->
-<ruleset name="Netpol.org">
+<ruleset name="Netpol.org" default_off='failed ruleset test'>
 
 	<target host="netpol.org" />
 	<target host="www.netpol.org" />
diff --git a/src/chrome/content/rules/Network23.org.xml b/src/chrome/content/rules/Network23.org.xml
index a705ae6fd91c..879d3d4e8592 100644
--- a/src/chrome/content/rules/Network23.org.xml
+++ b/src/chrome/content/rules/Network23.org.xml
@@ -1,4 +1,10 @@
-<ruleset name="network23.org">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.network23.org/ => https://www.network23.org/: Too many redirects while fetching 'https://www.network23.org/'
+
+-->
+<ruleset name="network23.org" default_off='failed ruleset test'>
 
 	<target host="network23.org" />
 	<target host="www.network23.org" />
diff --git a/src/chrome/content/rules/NeuStar.xml b/src/chrome/content/rules/NeuStar.xml
index 51a66a73c1f0..a09f4a74b20a 100644
--- a/src/chrome/content/rules/NeuStar.xml
+++ b/src/chrome/content/rules/NeuStar.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://leap.neustar.biz/ => https://leap.neustar.biz/: (35, 'Unknown SSL protocol error in connection to leap.neustar.biz:443 ')
+
 	Other Neustar rulesets:
 
 		- Browsermob.com.xml
@@ -71,7 +75,7 @@
 		- static.wpm.neustar.biz
 
 -->
-<ruleset name="Neustar.biz (partial)">
+<ruleset name="Neustar.biz (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Neustar.com.xml b/src/chrome/content/rules/Neustar.com.xml
index 97b8e7dd5c58..c717dc77f4e6 100644
--- a/src/chrome/content/rules/Neustar.com.xml
+++ b/src/chrome/content/rules/Neustar.com.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://payment.neustar.com/ => https://payment.neustar.com/: (51, "SSL: no alternative certificate subject name matches target host name 'payment.neustar.com'")
+
 	For other NeuStar coverage, see NeuStar.xml.
 
 -->
-<ruleset name="Neustar.com">
+<ruleset name="Neustar.com" default_off='failed ruleset test'>
 
 	<target host="neustar.com" />
 	<target host="payment.neustar.com" />
diff --git a/src/chrome/content/rules/New-Moon-Girls-Online.xml b/src/chrome/content/rules/New-Moon-Girls-Online.xml
index 0a0045420369..088377f60bdb 100644
--- a/src/chrome/content/rules/New-Moon-Girls-Online.xml
+++ b/src/chrome/content/rules/New-Moon-Girls-Online.xml
@@ -1,4 +1,11 @@
-<ruleset name="New Moon Girls Online">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://newmoon.com/ => https://www.newmoon.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.newmoon.com'")
+Fetch error: http://www.newmoon.com/ => https://www.newmoon.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.newmoon.com'")
+
+-->
+<ruleset name="New Moon Girls Online" default_off='failed ruleset test'>
 	<target host="newmoon.com" />
 	<target host="www.newmoon.com" />
 
diff --git a/src/chrome/content/rules/Nexus_Pay.xml b/src/chrome/content/rules/Nexus_Pay.xml
index f8f1f86e2bbb..aa7db58fb550 100644
--- a/src/chrome/content/rules/Nexus_Pay.xml
+++ b/src/chrome/content/rules/Nexus_Pay.xml
@@ -1,4 +1,10 @@
-<ruleset name="Nexus Pay">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://nexuspays.com/ => http://nexuspays.com/: (6, 'Could not resolve host: nexuspays.com')
+
+-->
+<ruleset name="Nexus Pay" default_off='failed ruleset test'>
 
 	<target host="nexuspays.com" />
 	<target host="*.nexuspays.com" />
diff --git a/src/chrome/content/rules/Nightcode.info.xml b/src/chrome/content/rules/Nightcode.info.xml
index b7b43b3f67fc..a27ef17c18ee 100644
--- a/src/chrome/content/rules/Nightcode.info.xml
+++ b/src/chrome/content/rules/Nightcode.info.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://nightcode.info/ => https://nightcode.info/: (28, 'Connection timed out after 10000 milliseconds')
+
 	www.nightcode.info doesn't exist.
 
 -->
-<ruleset name="Nightcode.info">
+<ruleset name="Nightcode.info" default_off='failed ruleset test'>
 
 	<target host="nightcode.info" />
 
diff --git a/src/chrome/content/rules/Nightweb.net.xml b/src/chrome/content/rules/Nightweb.net.xml
index aea56010e09a..52b3036ff038 100644
--- a/src/chrome/content/rules/Nightweb.net.xml
+++ b/src/chrome/content/rules/Nightweb.net.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://nightweb.net/ => https://nightweb.net/: (28, 'Connection timed out after 10001 milliseconds')
+
 	www.nightweb.net doesn't exist.
 
 -->
-<ruleset name="Nightweb.net">
+<ruleset name="Nightweb.net" default_off='failed ruleset test'>
 
 	<target host="nightweb.net" />
 
diff --git a/src/chrome/content/rules/Nitro_Cloud.com.xml b/src/chrome/content/rules/Nitro_Cloud.com.xml
index 9dac86f561a3..58c00ca84c70 100644
--- a/src/chrome/content/rules/Nitro_Cloud.com.xml
+++ b/src/chrome/content/rules/Nitro_Cloud.com.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://nitrocloud.com/ (200) => https://nitrocloud.com/ (526)
+
 	Other Nitro Software rulesets:
 
 		- Milodev.com.xml
 		- PDF_to_Word.com.xml
 
 -->
-<ruleset name="Nitro Cloud.com">
+<ruleset name="Nitro Cloud.com" default_off='failed ruleset test'>
 
 	<target host="nitrocloud.com" />
 	<target host="*.nitrocloud.com" />
diff --git a/src/chrome/content/rules/Nodejs.org.xml b/src/chrome/content/rules/Nodejs.org.xml
index ed182d40211d..6830c241a382 100644
--- a/src/chrome/content/rules/Nodejs.org.xml
+++ b/src/chrome/content/rules/Nodejs.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://packages.nodejs.org/ => https://packages.nodejs.org/: (51, "SSL: no alternative certificate subject name matches target host name 'packages.nodejs.org'")
+
 	For other Joyent coverage, see Joyent.xml.
 
 
@@ -28,7 +32,7 @@
 	* Secured by us
 
 -->
-<ruleset name="nodejs.org (partial)">
+<ruleset name="nodejs.org (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Norton.xml b/src/chrome/content/rules/Norton.xml
index a69e9b40a6f6..9e2b1f58a21d 100644
--- a/src/chrome/content/rules/Norton.xml
+++ b/src/chrome/content/rules/Norton.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://store.norton.com/ => https://store.norton.com/: Too many redirects while fetching 'https://store.norton.com/'
+Fetch error: http://static-safeweb.norton.com/ => https://static-safeweb.norton.com/: (51, "SSL: no alternative certificate subject name matches target host name 'static-safeweb.norton.com'")
+
 	For other Symantec coverage, see Symantec.xml.
 
 
@@ -22,7 +27,7 @@
 	* Mismatched
 
 -->
-<ruleset name="Norton (partial)">
+<ruleset name="Norton (partial)" default_off='failed ruleset test'>
 
 	<target host="mynortonaccount.com" />
 	<target host="www.mynortonaccount.com" />
diff --git a/src/chrome/content/rules/Number-Resource-Organization.xml b/src/chrome/content/rules/Number-Resource-Organization.xml
index cc118eeff7c5..21153b7a9230 100644
--- a/src/chrome/content/rules/Number-Resource-Organization.xml
+++ b/src/chrome/content/rules/Number-Resource-Organization.xml
@@ -1,4 +1,10 @@
-<ruleset name="Number Resource Organization" platform="mixedcontent">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://nro.net/ => https://nro.net/: (51, "SSL: no alternative certificate subject name matches target host name 'nro.net'")
+
+-->
+<ruleset name="Number Resource Organization" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="nro.net"/>
 	<target host="*.nro.net"/>
diff --git a/src/chrome/content/rules/OCCRP.org.xml b/src/chrome/content/rules/OCCRP.org.xml
index d09c5c5b64b4..88b579bcbdba 100644
--- a/src/chrome/content/rules/OCCRP.org.xml
+++ b/src/chrome/content/rules/OCCRP.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.vis.occrp.org/ => https://www.vis.occrp.org/: (6, 'Could not resolve host: www.vis.occrp.org')
+
 	For other Organized Crime and Corruption Reporting Project coverage, see Reporting_Project.net.xml.
 
 
@@ -14,7 +18,7 @@
 		- www.occrp.org
 
 -->
-<ruleset name="OCCRP.org">
+<ruleset name="OCCRP.org" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/OTR.im.xml b/src/chrome/content/rules/OTR.im.xml
index a8cb44e0aa0c..d45193c97b76 100644
--- a/src/chrome/content/rules/OTR.im.xml
+++ b/src/chrome/content/rules/OTR.im.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://coverage.otr.im/ => https://coverage.otr.im/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Fully covered hosts in *otr.im:
 
 		- (www.)?
@@ -11,7 +15,7 @@
 		- bugs.otr.im
 
 -->
-<ruleset name="OTR.im">
+<ruleset name="OTR.im" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Octoshape.xml b/src/chrome/content/rules/Octoshape.xml
index 6c1f73f400ec..2ec0f6422904 100644
--- a/src/chrome/content/rules/Octoshape.xml
+++ b/src/chrome/content/rules/Octoshape.xml
@@ -1,4 +1,11 @@
-<ruleset name="Octoshape" >
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ond.octoshape.com => https://ond.octoshape.com: (51, "SSL: no alternative certificate subject name matches target host name 'ond.octoshape.com'")
+Fetch error: http://streams.cdn.octoshape.net => https://streams.cdn.octoshape.net: (51, "SSL: no alternative certificate subject name matches target host name 'streams.cdn.octoshape.net'")
+
+-->
+<ruleset name="Octoshape"  default_off='failed ruleset test'>
 
 <target host="octoshape.com"/>
 <target host="*.octoshape.com"/>
diff --git a/src/chrome/content/rules/Oh-So-Cool.xml b/src/chrome/content/rules/Oh-So-Cool.xml
index 2b48d40fe691..b371d7a66a16 100644
--- a/src/chrome/content/rules/Oh-So-Cool.xml
+++ b/src/chrome/content/rules/Oh-So-Cool.xml
@@ -1,4 +1,10 @@
-<ruleset name="Oh So Cool !">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.ohsocool.org/ => https://www.ohsocool.org/: (51, "SSL: no alternative certificate subject name matches target host name 'www.ohsocool.org'")
+
+-->
+<ruleset name="Oh So Cool !" default_off='failed ruleset test'>
 
 	<target host="ohsocool.org" />
 	<target host="www.ohsocool.org" />
diff --git a/src/chrome/content/rules/Old_Pirate_Bay.org.xml b/src/chrome/content/rules/Old_Pirate_Bay.org.xml
index 624d0a56b223..24ee3b05aa02 100644
--- a/src/chrome/content/rules/Old_Pirate_Bay.org.xml
+++ b/src/chrome/content/rules/Old_Pirate_Bay.org.xml
@@ -1,4 +1,10 @@
-<ruleset name="Old Pirate Bay.org">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://oldpiratebay.org/ => https://oldpiratebay.org/: Too many redirects while fetching 'https://oldpiratebay.org/'
+
+-->
+<ruleset name="Old Pirate Bay.org" default_off='failed ruleset test'>
 
 	<target host="oldpiratebay.org" />
 	<target host="*.oldpiratebay.org" />
diff --git a/src/chrome/content/rules/Omniref.com.xml b/src/chrome/content/rules/Omniref.com.xml
index f02c1d399e14..822a6ffa5865 100644
--- a/src/chrome/content/rules/Omniref.com.xml
+++ b/src/chrome/content/rules/Omniref.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Omniref.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://omniref.com/ => https://omniref.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Omniref.com" default_off='failed ruleset test'>
 
 	<target host="omniref.com" />
 	<target host="www.omniref.com" />
diff --git a/src/chrome/content/rules/OnLive.com.xml b/src/chrome/content/rules/OnLive.com.xml
index 3abdccb5cabb..b1e252b7b9b5 100644
--- a/src/chrome/content/rules/OnLive.com.xml
+++ b/src/chrome/content/rules/OnLive.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://onlive.com/ => https://onlive.com/: (51, "SSL: no alternative certificate subject name matches target host name 'onlive.com'")
+
 	CDN buckets:
 
 		- dy96a7026js9l.cloudfront.net
@@ -34,7 +38,7 @@
 	* Secured by us
 
 -->
-<ruleset name="OnLive.com (partial)">
+<ruleset name="OnLive.com (partial)" default_off='failed ruleset test'>
 
 	<target host="onlive.com" />
 	<target host="*.onlive.com" />
diff --git a/src/chrome/content/rules/OneCloudSecurity.com.xml b/src/chrome/content/rules/OneCloudSecurity.com.xml
index cd5ba4adaa36..29e983c7cb00 100644
--- a/src/chrome/content/rules/OneCloudSecurity.com.xml
+++ b/src/chrome/content/rules/OneCloudSecurity.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="OneCloudSecurity.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://onecloudsecurity.com/ => https://onecloudsecurity.com/: Too many redirects while fetching 'https://onecloudsecurity.com/'
+
+-->
+<ruleset name="OneCloudSecurity.com" default_off='failed ruleset test'>
 
 	<target host="onecloudsecurity.com" />
 	<target host="*.onecloudsecurity.com" />
diff --git a/src/chrome/content/rules/One_Green_Planet.org.xml b/src/chrome/content/rules/One_Green_Planet.org.xml
index 717f872f40b8..35a65e23dbe1 100644
--- a/src/chrome/content/rules/One_Green_Planet.org.xml
+++ b/src/chrome/content/rules/One_Green_Planet.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://onegreenplanet.org/ => https://onegreenplanet.org/: Too many redirects while fetching 'https://onegreenplanet.org/'
+
 	CDN buckets:
 
 		- ogp.onegreenplanetll.netdna-cdn.com
@@ -12,7 +16,7 @@
 		- cdn	(403; mismatched, CN: *.netdna-ssl.com)
 
 -->
-<ruleset name="One Green Planet.org">
+<ruleset name="One Green Planet.org" default_off='failed ruleset test'>
 
 	<target host="onegreenplanet.org" />
 	<target host="*.onegreenplanet.org" />
diff --git a/src/chrome/content/rules/Ooyala.xml b/src/chrome/content/rules/Ooyala.xml
index b6194f87de15..9675fa04e3aa 100644
--- a/src/chrome/content/rules/Ooyala.xml
+++ b/src/chrome/content/rules/Ooyala.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://ak.c.ooyala.com/ (200) => https://s3.amazonaws.com/c.ooyala.com/ (403)
+
 	CDN buckets:
 
 		- s3.amazonaws.com/c.ooyala.com/
@@ -15,7 +19,7 @@
 			https://github.com/EFForg/https-everywhere/issues/1421 for example of breakage.
 
 -->
-<ruleset name="Ooyala (partial)" platform="mixedcontent">
+<ruleset name="Ooyala (partial)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="ak-c.ooyala.com" />
 	<target host="ak.c.ooyala.com" />
diff --git a/src/chrome/content/rules/OpenAFS.org.xml b/src/chrome/content/rules/OpenAFS.org.xml
index b267827c24a2..2feae22e6786 100644
--- a/src/chrome/content/rules/OpenAFS.org.xml
+++ b/src/chrome/content/rules/OpenAFS.org.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://docs.openafs.org/ => https://docs.openafs.org/: (51, "SSL: no alternative certificate subject name matches target host name 'docs.openafs.org'")
+Fetch error: http://worshop.openafs.org/ => https://worshop.openafs.org/: (6, 'Could not resolve host: worshop.openafs.org')
+
 	Nonfunctional subdomains:
 
 		- git *
@@ -15,7 +20,7 @@
 		- worshop
 
 -->
-<ruleset name="OpenAFS.org">
+<ruleset name="OpenAFS.org" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/OpenBSD.org.xml b/src/chrome/content/rules/OpenBSD.org.xml
index 5d9d6f000530..84db36796ad1 100644
--- a/src/chrome/content/rules/OpenBSD.org.xml
+++ b/src/chrome/content/rules/OpenBSD.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://https.openbsd.org/ => https://https.openbsd.org/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Nonfunctional hosts in *openbsd.org:
 
 		- (www.) *
@@ -7,7 +11,7 @@
 	* Refused
 
 -->
-<ruleset name="OpenBSD.org (partial)">
+<ruleset name="OpenBSD.org (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/OpenDaylight.xml b/src/chrome/content/rules/OpenDaylight.xml
index ef650f5bb20f..22649a954bdf 100644
--- a/src/chrome/content/rules/OpenDaylight.xml
+++ b/src/chrome/content/rules/OpenDaylight.xml
@@ -1,8 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.opendaylight.org/misc/menu-leaf.png => https://www.opendaylight.org/misc/menu-leaf.png: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.opendaylight.org/sites/all/themes/opendaylight/ixm/images/di_white.png => https://www.opendaylight.org/sites/all/themes/opendaylight/ixm/images/di_white.png: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://opendaylight.org/ => https://opendaylight.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	For other Linux Foundation coverage, see LinuxFoundation.xml.
 
 -->
-<ruleset name="OpenDaylight.org (partial)">
+<ruleset name="OpenDaylight.org (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/OpenHatch.org.xml b/src/chrome/content/rules/OpenHatch.org.xml
index 7398723801b7..3717e77cd6c4 100644
--- a/src/chrome/content/rules/OpenHatch.org.xml
+++ b/src/chrome/content/rules/OpenHatch.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://www.openhatch.org/ (200) => https://www.openhatch.org/ (500)
+
 	For problematic rules, see OpenHatch.org-problematic.xml.
 
 
@@ -27,7 +31,7 @@
 	* Secured by us
 
 -->
-<ruleset name="OpenHatch.org (partial)">
+<ruleset name="OpenHatch.org (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/OpenSVC.xml b/src/chrome/content/rules/OpenSVC.xml
index 9e0c04dbb4bd..4f03c620d133 100644
--- a/src/chrome/content/rules/OpenSVC.xml
+++ b/src/chrome/content/rules/OpenSVC.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://lists.opensvc.com/ => https://lists.opensvc.com/: (60, 'SSL certificate problem: self signed certificate')
+
 	Nonfunctional subdomains:
 
 		- git	(shows collector's data)
@@ -13,7 +17,7 @@
 		- lists
 
 -->
-<ruleset name="OpenSVC.com (partial)">
+<ruleset name="OpenSVC.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/OpenX.org.xml b/src/chrome/content/rules/OpenX.org.xml
index fd874052cd1f..141352141b9c 100644
--- a/src/chrome/content/rules/OpenX.org.xml
+++ b/src/chrome/content/rules/OpenX.org.xml
@@ -1,4 +1,11 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://adserver.openx.org/ => https://adserver.openx.org/: (51, "SSL: no alternative certificate subject name matches target host name 'adserver.openx.org'")
+Fetch error: http://d1.openx.org/ => https://d1.openx.org/: (6, 'Could not resolve host: d1.openx.org')
+Fetch error: http://developer.openx.org/ => https://developer.openx.org/: (6, 'Could not resolve host: developer.openx.org')
+Fetch error: http://svn.openx.org/ => https://svn.openx.org/: (6, 'Could not resolve host: svn.openx.org')
+
 	For other OpenX coverage, see OpenX.xml.
 
 
@@ -38,7 +45,7 @@
 		- svn
 
 -->
-<ruleset name="OpenX.org (partial)">
+<ruleset name="OpenX.org (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/OpenX.xml b/src/chrome/content/rules/OpenX.xml
index fa1cd6e446af..2d7c6f88a734 100644
--- a/src/chrome/content/rules/OpenX.xml
+++ b/src/chrome/content/rules/OpenX.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ac.openx.com/ => https://ac.openx.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://d.tradex.openx.com/ => https://d.tradex.openx.com/: (6, 'Could not resolve host: d.tradex.openx.com')
+Fetch error: http://uk-ac.openx.com/ => https://uk-ac.openx.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	Other OpenX rulesets:
 
 		- Advertisers-OpenX.com.xml
@@ -71,7 +77,7 @@
 	mark this ruleset as mixedcontent.
 
 -->
-<ruleset name="OpenX.com (partial)">
+<ruleset name="OpenX.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Open_Farm_Game.xml b/src/chrome/content/rules/Open_Farm_Game.xml
index b75d23611b39..cee7d8cc2f0d 100644
--- a/src/chrome/content/rules/Open_Farm_Game.xml
+++ b/src/chrome/content/rules/Open_Farm_Game.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://openfarmgame.com/ => https://openfarmgame.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.openfarmgame.com/ => https://openfarmgame.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	For other E14N coverage, see E14N.xml.
 
 
@@ -12,7 +17,7 @@
 		- openfarmgame.com
 
 -->
-<ruleset name="Open Farm Game.com">
+<ruleset name="Open Farm Game.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Open_Mesh.xml b/src/chrome/content/rules/Open_Mesh.xml
index b1a1616e4fd4..5735f9bead38 100644
--- a/src/chrome/content/rules/Open_Mesh.xml
+++ b/src/chrome/content/rules/Open_Mesh.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.open-mesh.org/ => https://www.open-mesh.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://open-mesh.org/ => https://www.open-mesh.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Cert only matches *.open-mesh.org
 
 
@@ -7,7 +12,7 @@
 		- www.open-mesh.org
 
 -->
-<ruleset name="Open-Mesh.org" platform="cacert">
+<ruleset name="Open-Mesh.org" platform="cacert" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Open_Virtualization_Alliance.org.xml b/src/chrome/content/rules/Open_Virtualization_Alliance.org.xml
index fba2e44bbc27..7c9cdc3ca461 100644
--- a/src/chrome/content/rules/Open_Virtualization_Alliance.org.xml
+++ b/src/chrome/content/rules/Open_Virtualization_Alliance.org.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://openvirtualizationalliance.org/ => https://openvirtualizationalliance.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.openvirtualizationalliance.org/ => https://www.openvirtualizationalliance.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	For other Linux Foundation coverage, see LinuxFoundation.xml.
 
 -->
-<ruleset name="Open Virtualization Alliance.org">
+<ruleset name="Open Virtualization Alliance.org" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Openfiler.xml b/src/chrome/content/rules/Openfiler.xml
index 7944ec382392..53f70dc972e8 100644
--- a/src/chrome/content/rules/Openfiler.xml
+++ b/src/chrome/content/rules/Openfiler.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://forums2.openfiler.com/ => https://forums2.openfiler.com/: (6, 'Could not resolve host: forums2.openfiler.com')
+Fetch error: http://store.openfiler.com/ => https://store.openfiler.com/: (7, 'Failed to connect to store.openfiler.com port 443: Connection refused')
+
 	Fully covered hosts in *openfiler.com:
 
 		- (www.)?
@@ -7,7 +12,7 @@
 		- store
 
 -->
-<ruleset name="openfiler.com">
+<ruleset name="openfiler.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Openprinting.xml b/src/chrome/content/rules/Openprinting.xml
index 3dfb29be92d4..c3bfc975997f 100644
--- a/src/chrome/content/rules/Openprinting.xml
+++ b/src/chrome/content/rules/Openprinting.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.openprinting.org/ => https://www.openprinting.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://openprinting.org/ => https://openprinting.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	For other Linux Foundation coverage, see LinuxFoundation.xml.
 
 
@@ -21,7 +26,7 @@
 		- Images on forums from $self
 
 -->
-<ruleset name="OpenPrinting.org (partial)">
+<ruleset name="OpenPrinting.org (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Openswan.xml b/src/chrome/content/rules/Openswan.xml
index b35a3b51a34e..067111e1657c 100644
--- a/src/chrome/content/rules/Openswan.xml
+++ b/src/chrome/content/rules/Openswan.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://downloads.openswan.org/ => https://downloads.openswan.org/: (6, 'Could not resolve host: downloads.openswan.org')
+
 	^: shows xelerance.com; mismatched, CN: *.xelerance.com
 
 
@@ -9,7 +13,7 @@
 		- lists
 
 -->
-<ruleset name="Openswan.org">
+<ruleset name="Openswan.org" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Operating_Systems.io.xml b/src/chrome/content/rules/Operating_Systems.io.xml
index 4c175afa5118..b4b683bc0a16 100644
--- a/src/chrome/content/rules/Operating_Systems.io.xml
+++ b/src/chrome/content/rules/Operating_Systems.io.xml
@@ -1,4 +1,10 @@
-<ruleset name="Operating Systems.io">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://operatingsystems.io/ => https://operatingsystems.io/: (7, 'Failed to connect to operatingsystems.io port 443: Connection refused')
+
+-->
+<ruleset name="Operating Systems.io" default_off='failed ruleset test'>
 
 	<target host="operatingsystems.io" />
 	<target host="*.operatingsystems.io" />
diff --git a/src/chrome/content/rules/Optical-Society-of-America.xml b/src/chrome/content/rules/Optical-Society-of-America.xml
index cd9f5fa5fd59..33e361c0fdff 100644
--- a/src/chrome/content/rules/Optical-Society-of-America.xml
+++ b/src/chrome/content/rules/Optical-Society-of-America.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://opticsinfobase.org/ => https://www.opticsinfobase.org/: (28, 'Resolving timed out after 10518 milliseconds')
+Fetch error: http://www.opticsinfobase.org/ => https://www.opticsinfobase.org/: (28, 'Resolving timed out after 10520 milliseconds')
+
 	!functional:
 		- (www.)osa-opn.org	(www: interrupted; doesn't translate directly to osa.org)
 -->
-<ruleset name="Optical Society of America (partial)">
+<ruleset name="Optical Society of America (partial)" default_off='failed ruleset test'>
 
 	<target host="opticsinfobase.org"/>
 	<target host="www.opticsinfobase.org"/>
diff --git a/src/chrome/content/rules/Oracle.xml b/src/chrome/content/rules/Oracle.xml
index 4ffb90c0b8ee..387c3f30b593 100644
--- a/src/chrome/content/rules/Oracle.xml
+++ b/src/chrome/content/rules/Oracle.xml
@@ -1,4 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://competencycentre.oracle.com/ => https://competencycentre.oracle.com/: (6, 'Could not resolve host: competencycentre.oracle.com')
+Fetch error: http://prc-fusioncrm.oracle.com/ => https://prc-fusioncrm.oracle.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://prj-fusioncrm.oracle.com/ => https://prj-fusioncrm.oracle.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://itsp.oracle.com/ => https://itsp.oracle.com/: (6, 'Could not resolve host: itsp.oracle.com')
+Fetch error: http://itsp-stage.oracle.com/ => https://itsp-stage.oracle.com/: (6, 'Could not resolve host: itsp-stage.oracle.com')
+Fetch error: http://otn.oracle.com/ => https://otn.oracle.com/: (51, "SSL: no alternative certificate subject name matches target host name 'otn.oracle.com'")
+Fetch error: http://partners.oracle.com/ => https://partners.oracle.com/: (51, "SSL: no alternative certificate subject name matches target host name 'partners.oracle.com'")
+Fetch error: http://public-yum.oracle.com/ => https://public-yum.oracle.com/: (51, "SSL: no alternative certificate subject name matches target host name 'public-yum.oracle.com'")
+
 	See Oracle-mismatches.xml for problematic rules.
 
 
@@ -271,7 +282,7 @@
 	² Unsecurable, doesn't trip MCB
 
 -->
-<ruleset name="Oracle (partial)">
+<ruleset name="Oracle (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 					-->
diff --git a/src/chrome/content/rules/Orbital_Sciences.xml b/src/chrome/content/rules/Orbital_Sciences.xml
index fd27022223e4..1d549ce2b45e 100644
--- a/src/chrome/content/rules/Orbital_Sciences.xml
+++ b/src/chrome/content/rules/Orbital_Sciences.xml
@@ -1,4 +1,11 @@
-<ruleset name="Orbital Sciences">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://orbital.com/ => https://orbital.com/: (51, "SSL: no alternative certificate subject name matches target host name 'orbital.com'")
+Fetch error: http://www.orbital.com/ => https://www.orbital.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.orbital.com'")
+
+-->
+<ruleset name="Orbital Sciences" default_off='failed ruleset test'>
 
 	<target host="orbital.com" />
 	<target host="www.orbital.com" />
diff --git a/src/chrome/content/rules/Orez_Praw.com.xml b/src/chrome/content/rules/Orez_Praw.com.xml
index 327b9a49f7f9..6f3da3796ea1 100644
--- a/src/chrome/content/rules/Orez_Praw.com.xml
+++ b/src/chrome/content/rules/Orez_Praw.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="Orez Praw.com" platform="cacert">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://orezpraw.com/ => https://orezpraw.com/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://www.orezpraw.com/ => https://www.orezpraw.com/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
+-->
+<ruleset name="Orez Praw.com" platform="cacert" default_off='failed ruleset test'>
 	<target host="orezpraw.com" />
 	<target host="www.orezpraw.com" />
 
diff --git a/src/chrome/content/rules/OurCommonPlace.xml b/src/chrome/content/rules/OurCommonPlace.xml
index 94063f1a01cb..0a642c5ed517 100644
--- a/src/chrome/content/rules/OurCommonPlace.xml
+++ b/src/chrome/content/rules/OurCommonPlace.xml
@@ -1,4 +1,10 @@
-<ruleset name="OurCommonPlace">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ourcommonplace.com/ => https://ourcommonplace.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
+-->
+<ruleset name="OurCommonPlace" default_off='failed ruleset test'>
 
 	<target host="ourcommonplace.com" />
 	<target host="*.ourcommonplace.com" />
diff --git a/src/chrome/content/rules/Owner.io.xml b/src/chrome/content/rules/Owner.io.xml
index 4833a81f74d5..5281cb60e819 100644
--- a/src/chrome/content/rules/Owner.io.xml
+++ b/src/chrome/content/rules/Owner.io.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://www.owner.io/ (200) => https://www.owner.io/ (400)
+
 	Insecure cookies are set for these hosts:
 
 		- owner.io
 		- www.owner.io
 
 -->
-<ruleset name="Owner.io">
+<ruleset name="Owner.io" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/PDF.yt.xml b/src/chrome/content/rules/PDF.yt.xml
index 6dfafc507669..727725d4bf6b 100644
--- a/src/chrome/content/rules/PDF.yt.xml
+++ b/src/chrome/content/rules/PDF.yt.xml
@@ -1,4 +1,10 @@
-<ruleset name="PDF.yt">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.pdf.yt/ => https://www.pdf.yt/: (28, 'Connection timed out after 10000 milliseconds')
+
+-->
+<ruleset name="PDF.yt" default_off='failed ruleset test'>
 
 	<target host="pdf.yt" />
 	<target host="www.pdf.yt" />
diff --git a/src/chrome/content/rules/PNAS_First_Look.xml b/src/chrome/content/rules/PNAS_First_Look.xml
index 6d91a24d578d..296a3e14f8dc 100644
--- a/src/chrome/content/rules/PNAS_First_Look.xml
+++ b/src/chrome/content/rules/PNAS_First_Look.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.pnasfirstlook.org/ => http://www.pnasfirstlook.org/: (28, 'Resolving timed out after 10519 milliseconds')
+
 	CN: *.bluehost.com
 
 -->
-<ruleset name="PNAS First Look (partial)">
+<ruleset name="PNAS First Look (partial)" default_off='failed ruleset test'>
 
 	<target host="firstlook.pnas.org" />
 	<target host="pnasfirstlook.org" />
diff --git a/src/chrome/content/rules/PRQ.se.xml b/src/chrome/content/rules/PRQ.se.xml
index e20e7f76e6d2..c1682a6f4d73 100644
--- a/src/chrome/content/rules/PRQ.se.xml
+++ b/src/chrome/content/rules/PRQ.se.xml
@@ -1,4 +1,11 @@
-<ruleset name="prq.se">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://webmail.prq.se/ => https://webmail.prq.se/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://kundcenter.prq.se/ => https://kundcenter.prq.se/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="prq.se" default_off='failed ruleset test'>
 	<target host="webmail.prq.se" />
 	<target host="kundcenter.prq.se" />
 	<rule from="^http://webmail\.prq\.se/" to="https://webmail.prq.se/"/>
diff --git a/src/chrome/content/rules/Packet_Storm_Security.com.xml b/src/chrome/content/rules/Packet_Storm_Security.com.xml
index 6f81418e6b30..50a681aafe18 100644
--- a/src/chrome/content/rules/Packet_Storm_Security.com.xml
+++ b/src/chrome/content/rules/Packet_Storm_Security.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://packetstatic.com/ => http://packetstatic.com/: (51, "SSL: no alternative certificate subject name matches target host name 'packetstormsecurity.org'")
+Fetch error: http://www.packetstatic.com/ => http://www.packetstatic.com/: (51, "SSL: no alternative certificate subject name matches target host name 'packetstormsecurity.org'")
+
 	Problematic domains:
 
 		- packetstatic.com	(mismatched, CN: packetstormsecurity.com)
@@ -7,7 +12,7 @@
 	Some paths redirect to http.
 
 -->
-<ruleset name="Packet Storm Security.com (partial)">
+<ruleset name="Packet Storm Security.com (partial)" default_off='failed ruleset test'>
 
 	<target host="packetstatic.com" />
 	<target host="www.packetstatic.com" />
diff --git a/src/chrome/content/rules/Palm.com.xml b/src/chrome/content/rules/Palm.com.xml
index 9292d10dd446..c869d40728b6 100644
--- a/src/chrome/content/rules/Palm.com.xml
+++ b/src/chrome/content/rules/Palm.com.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://developer.palm.com/ => https://developer.palm.com/: (28, 'Connection timed out after 10000 milliseconds')
+
 	For other Hewlett Packard coverage, see Hewlett-Packard.xml.
 
 -->
-<ruleset name="Palm.com (partial)">
+<ruleset name="Palm.com (partial)" default_off='failed ruleset test'>
 
 	<target host="developer.palm.com" />
 
diff --git a/src/chrome/content/rules/Pan-Islamic_Malaysian_Party.xml b/src/chrome/content/rules/Pan-Islamic_Malaysian_Party.xml
index db281d750178..4ad99302ca62 100644
--- a/src/chrome/content/rules/Pan-Islamic_Malaysian_Party.xml
+++ b/src/chrome/content/rules/Pan-Islamic_Malaysian_Party.xml
@@ -1,4 +1,10 @@
-<ruleset name="Pan-Islamic Malaysian Party">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://pas.org.my/ => https://pas.org.my/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Pan-Islamic Malaysian Party" default_off='failed ruleset test'>
 
 	<target host="pas.org.my" />
 	<target host="*.pas.org.my" />
diff --git a/src/chrome/content/rules/Parameter_Security.com.xml b/src/chrome/content/rules/Parameter_Security.com.xml
index 633d08ed73f2..5d8f631e8b03 100644
--- a/src/chrome/content/rules/Parameter_Security.com.xml
+++ b/src/chrome/content/rules/Parameter_Security.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://parametersecurity.com/ (200) => https://parametersecurity.com/ (526)
+
 	Other Parameter Security rulesets:
 
 		- ShowMeCon.com.xml
@@ -11,7 +15,7 @@
 	* Mismatched, CN: www.showmecon.com
 
 -->
-<ruleset name="Parameter Security.com">
+<ruleset name="Parameter Security.com" default_off='failed ruleset test'>
 
 	<target host="parametersecurity.com" />
 	<target host="*.parametersecurity.com" />
diff --git a/src/chrome/content/rules/Pashm.com.xml b/src/chrome/content/rules/Pashm.com.xml
index 4f09dbb45f1d..e936e54f4165 100644
--- a/src/chrome/content/rules/Pashm.com.xml
+++ b/src/chrome/content/rules/Pashm.com.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.pashm.com/ => https://www.pashm.com/: Too many redirects while fetching 'https://www.pashm.com/'
+
 	Insecure cookies are set for these hosts:
 
 		- pashm.com
 		- www.pashm.com
 
 -->
-<ruleset name="Pashm.com">
+<ruleset name="Pashm.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Passport.net.xml b/src/chrome/content/rules/Passport.net.xml
index 126e2c6af715..fcb3867b3b09 100644
--- a/src/chrome/content/rules/Passport.net.xml
+++ b/src/chrome/content/rules/Passport.net.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://accountservices.passport.net/ => https://accountservices.passport.net/: (6, 'Could not resolve host: accountservices.passport.net')
+
 	For other Microsoft coverage, see Microsoft.xml.
 
 
@@ -7,7 +11,7 @@
 		- accountservices
 
 -->
-<ruleset name="Passport.net">
+<ruleset name="Passport.net" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Pay_Dirt_Gold.com.xml b/src/chrome/content/rules/Pay_Dirt_Gold.com.xml
index 4ed43f25e184..9c58c60f2af7 100644
--- a/src/chrome/content/rules/Pay_Dirt_Gold.com.xml
+++ b/src/chrome/content/rules/Pay_Dirt_Gold.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Pay Dirt Gold.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://paydirtgold.com/ => https://paydirtgold.com/: (51, "SSL: no alternative certificate subject name matches target host name 'paydirtgold.com'")
+
+-->
+<ruleset name="Pay Dirt Gold.com" default_off='failed ruleset test'>
 
 	<target host="paydirtgold.com" />
 	<target host="*.paydirtgold.com" />
diff --git a/src/chrome/content/rules/Paymo.xml b/src/chrome/content/rules/Paymo.xml
index 2a7e9c83f8bd..76572c3b571d 100644
--- a/src/chrome/content/rules/Paymo.xml
+++ b/src/chrome/content/rules/Paymo.xml
@@ -1,4 +1,10 @@
-<ruleset name="Paymo">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://paymo.biz/ => https://paymo.biz/: (7, 'Failed to connect to paymo.biz port 443: Connection refused')
+
+-->
+<ruleset name="Paymo" default_off='failed ruleset test'>
 
 	<target host="paymo.biz" />
 	<target host="*.paymo.biz" />
diff --git a/src/chrome/content/rules/Pbsrc.com.xml b/src/chrome/content/rules/Pbsrc.com.xml
index 6880986a08a7..7bb75af901df 100644
--- a/src/chrome/content/rules/Pbsrc.com.xml
+++ b/src/chrome/content/rules/Pbsrc.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://pic2.pbsrc.com/ (200) => https://opic2.pbsrc.com/ (403)
+Non-2xx HTTP code: http://static2.pbsrc.com/ (200) => https://ostatic2.pbsrc.com/ (403)
+
 	For other Photobucket coverage, see Photobucket.xml.
 
 
@@ -50,7 +55,7 @@
 		- static2		(→ ostatic2.pbsrc.com)
 
 -->
-<ruleset name="Pbsrc.com (partial)">
+<ruleset name="Pbsrc.com (partial)" default_off='failed ruleset test'>
 
 	<target host="pbsrc.com" />
 	<target host="*.pbsrc.com" />
diff --git a/src/chrome/content/rules/Pcp.ch.xml b/src/chrome/content/rules/Pcp.ch.xml
index 3375d7bf3c3b..a796e41caf32 100644
--- a/src/chrome/content/rules/Pcp.ch.xml
+++ b/src/chrome/content/rules/Pcp.ch.xml
@@ -1,4 +1,13 @@
-<ruleset name="PCP">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://comstern.at/ => https://comstern.at/: (51, "SSL: no alternative certificate subject name matches target host name 'comstern.at'")
+Fetch error: http://comstern.de/ => https://comstern.de/: (51, "SSL: no alternative certificate subject name matches target host name 'comstern.de'")
+Fetch error: http://pc-ostschweiz.ch/ => https://pc-ostschweiz.ch/: (51, "SSL: no alternative certificate subject name matches target host name 'pc-ostschweiz.ch'")
+Fetch error: http://pcp.com/ => https://pcp.com/: (51, "SSL: no alternative certificate subject name matches target host name 'pcp.com'")
+
+-->
+<ruleset name="PCP" default_off='failed ruleset test'>
 	<target host="comstern.at"/>
 	<target host="www.comstern.at"/>
 	<target host="comstern.de"/>
diff --git a/src/chrome/content/rules/PeopleFluent.com.xml b/src/chrome/content/rules/PeopleFluent.com.xml
index dd96da221601..0eaeaa81edb1 100644
--- a/src/chrome/content/rules/PeopleFluent.com.xml
+++ b/src/chrome/content/rules/PeopleFluent.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://peoplefluent.com/ => https://www.peoplefluent.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.peoplefluent.com'")
+
 	Other PeopleFluent rulesets:
 
 		- Peopleclick.com.xml
@@ -27,7 +31,7 @@
 		- www.idp.peoplefluent.com
 
 -->
-<ruleset name="PeopleFluent.com (partial)">
+<ruleset name="PeopleFluent.com (partial)" default_off='failed ruleset test'>
 
 	<target host="peoplefluent.com" />
 	<target host="*.peoplefluent.com" />
diff --git a/src/chrome/content/rules/Peopleclick.com.xml b/src/chrome/content/rules/Peopleclick.com.xml
index fe9b722cce13..e24f200f0b3d 100644
--- a/src/chrome/content/rules/Peopleclick.com.xml
+++ b/src/chrome/content/rules/Peopleclick.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://peopleclick.com/ => https://www.peoplefluent.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.peoplefluent.com'")
+
 	For rules causing false/broken MCB, see Peopleclick.com.xml.
 
 	For other PeopleFluent coverage, see PeopleFluent.com.xml.
@@ -28,7 +32,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Peopleclick.com (partial)">
+<ruleset name="Peopleclick.com (partial)" default_off='failed ruleset test'>
 
 	<target host="peopleclick.com" />
 	<target host="*.peopleclick.com" />
diff --git a/src/chrome/content/rules/Pepperfish.xml b/src/chrome/content/rules/Pepperfish.xml
index 01036b820db5..2fa30065afd8 100644
--- a/src/chrome/content/rules/Pepperfish.xml
+++ b/src/chrome/content/rules/Pepperfish.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://secure.pepperfish.net/ => https://secure.pepperfish.net/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Nonfunctional subdomains:
 
 		- (www.)	(400; mismatched, CN: secure.pepperfish.net)
 
 -->
-<ruleset name="Pepperfish (partial)">
+<ruleset name="Pepperfish (partial)" default_off='failed ruleset test'>
 
 	<target host="secure.pepperfish.net" />
 
diff --git a/src/chrome/content/rules/Perry_Ellis.com.xml b/src/chrome/content/rules/Perry_Ellis.com.xml
index 074a3a9b283f..f60ef142dc09 100644
--- a/src/chrome/content/rules/Perry_Ellis.com.xml
+++ b/src/chrome/content/rules/Perry_Ellis.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.perryellis.com/ => https://www.perryellis.com/: Too many redirects while fetching 'https://www.perryellis.com/'
+Fetch error: http://perryellis.com/ => https://www.perryellis.com/: Too many redirects while fetching 'https://www.perryellis.com/'
+
 	Problematic hosts in *perryellis.com::
 
 		- ^ *
@@ -31,7 +36,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Perry Ellis.com (partial)">
+<ruleset name="Perry Ellis.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Petrogen.com.xml b/src/chrome/content/rules/Petrogen.com.xml
index 139ff45e7c31..9046ad267adf 100644
--- a/src/chrome/content/rules/Petrogen.com.xml
+++ b/src/chrome/content/rules/Petrogen.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="Petrogen.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://petrogen.com/ => https://www.petrogen.com/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+Fetch error: http://www.petrogen.com/ => https://www.petrogen.com/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+
+-->
+<ruleset name="Petrogen.com" default_off='failed ruleset test'>
 
 	<target host="petrogen.com" />
 	<target host="www.petrogen.com" />
diff --git a/src/chrome/content/rules/Phillips_Academy_Andover.xml b/src/chrome/content/rules/Phillips_Academy_Andover.xml
index accbfe67b989..32814e89745c 100644
--- a/src/chrome/content/rules/Phillips_Academy_Andover.xml
+++ b/src/chrome/content/rules/Phillips_Academy_Andover.xml
@@ -1,8 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://printon.andover.edu/ => https://printon.andover.edu/: (6, 'Could not resolve host: printon.andover.edu')
+Fetch error: http://mail.andover.edu/ => https://mail.andover.edu/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://sslvpn.andover.edu/ => https://sslvpn.andover.edu/: (28, 'Connection timed out after 10001 milliseconds')
+
 	Phillips Academy Andover
 
 -->
-<ruleset name="Phillips Academy">
+<ruleset name="Phillips Academy" default_off='failed ruleset test'>
 
 	<target host="www.andover.edu" />
 	<target host="panet.andover.edu" />
diff --git a/src/chrome/content/rules/PicoStocks.com.xml b/src/chrome/content/rules/PicoStocks.com.xml
index 271d141a2942..fba87b2d6eaa 100644
--- a/src/chrome/content/rules/PicoStocks.com.xml
+++ b/src/chrome/content/rules/PicoStocks.com.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://picostocks.com/ => https://picostocks.com/: (60, 'SSL certificate problem: self signed certificate')
+Fetch error: http://www.picostocks.com/ => https://picostocks.com/: (60, 'SSL certificate problem: self signed certificate')
+
 	www: mismatched, CN: mail.bioinfo.pl
 
 -->
-<ruleset name="PicoStocks.com">
+<ruleset name="PicoStocks.com" default_off='failed ruleset test'>
 
 	<target host="picostocks.com" />
 	<target host="www.picostocks.com" />
diff --git a/src/chrome/content/rules/PirateParty.xml b/src/chrome/content/rules/PirateParty.xml
index 26f4d11f6dd7..dd06cb0b96cc 100644
--- a/src/chrome/content/rules/PirateParty.xml
+++ b/src/chrome/content/rules/PirateParty.xml
@@ -1,4 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://forum.piratenpartei.de/ => https://forum.piratenpartei.de/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://live.piratenpartei.de/ => https://live.piratenpartei.de/: (7, 'Failed to connect to live.piratenpartei.de port 443: Connection refused')
+Fetch error: http://planet.piratenpartei.de/ => https://planet.piratenpartei.de/: (52, 'Empty reply from server')
+Fetch error: http://piratepad.ca/ => https://piratepad.ca/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.piratepad.ca/ => https://www.piratepad.ca/: (60, 'SSL certificate problem: certificate has expired')
+
 	See PirateParty-mismatches for problematic rules.
 
 	Nonfunctional domains:
@@ -16,7 +24,7 @@
 		- PPS.xml
 
 -->
-<ruleset name="Pirate Party">
+<ruleset name="Pirate Party" default_off='failed ruleset test'>
 
 	<target host="junge-piraten.de" />
 		<target host="www.junge-piraten.de" />
diff --git a/src/chrome/content/rules/PlanetRomeo.xml b/src/chrome/content/rules/PlanetRomeo.xml
index 9d9a7a53351b..bd45752a9a24 100644
--- a/src/chrome/content/rules/PlanetRomeo.xml
+++ b/src/chrome/content/rules/PlanetRomeo.xml
@@ -1,4 +1,11 @@
-<ruleset name="PlanetRomeo">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.gayromeo.com/ => https://www.gayromeo.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.gayromeo.com'")
+Fetch error: http://gayromeo.com/ => https://www.gayromeo.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.gayromeo.com'")
+
+-->
+<ruleset name="PlanetRomeo" default_off='failed ruleset test'>
   <target host="www.planetromeo.com" />
   <target host="planetromeo.com" />
   <target host="www.gayromeo.com" />
diff --git a/src/chrome/content/rules/PlantSolution.de-falsemixed.xml b/src/chrome/content/rules/PlantSolution.de-falsemixed.xml
index 13a7f942e88e..37bd1c7ee90f 100644
--- a/src/chrome/content/rules/PlantSolution.de-falsemixed.xml
+++ b/src/chrome/content/rules/PlantSolution.de-falsemixed.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://plantsolution.de/ => https://www.plantsolution.de/: (35, 'error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error')
+
 	For rules not causing false/broken MCB, see PlantSolution.de.xml.
 
 -->
-<ruleset name="PlantSolution.de (false MCB)" platform="mixedcontent">
+<ruleset name="PlantSolution.de (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="plantsolution.de" />
 	<target host="*.plantsolution.de" />
diff --git a/src/chrome/content/rules/PlantSolution.de.xml b/src/chrome/content/rules/PlantSolution.de.xml
index 4af77f5160a8..39fd55602852 100644
--- a/src/chrome/content/rules/PlantSolution.de.xml
+++ b/src/chrome/content/rules/PlantSolution.de.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://plantsolution.de/ => http://plantsolution.de/: (35, 'error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error')
+Fetch error: http://www.plantsolution.de/ => http://www.plantsolution.de/: (35, 'error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error')
+
 	For rules causing false/broken MCB, see PlantSolution.de-falsemixed.xml.
 
 
@@ -21,7 +26,7 @@
 	* Secured by us
 
 -->
-<ruleset name="PlantSolution.de (partial)">
+<ruleset name="PlantSolution.de (partial)" default_off='failed ruleset test'>
 
 	<target host="plantsolution.de" />
 	<target host="www.plantsolution.de" />
diff --git a/src/chrome/content/rules/Plantappstore.com-falsemixed.xml b/src/chrome/content/rules/Plantappstore.com-falsemixed.xml
index 6a76224a7210..0cd049df1607 100644
--- a/src/chrome/content/rules/Plantappstore.com-falsemixed.xml
+++ b/src/chrome/content/rules/Plantappstore.com-falsemixed.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://plantappstore.com/ => https://plantappstore.com/: (51, "SSL: no alternative certificate subject name matches target host name 'plantappstore.com'")
+
 	For rules not causing false/broken MCB, see Plantappstore.com.xml.
 
 -->
-<ruleset name="plantappstore.com (false MCB)" platform="mixedcontent">
+<ruleset name="plantappstore.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="plantappstore.com" />
 	<target host="*.plantappstore.com" />
diff --git a/src/chrome/content/rules/Pogamay.ru.xml b/src/chrome/content/rules/Pogamay.ru.xml
index 98a244a76cb5..3f9360194286 100644
--- a/src/chrome/content/rules/Pogamay.ru.xml
+++ b/src/chrome/content/rules/Pogamay.ru.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cabinet.pogamay.ru/ => https://cabinet.pogamay.ru/: (60, 'SSL certificate problem: certificate has expired')
+
 	(www.)?: Shows cabinet
 
 
@@ -7,7 +11,7 @@
 		- www.cabinet.pogamay.ru
 
 -->
-<ruleset name="Pogamay.ru (partial)">
+<ruleset name="Pogamay.ru (partial)" default_off='failed ruleset test'>
 
 	<target host="cabinet.pogamay.ru" />
 
diff --git a/src/chrome/content/rules/Post.ch.xml b/src/chrome/content/rules/Post.ch.xml
index ccecf8bba727..ef366a52f5a5 100644
--- a/src/chrome/content/rules/Post.ch.xml
+++ b/src/chrome/content/rules/Post.ch.xml
@@ -1,4 +1,11 @@
-<ruleset name="Post.ch">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://swisspost-gls.ch/ => https://www.swisspost-gls.ch/: (7, 'Failed to connect to www.swisspost-gls.ch port 443: Connection refused')
+Fetch error: http://www.swisspost-gls.ch/ => https://www.swisspost-gls.ch/: (7, 'Failed to connect to www.swisspost-gls.ch port 443: Connection refused')
+
+-->
+<ruleset name="Post.ch" default_off='failed ruleset test'>
     <target host="post.ch" />
     <target host="www.post.ch" />
     <target host="posta.ch" />
diff --git a/src/chrome/content/rules/Price.ua.xml b/src/chrome/content/rules/Price.ua.xml
index 99118f74244c..df153ab3f151 100644
--- a/src/chrome/content/rules/Price.ua.xml
+++ b/src/chrome/content/rules/Price.ua.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ssl.price.ua/ => https://ssl.price.ua/: (52, 'Empty reply from server')
+
 	For problematic rules, see Price.ua-problematic.xml.
 
 
@@ -26,7 +30,7 @@
 	² Unsecurable <= refused
 
 -->
-<ruleset name="Price.ua (partial)">
+<ruleset name="Price.ua (partial)" default_off='failed ruleset test'>
 
 	<target host="ssl.price.ua" />
 
diff --git a/src/chrome/content/rules/PriceGrabber.xml b/src/chrome/content/rules/PriceGrabber.xml
index d51e9600cbb6..10b4eb59e2ee 100644
--- a/src/chrome/content/rules/PriceGrabber.xml
+++ b/src/chrome/content/rules/PriceGrabber.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://i.pgcdn.com/ => https://images.pricegrabber.com/: (28, 'Connection timed out after 10001 milliseconds')
+
 	Clients are handled in PriceGrabber-clients.xml.
 
 
@@ -17,7 +21,7 @@
 	* Akamai
 
 -->
-<ruleset name="PriceGrabber" platform="mixedcontent">
+<ruleset name="PriceGrabber" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="i.pgcdn.com" />
 	<target host="pricegrabber.com" />
diff --git a/src/chrome/content/rules/Printink.si.xml b/src/chrome/content/rules/Printink.si.xml
index 7f9e601e2894..dbda9c700a63 100644
--- a/src/chrome/content/rules/Printink.si.xml
+++ b/src/chrome/content/rules/Printink.si.xml
@@ -1,4 +1,10 @@
-<ruleset name="printink.si">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://printink.si/ => https://printink.si/: Too many redirects while fetching 'https://printink.si/'
+
+-->
+<ruleset name="printink.si" default_off='failed ruleset test'>
 
 	<target host="printink.si" />
 	<target host="*.printink.si" />
diff --git a/src/chrome/content/rules/PrivatePaste.xml b/src/chrome/content/rules/PrivatePaste.xml
index d7cd311475c3..0cc816f1e9fe 100644
--- a/src/chrome/content/rules/PrivatePaste.xml
+++ b/src/chrome/content/rules/PrivatePaste.xml
@@ -1,4 +1,10 @@
-<ruleset name="PrivatePaste">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://privatepaste.com/ => https://privatepaste.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="PrivatePaste" default_off='failed ruleset test'>
   <target host="privatepaste.com" />
   <target host="*.privatepaste.com" />
 
diff --git a/src/chrome/content/rules/Pro_Ultra_Trim.xml b/src/chrome/content/rules/Pro_Ultra_Trim.xml
index 230ec48d5840..875989686e42 100644
--- a/src/chrome/content/rules/Pro_Ultra_Trim.xml
+++ b/src/chrome/content/rules/Pro_Ultra_Trim.xml
@@ -1,4 +1,10 @@
-<ruleset name="Pro Ultra Trim">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://proultratrim.com/ => https://proultratrim.com/: (6, 'Could not resolve host: proultratrim.com')
+
+-->
+<ruleset name="Pro Ultra Trim" default_off='failed ruleset test'>
 
 	<target host="proultratrim.com" />
 	<target host="*.proultratrim.com" />
diff --git a/src/chrome/content/rules/ProfitUnion.org.xml b/src/chrome/content/rules/ProfitUnion.org.xml
index bd3c916e71a8..7916512ed056 100644
--- a/src/chrome/content/rules/ProfitUnion.org.xml
+++ b/src/chrome/content/rules/ProfitUnion.org.xml
@@ -1,4 +1,10 @@
-<ruleset name="ProfitUnion.org">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://profitunion.org/ => https://profitunion.org/: (6, 'Could not resolve host: profitunion.org')
+
+-->
+<ruleset name="ProfitUnion.org" default_off='failed ruleset test'>
 
 	<target host="profitunion.org" />
 	<target host="*.profitunion.org" />
diff --git a/src/chrome/content/rules/ProgrammableWeb.xml b/src/chrome/content/rules/ProgrammableWeb.xml
index 9b7c13fe9c1d..d899e2c22df3 100644
--- a/src/chrome/content/rules/ProgrammableWeb.xml
+++ b/src/chrome/content/rules/ProgrammableWeb.xml
@@ -1,4 +1,11 @@
-<ruleset name="ProgrammableWeb.com" platform="mixedcontent">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://programmableweb.com/ => https://programmableweb.com/: Too many redirects while fetching 'https://programmableweb.com/'
+Fetch error: http://www.programmableweb.com/ => https://www.programmableweb.com/: Too many redirects while fetching 'https://www.programmableweb.com/'
+
+-->
+<ruleset name="ProgrammableWeb.com" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Progress.com.xml b/src/chrome/content/rules/Progress.com.xml
index 878e10f78e19..9fb6d2870f80 100644
--- a/src/chrome/content/rules/Progress.com.xml
+++ b/src/chrome/content/rules/Progress.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://secure.progress.com/ => https://secure.progress.com/: (35, 'Unknown SSL protocol error in connection to www.progress.com:443 ')
+Fetch error: http://www.progress.com/ => https://www.progress.com/: (35, 'Unknown SSL protocol error in connection to www.progress.com:443 ')
+
 	Other Progress Software rulesets:
 
 		- DataDirect.com.xml
@@ -62,7 +67,7 @@
 	² Secured by us
 
 -->
-<ruleset name="Progress.com (partial)">
+<ruleset name="Progress.com (partial)" default_off='failed ruleset test'>
 
 	<target host="progress.com" />
 	<target host="bizappstoday.progress.com" />
diff --git a/src/chrome/content/rules/Project_Meshnet.xml b/src/chrome/content/rules/Project_Meshnet.xml
index 3ef6bbb1ede6..758ff900411c 100644
--- a/src/chrome/content/rules/Project_Meshnet.xml
+++ b/src/chrome/content/rules/Project_Meshnet.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://forums.projectmeshnet.org/ => https://forums.projectmeshnet.org/: (6, 'Could not resolve host: forums.projectmeshnet.org')
+
 	Nonfunctional subdomains:
 
 		- map
 
 -->
-<ruleset name="Project Meshnet.org (partial)">
+<ruleset name="Project Meshnet.org (partial)" default_off='failed ruleset test'>
 
 	<target host="projectmeshnet.org" />
 	<target host="forums.projectmeshnet.org" />
diff --git a/src/chrome/content/rules/Prosidy.im.xml b/src/chrome/content/rules/Prosidy.im.xml
index 5c9ed8345b3d..f95f3546a750 100644
--- a/src/chrome/content/rules/Prosidy.im.xml
+++ b/src/chrome/content/rules/Prosidy.im.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://conference.prosody.im/ => https://conference.prosody.im/: (51, "SSL: no alternative certificate subject name matches target host name 'conference.prosody.im'")
+
 	Nonfunctional subdomains:
 
 		- blog	(shows hg)
@@ -16,7 +20,7 @@
 		- hg
 
 -->
-<ruleset name="Prosidy.im">
+<ruleset name="Prosidy.im" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Psychology_Today.xml b/src/chrome/content/rules/Psychology_Today.xml
index e0ba7627d9bc..375c1e689d5c 100644
--- a/src/chrome/content/rules/Psychology_Today.xml
+++ b/src/chrome/content/rules/Psychology_Today.xml
@@ -1,4 +1,10 @@
-<ruleset name="Psychology Today">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://trak.psychologytoday.com/ => https://trak.psychologytoday.com/: (6, 'Could not resolve host: trak.psychologytoday.com')
+
+-->
+<ruleset name="Psychology Today" default_off='failed ruleset test'>
 	<target host="psychologytoday.com" />
 	<target host="www.psychologytoday.com" />
 	<target host="my.psychologytoday.com" />
diff --git a/src/chrome/content/rules/Pubkey.is.xml b/src/chrome/content/rules/Pubkey.is.xml
index ebebfc7bdf39..e9cb454d09c3 100644
--- a/src/chrome/content/rules/Pubkey.is.xml
+++ b/src/chrome/content/rules/Pubkey.is.xml
@@ -1,4 +1,11 @@
-<ruleset name="Pubkey.is">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://pubkey.is/ => https://pubkey.is/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://www.pubkey.is/ => https://www.pubkey.is/: (28, 'Connection timed out after 10000 milliseconds')
+
+-->
+<ruleset name="Pubkey.is" default_off='failed ruleset test'>
   <target host="pubkey.is" />
   <target host="www.pubkey.is" />
 
diff --git a/src/chrome/content/rules/PublicSectorManagementProgram.xml b/src/chrome/content/rules/PublicSectorManagementProgram.xml
index 8637c5b1d89b..778d30c46de6 100644
--- a/src/chrome/content/rules/PublicSectorManagementProgram.xml
+++ b/src/chrome/content/rules/PublicSectorManagementProgram.xml
@@ -1,4 +1,10 @@
-<ruleset name="Public Sector Management Program">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://psmprogram.gov.au/ => https://www.psmprogram.gov.au/: Too many redirects while fetching 'https://www.psmprogram.gov.au/'
+
+-->
+<ruleset name="Public Sector Management Program" default_off='failed ruleset test'>
 	<target host="psmprogram.gov.au" />
 	<target host="*.psmprogram.gov.au" />
 
diff --git a/src/chrome/content/rules/Pure_Ultra_Cleanse.xml b/src/chrome/content/rules/Pure_Ultra_Cleanse.xml
index afde0ee44738..4551aa1edfc4 100644
--- a/src/chrome/content/rules/Pure_Ultra_Cleanse.xml
+++ b/src/chrome/content/rules/Pure_Ultra_Cleanse.xml
@@ -1,4 +1,10 @@
-<ruleset name="Pure Ultra Cleanse">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://pureultracleanse.com/ => https://pureultracleanse.com/: (6, 'Could not resolve host: pureultracleanse.com')
+
+-->
+<ruleset name="Pure Ultra Cleanse" default_off='failed ruleset test'>
 
 	<target host="pureultracleanse.com" />
 	<target host="*.pureultracleanse.com" />
diff --git a/src/chrome/content/rules/PyPIP.in.xml b/src/chrome/content/rules/PyPIP.in.xml
index 73ee94ff112a..8a7c9b76e180 100644
--- a/src/chrome/content/rules/PyPIP.in.xml
+++ b/src/chrome/content/rules/PyPIP.in.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://pypip.in/ => https://pypip.in/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://www.pypip.in/ => https://www.pypip.in/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Problematic hosts in *pypip.in:
 
 		- status *
@@ -6,7 +11,7 @@
 	* Mismatched
 
 -->
-<ruleset name="PyPIP.in (partial)">
+<ruleset name="PyPIP.in (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/QQ.xml b/src/chrome/content/rules/QQ.xml
index 86b13a495795..38d9fdeb6eb3 100644
--- a/src/chrome/content/rules/QQ.xml
+++ b/src/chrome/content/rules/QQ.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ptlogin2.mail.qq.com/ => https://ptlogin2.mail.qq.com/: (28, 'Connection timed out after 10001 milliseconds')
+Non-2xx HTTP code: http://ws.mail.qq.com/ (200) => https://ws.mail.qq.com/ (502)
+
 	CDN buckets:
 
 		- qzone.qq.com.edgesuite.net
@@ -62,7 +67,7 @@
 		- res.wx
 
 -->
-<ruleset name="QQ.com (partial)">
+<ruleset name="QQ.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Qt.xml b/src/chrome/content/rules/Qt.xml
index 8cdc0d30bb3b..fa3621469c8b 100644
--- a/src/chrome/content/rules/Qt.xml
+++ b/src/chrome/content/rules/Qt.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://qt-project.org/ => https://qt-project.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	For other Digia coverage, see Digia.xml.
 
 
@@ -9,7 +13,7 @@
 	* Dropped
 
 -->
-<ruleset name="Qt" platform="mixedcontent">
+<ruleset name="Qt" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="qt-project.org" />
 	<target host="*.qt-project.org" />
diff --git a/src/chrome/content/rules/Qualaris.com-falsemixed.xml b/src/chrome/content/rules/Qualaris.com-falsemixed.xml
index 528b5b49f183..56ec94b4ad69 100644
--- a/src/chrome/content/rules/Qualaris.com-falsemixed.xml
+++ b/src/chrome/content/rules/Qualaris.com-falsemixed.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://qualaris.com/ (200) => https://www.qualaris.com/ (404)
+
 	For rules not causing false/broken MCB, see Qualaris.com.xml.
 
 -->
-<ruleset name="Qualaris.com (false MCB)" platform="mixedcontent">
+<ruleset name="Qualaris.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="qualaris.com" />
 	<target host="*.qualaris.com" />
diff --git a/src/chrome/content/rules/Qualaris.com.xml b/src/chrome/content/rules/Qualaris.com.xml
index e2b84aae22d4..d44096cb65ee 100644
--- a/src/chrome/content/rules/Qualaris.com.xml
+++ b/src/chrome/content/rules/Qualaris.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://www.qualaris.com/ (200) => http://www.qualaris.com/ (404)
+
 	For rules causing false/broken MCB, see Qualaris.com-falsemixed.xml.
 
 
@@ -14,7 +18,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Qualaris.com (partial)">
+<ruleset name="Qualaris.com (partial)" default_off='failed ruleset test'>
 
 	<target host="qualaris.com" />
 	<target host="www.qualaris.com" />
diff --git a/src/chrome/content/rules/Quitter.no.xml b/src/chrome/content/rules/Quitter.no.xml
index 8923949fe235..38f519dcd023 100644
--- a/src/chrome/content/rules/Quitter.no.xml
+++ b/src/chrome/content/rules/Quitter.no.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.quitter.no/ => https://www.quitter.no/: (51, "SSL: no alternative certificate subject name matches target host name 'www.quitter.no'")
+
 	Insecure cookies are set for these hosts:
 
 		- quitter.no
 		- www.quitter.no
 
 -->
-<ruleset name="Quitter.no">
+<ruleset name="Quitter.no" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/R-kom.xml b/src/chrome/content/rules/R-kom.xml
index a68afb2abe58..43c97050dd88 100644
--- a/src/chrome/content/rules/R-kom.xml
+++ b/src/chrome/content/rules/R-kom.xml
@@ -1,4 +1,10 @@
-<ruleset name="R-kom.de">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.r-kom.de/ => https://www.r-kom.de/: (7, 'Failed to connect to www.r-kom.de port 443: Connection refused')
+
+-->
+<ruleset name="R-kom.de" default_off='failed ruleset test'>
 <target host="*.r-kom.de"/>
 
 <rule from="^http://kundenportal\.r\-kom\.de/" to="https://kundenportal.r-kom.de/"/>
diff --git a/src/chrome/content/rules/RCKing.xml b/src/chrome/content/rules/RCKing.xml
index 965ff7e287e6..107dba990618 100644
--- a/src/chrome/content/rules/RCKing.xml
+++ b/src/chrome/content/rules/RCKing.xml
@@ -1,4 +1,10 @@
-<ruleset name="RCKing">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://rcking.eu/ (200) => https://rcking.eu/ (503)
+
+-->
+<ruleset name="RCKing" default_off='failed ruleset test'>
 
 	<target host="rcking.eu" />
 	<target host="*.rcking.eu" />
diff --git a/src/chrome/content/rules/REWAG.xml b/src/chrome/content/rules/REWAG.xml
index 621fadfb6848..97b219144db3 100644
--- a/src/chrome/content/rules/REWAG.xml
+++ b/src/chrome/content/rules/REWAG.xml
@@ -1,4 +1,11 @@
-<ruleset name="Regensburger Energie- und Wasserversorgung AG">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://karriere.rewag.de/ => https://karriere.rewag.de/: Too many redirects while fetching 'https://karriere.rewag.de/'
+Fetch error: http://www.rewag.de/ => https://www.rewag.de/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Regensburger Energie- und Wasserversorgung AG" default_off='failed ruleset test'>
 <target host="*.rewag.de"/>
 
 <rule from="^http://(karriere|www)\.rewag\.de/" to="https://$1.rewag.de/"/>
diff --git a/src/chrome/content/rules/ROCKZi.com.xml b/src/chrome/content/rules/ROCKZi.com.xml
index a8300b7f4012..816cbb73b325 100644
--- a/src/chrome/content/rules/ROCKZi.com.xml
+++ b/src/chrome/content/rules/ROCKZi.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://rockzi.com/ => https://rockzi.com/: Too many redirects while fetching 'https://rockzi.com/'
+
 	Mixed content:
 
 		- Images on ^ from cloud *
@@ -6,7 +10,7 @@
 	* Secured by us
 
 -->
-<ruleset name="ROCKZi.com">
+<ruleset name="ROCKZi.com" default_off='failed ruleset test'>
 
 	<target host="rockzi.com" />
 	<target host="*.rockzi.com" />
diff --git a/src/chrome/content/rules/RSPCA_shop.co.uk.xml b/src/chrome/content/rules/RSPCA_shop.co.uk.xml
index d66d0e558ac2..e3ed95fa8729 100644
--- a/src/chrome/content/rules/RSPCA_shop.co.uk.xml
+++ b/src/chrome/content/rules/RSPCA_shop.co.uk.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://rspcashop.co.uk/ => https://rspcashop.co.uk/: (7, 'Failed to connect to rspcashop.co.uk port 443: Connection refused')
+
 	For other RSPCA coverage, see RSPCA.xml.
 
 -->
-<ruleset name="RSPCA shop.co.uk">
+<ruleset name="RSPCA shop.co.uk" default_off='failed ruleset test'>
 
 	<target host="rspcashop.co.uk" />
 	<target host="*.rspcashop.co.uk" />
diff --git a/src/chrome/content/rules/RTP.vc.xml b/src/chrome/content/rules/RTP.vc.xml
index 92270cacacd2..2b0898fee574 100644
--- a/src/chrome/content/rules/RTP.vc.xml
+++ b/src/chrome/content/rules/RTP.vc.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://rtp.vc/ => https://www.rtp.vc/: (7, 'Failed to connect to www.rtp.vc port 443: Connection refused')
+
 	^: 50x
 
 -->
-<ruleset name="RTP.vc">
+<ruleset name="RTP.vc" default_off='failed ruleset test'>
 
 	<target host="rtp.vc" />
 	<target host="*.rtp.vc" />
diff --git a/src/chrome/content/rules/Railscloud.de.xml b/src/chrome/content/rules/Railscloud.de.xml
index 0e3a7342c7d8..131665f93907 100644
--- a/src/chrome/content/rules/Railscloud.de.xml
+++ b/src/chrome/content/rules/Railscloud.de.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://railscloud.de/ => https://railscloud.de/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.railscloud.de/ => https://railscloud.de/: (60, 'SSL certificate problem: certificate has expired')
+
 	www: Cert only matches ^railscloud.de
 
 -->
-<ruleset name="Railscloud.de">
+<ruleset name="Railscloud.de" default_off='failed ruleset test'>
 
 	<target host="railscloud.de" />
 	<target host="www.railscloud.de" />
diff --git a/src/chrome/content/rules/Rambler.xml b/src/chrome/content/rules/Rambler.xml
index 65001f140991..6d82eed85a2b 100644
--- a/src/chrome/content/rules/Rambler.xml
+++ b/src/chrome/content/rules/Rambler.xml
@@ -1,4 +1,12 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cnt.rambler.ru/ => https://cnt.rambler.ru/: (18, 'transfer closed with 100 bytes remaining to read')
+Fetch error: http://counter.rambler.ru/ => https://counter.rambler.ru/: (18, 'transfer closed with 100 bytes remaining to read')
+Fetch error: http://scounter.rambler.ru/ => https://scounter.rambler.ru/: (18, 'transfer closed with 100 bytes remaining to read')
+
+-->
+
 <!--
 	Other Rambler rulesets:
 
@@ -66,7 +74,7 @@
 		- .rambler.ru
 
 -->
-<ruleset name="Rambler.ru (partial)">
+<ruleset name="Rambler.ru (partial)" default_off='failed ruleset test'>
 
 	<target host="assist.rambler.ru" />
 	<target host="cnt.rambler.ru" />
diff --git a/src/chrome/content/rules/RapidShare.xml b/src/chrome/content/rules/RapidShare.xml
index 069cebb74d8b..65115caf8950 100644
--- a/src/chrome/content/rules/RapidShare.xml
+++ b/src/chrome/content/rules/RapidShare.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://rapidshare.com/ => https://rapidshare.com/: (51, "SSL: no alternative certificate subject name matches target host name 'rapidshare.com'")
+
 	Nonfunctional subdomains:
 
 		- images
 
 -->
-<ruleset name="RapidShare (partial)">
+<ruleset name="RapidShare (partial)" default_off='failed ruleset test'>
 
 	<target host="rapidshare.com" />
 	<target host="*.rapidshare.com" />
diff --git a/src/chrome/content/rules/RavenDB.net.xml b/src/chrome/content/rules/RavenDB.net.xml
index ffdd6bf3a46b..06f9fa05fe13 100644
--- a/src/chrome/content/rules/RavenDB.net.xml
+++ b/src/chrome/content/rules/RavenDB.net.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ravendb.net/ => https://ravendb.net/: (35, 'Unknown SSL protocol error in connection to ravendb.net:443 ')
+Fetch error: http://www.ravendb.net/ => https://www.ravendb.net/: (35, 'Unknown SSL protocol error in connection to www.ravendb.net:443 ')
+
 	Mixed content:
 
 		- css from fonts.googleapis.com *
@@ -6,7 +11,7 @@
 	* Secured by us
 
 -->
-<ruleset name="RavenDB.net">
+<ruleset name="RavenDB.net" default_off='failed ruleset test'>
 
 	<target host="ravendb.net" />
 	<target host="www.ravendb.net" />
diff --git a/src/chrome/content/rules/Rawstudio.org.xml b/src/chrome/content/rules/Rawstudio.org.xml
index 3b23e6727323..6107445872d4 100644
--- a/src/chrome/content/rules/Rawstudio.org.xml
+++ b/src/chrome/content/rules/Rawstudio.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://rawstudio.org/ => https://rawstudio.org/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Nonfunctional subdomains:
 
 		- bugzilla	(shows www; mismatched, CN: www.rawstudio.org)
@@ -11,7 +15,7 @@
 	* Secured by us, doesn't trip MCB anyway
 
 -->
-<ruleset name="Rawstudio.org (partial)">
+<ruleset name="Rawstudio.org (partial)" default_off='failed ruleset test'>
 
 	<target host="rawstudio.org" />
 	<target host="*.rawstudio.org" />
diff --git a/src/chrome/content/rules/Red_Hat.xml b/src/chrome/content/rules/Red_Hat.xml
index 3425d676fd66..7cb361aca968 100644
--- a/src/chrome/content/rules/Red_Hat.xml
+++ b/src/chrome/content/rules/Red_Hat.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://careers.redhat.com/ => https://careers.redhat.com/: (28, 'Connection timed out after 10001 milliseconds')
+
 	magazine & servicesblog.redhat.com are handled in WordPress-blogs.xml.
 
 
@@ -117,7 +121,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Red Hat.com (partial)">
+<ruleset name="Red Hat.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Reddit_media.com.xml b/src/chrome/content/rules/Reddit_media.com.xml
index 6b9a12880df1..f4ea0fe15847 100644
--- a/src/chrome/content/rules/Reddit_media.com.xml
+++ b/src/chrome/content/rules/Reddit_media.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://thumbs.redditmedia.com/ => https://thumbs.redditmedia.com/: (51, "SSL: no alternative certificate subject name matches target host name 'thumbs.redditmedia.com'")
+
 	For other Reddit coverage, see Reddit.xml.
 
 
@@ -25,7 +29,7 @@
 		- .redditmedia.com
 
 -->
-<ruleset name="Reddit media.com">
+<ruleset name="Reddit media.com" default_off='failed ruleset test'>
 
 	<target host="redditmedia.com" />
 	<target host="pixel.redditmedia.com" />
diff --git a/src/chrome/content/rules/Reed-Exhibitions.xml b/src/chrome/content/rules/Reed-Exhibitions.xml
index d8c70c0c212b..ba548405240c 100644
--- a/src/chrome/content/rules/Reed-Exhibitions.xml
+++ b/src/chrome/content/rules/Reed-Exhibitions.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://infosecurity-magazine.com/ => https://www.infosecurity-magazine.com/: Too many redirects while fetching 'https://www.infosecurity-magazine.com/'
+Fetch error: http://www.infosecurity-magazine.com/ => https://www.infosecurity-magazine.com/: Too many redirects while fetching 'https://www.infosecurity-magazine.com/'
+
 	Problematic domains:
 
 		- ^infosecurity-magazine.com *
@@ -6,7 +11,7 @@
 	* Handshake fails
 
 -->
-<ruleset name="Reed Exhibitions (partial)" platform="mixedcontent">
+<ruleset name="Reed Exhibitions (partial)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="infosecurity-magazine.com"/>
 	<target host="www.infosecurity-magazine.com"/>
diff --git a/src/chrome/content/rules/Reef_LED_Lights.com.xml b/src/chrome/content/rules/Reef_LED_Lights.com.xml
index 47302143e369..99eae3064ad8 100644
--- a/src/chrome/content/rules/Reef_LED_Lights.com.xml
+++ b/src/chrome/content/rules/Reef_LED_Lights.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="Reef LED Lights.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://reefledlights.com/ => https://reefledlights.com/: (35, 'Unknown SSL protocol error in connection to reefledlights.com:443 ')
+Fetch error: http://www.reefledlights.com/ => https://www.reefledlights.com/: (35, 'Unknown SSL protocol error in connection to www.reefledlights.com:443 ')
+
+-->
+<ruleset name="Reef LED Lights.com" default_off='failed ruleset test'>
 
 	<target host="reefledlights.com" />
 	<target host="www.reefledlights.com" />
diff --git a/src/chrome/content/rules/Reklamport.com.xml b/src/chrome/content/rules/Reklamport.com.xml
index 0f94544c08a0..4bd2a0e42563 100644
--- a/src/chrome/content/rules/Reklamport.com.xml
+++ b/src/chrome/content/rules/Reklamport.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Reklamport.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://reklamport.com/ (200) => https://reklamport.com/ (404)
+
+-->
+<ruleset name="Reklamport.com" default_off='failed ruleset test'>
 
 	<target host="reklamport.com" />
 	<target host="*.reklamport.com" />
diff --git a/src/chrome/content/rules/Rem.co.xml b/src/chrome/content/rules/Rem.co.xml
index 4fe84e6bd52e..7c2b541ad472 100644
--- a/src/chrome/content/rules/Rem.co.xml
+++ b/src/chrome/content/rules/Rem.co.xml
@@ -1,4 +1,11 @@
-<ruleset name="Rem.co">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://rem.co/ => https://rem.co/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://www.rem.co/ => https://www.rem.co/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
+-->
+<ruleset name="Rem.co" default_off='failed ruleset test'>
 
 	<target host="rem.co" />
 	<target host="www.rem.co" />
diff --git a/src/chrome/content/rules/Resin.io.xml b/src/chrome/content/rules/Resin.io.xml
index 1bda72496cae..9ebc9749082f 100644
--- a/src/chrome/content/rules/Resin.io.xml
+++ b/src/chrome/content/rules/Resin.io.xml
@@ -1,4 +1,10 @@
-<ruleset name="Resin.io">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.resin.io/ => https://www.resin.io/: (7, 'Failed to connect to www.resin.io port 443: Connection refused')
+
+-->
+<ruleset name="Resin.io" default_off='failed ruleset test'>
   <target host="resin.io" />
   <target host="www.resin.io" />
 
diff --git a/src/chrome/content/rules/Responsys.com.xml b/src/chrome/content/rules/Responsys.com.xml
index 1f48448f3bce..8f949e4e61a0 100644
--- a/src/chrome/content/rules/Responsys.com.xml
+++ b/src/chrome/content/rules/Responsys.com.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://responsys.com/ => https://responsys.com/: (51, "SSL: no alternative certificate subject name matches target host name 'responsys.com'")
+Fetch error: http://www.responsys.com/ => https://www.responsys.com/: Too many redirects while fetching 'https://www.responsys.com/'
+
 	For other Oracle coverage, see Oracle.xml.
 
 -->
-<ruleset name="Responsys.com">
+<ruleset name="Responsys.com" default_off='failed ruleset test'>
 
 	<target host="responsys.com" />
 	<target host="www.responsys.com" />
diff --git a/src/chrome/content/rules/Resus.org.uk.xml b/src/chrome/content/rules/Resus.org.uk.xml
index fc9595bb3de8..dbe8f325512d 100644
--- a/src/chrome/content/rules/Resus.org.uk.xml
+++ b/src/chrome/content/rules/Resus.org.uk.xml
@@ -1,4 +1,10 @@
-<ruleset name="Resus.org.uk">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://resus.org.uk/ => https://resus.org.uk/: Too many redirects while fetching 'https://resus.org.uk/'
+
+-->
+<ruleset name="Resus.org.uk" default_off='failed ruleset test'>
 
 	<target host="resus.org.uk" />
 	<target host="www.resus.org.uk" />
diff --git a/src/chrome/content/rules/RevSci.net.xml b/src/chrome/content/rules/RevSci.net.xml
index c9acef80adc6..2394b5b8f792 100644
--- a/src/chrome/content/rules/RevSci.net.xml
+++ b/src/chrome/content/rules/RevSci.net.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://pix1.revsci.net/ => https://pix1.revsci.net/: (6, 'Could not resolve host: pix1.revsci.net')
+Fetch error: http://pix4.revsci.net/ => https://pix4.revsci.net/: (6, 'Could not resolve host: pix4.revsci.net')
+
 	For other AudienceScience coverage, see AudienceScience.xml.
 
 -->
-<ruleset name="RevSci.net">
+<ruleset name="RevSci.net" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Revolet.xml b/src/chrome/content/rules/Revolet.xml
index bdb8e85fb07e..94287d66d0e8 100644
--- a/src/chrome/content/rules/Revolet.xml
+++ b/src/chrome/content/rules/Revolet.xml
@@ -1,4 +1,10 @@
-<ruleset name="Revolet">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://revolet.com/ => https://revolet.com/: Too many redirects while fetching 'https://revolet.com/'
+
+-->
+<ruleset name="Revolet" default_off='failed ruleset test'>
 
 	<target host="revolet.com" />
 	<target host="*.revolet.com" />
diff --git a/src/chrome/content/rules/Revolt_Games.xml b/src/chrome/content/rules/Revolt_Games.xml
index fe963fe8feff..81a954f4a090 100644
--- a/src/chrome/content/rules/Revolt_Games.xml
+++ b/src/chrome/content/rules/Revolt_Games.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://revoltgames.com/ => https://www.revoltgames.com/: Too many redirects while fetching 'https://www.revoltgames.com/'
+
 	Nonfunctional subdomains:
 
 		- blog	(shows blank page; mismatched, CN: *.secure-secure.co.uk)
@@ -9,7 +13,7 @@
 		- ^	(shows blank page)
 
 -->
-<ruleset name="Revolt Games (partial)">
+<ruleset name="Revolt Games (partial)" default_off='failed ruleset test'>
 
 	<target host="revoltgames.com" />
 	<target host="*.revoltgames.com" />
diff --git a/src/chrome/content/rules/Rfihub.com.xml b/src/chrome/content/rules/Rfihub.com.xml
index e1ddd63f74e8..7a6a1611e5ea 100644
--- a/src/chrome/content/rules/Rfihub.com.xml
+++ b/src/chrome/content/rules/Rfihub.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://p.rfihib.com/cm => https://p.rfihib.com/cm: (6, 'Could not resolve host: p.rfihib.com')
+
 	Observed subdomains:
 
 		- a
@@ -10,7 +14,7 @@
 		- .rfihib.com
 
 -->
-<ruleset name="rfihub.com">
+<ruleset name="rfihub.com" default_off='failed ruleset test'>
 
 	<target host="*.rfihub.com" />
 
diff --git a/src/chrome/content/rules/Rigzone.xml b/src/chrome/content/rules/Rigzone.xml
index 6e5202d3c2ff..07b7f55744a1 100644
--- a/src/chrome/content/rules/Rigzone.xml
+++ b/src/chrome/content/rules/Rigzone.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://rigzone.com/ => https://rigzone.com/: Too many redirects while fetching 'https://rigzone.com/'
+
 	For problematic rules, see Bishop_Interactive-mismatches.xml.
 
 
@@ -19,7 +23,7 @@
 		- www
 
 -->
-<ruleset name="Rigzone (partial)">
+<ruleset name="Rigzone (partial)" default_off='failed ruleset test'>
 
 	<target host="rigzone.com" />
 	<target host="*.rigzone.com" />
diff --git a/src/chrome/content/rules/Riverbed.xml b/src/chrome/content/rules/Riverbed.xml
index 8ee6d688ee35..6ba2c41479be 100644
--- a/src/chrome/content/rules/Riverbed.xml
+++ b/src/chrome/content/rules/Riverbed.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://dr-cas.riverbed.com/ => https://dr-cas.riverbed.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://dr-webmail.riverbed.com/ => https://dr-webmail.riverbed.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	CDN buckets:
 
 		- s1155.t.eloqua.com
@@ -87,7 +92,7 @@
 	² Secured by us
 
 -->
-<ruleset name="Riverbed.com (partial)">
+<ruleset name="Riverbed.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Robin_Rabard.xml b/src/chrome/content/rules/Robin_Rabard.xml
index d738db68f03c..62c2c099b9d2 100644
--- a/src/chrome/content/rules/Robin_Rabard.xml
+++ b/src/chrome/content/rules/Robin_Rabard.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://robinbarnard.com/ => http://robinbarnard.com/: (6, 'Could not resolve host: robinbarnard.com')
+Fetch error: http://www.robinbarnard.com/ => http://www.robinbarnard.com/: (6, 'Could not resolve host: www.robinbarnard.com')
+
 	CN: *.justhost.com
 
 -->
-<ruleset name="Robin Rabard (partial)">
+<ruleset name="Robin Rabard (partial)" default_off='failed ruleset test'>
 
 	<target host="robinbarnard.com" />
 	<target host="www.robinbarnard.com" />
diff --git a/src/chrome/content/rules/Rooof.xml b/src/chrome/content/rules/Rooof.xml
index 59313c378033..e0779e50b3dc 100644
--- a/src/chrome/content/rules/Rooof.xml
+++ b/src/chrome/content/rules/Rooof.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://rooof.com/ => https://rooof.com/: (51, "SSL: no alternative certificate subject name matches target host name 'rooof.com'")
+
 	CDN buckets:
 
 		- s3.amazonaws.com/cdn.rooof.com/ | d2fiu2vy3tuc3o.cloudfront.net
 
 -->
-<ruleset name="Rooof">
+<ruleset name="Rooof" default_off='failed ruleset test'>
 
 	<target host="rooof.com" />
 	<target host="*.rooof.com" />
diff --git a/src/chrome/content/rules/RoundCube.net.xml b/src/chrome/content/rules/RoundCube.net.xml
index 1eeb8e731ab4..53ec381c7bc0 100644
--- a/src/chrome/content/rules/RoundCube.net.xml
+++ b/src/chrome/content/rules/RoundCube.net.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://docsroundcube.net/ => https://docsroundcube.net/: (6, 'Could not resolve host: docsroundcube.net')
+
 	Nonfunctional hosts:
 
 		- lists ²
@@ -15,7 +19,7 @@
 
 		- www.spell.roundcube.net
 -->
-<ruleset name="RoundCube.net (partial)">
+<ruleset name="RoundCube.net (partial)" default_off='failed ruleset test'>
 	<target host="roundcube.net" />
 	<target host="www.roundcube.net" />
 	<target host="docsroundcube.net" />
diff --git a/src/chrome/content/rules/Rpmfusion.org.xml b/src/chrome/content/rules/Rpmfusion.org.xml
index ed3ab110b37a..3c829343e5e8 100644
--- a/src/chrome/content/rules/Rpmfusion.org.xml
+++ b/src/chrome/content/rules/Rpmfusion.org.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bugzilla.rpmfusion.org/ => https://bugzilla.rpmfusion.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	(www.)?: Refused
 
 -->
-<ruleset name="rpmfusion.org (partial)" platform="cacert">
+<ruleset name="rpmfusion.org (partial)" platform="cacert" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Rubicon-Project.xml b/src/chrome/content/rules/Rubicon-Project.xml
index dd68c12f5918..a0fa720a71bf 100644
--- a/src/chrome/content/rules/Rubicon-Project.xml
+++ b/src/chrome/content/rules/Rubicon-Project.xml
@@ -1,4 +1,11 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://rubiconproject.com/ => https://rubiconproject.com/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+Fetch error: http://www.rubiconproject.com/ => https://www.rubiconproject.com/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+Fetch error: http://rubiconproject.net/ => https://rubiconproject.com/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+Fetch error: http://www.rubiconproject.net/ => https://www.rubiconproject.com/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+
 	Other Rubicon Project rulesets:
 
 		- Fimserve.com.xml
@@ -21,7 +28,7 @@
 		- .rubiconproject.com
 
 -->
-<ruleset name="Rubicon Project.com">
+<ruleset name="Rubicon Project.com" default_off='failed ruleset test'>
 
 	<target host="rubiconproject.com" />
 	<target host="ads.rubiconproject.com" />
diff --git a/src/chrome/content/rules/RugsHD.com.xml b/src/chrome/content/rules/RugsHD.com.xml
index e672a42cf4f5..b231a336e2cb 100644
--- a/src/chrome/content/rules/RugsHD.com.xml
+++ b/src/chrome/content/rules/RugsHD.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="RugsHD.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://rugshd.com/ => https://rugshd.com/: (51, "SSL: no alternative certificate subject name matches target host name 'rugshd.com'")
+
+-->
+<ruleset name="RugsHD.com" default_off='failed ruleset test'>
 
 	<target host="rugshd.com" />
 	<target host="*.rugshd.com" />
diff --git a/src/chrome/content/rules/Ruskey_Biz.xml b/src/chrome/content/rules/Ruskey_Biz.xml
index 6527b08ed1a1..e0adabe7446b 100644
--- a/src/chrome/content/rules/Ruskey_Biz.xml
+++ b/src/chrome/content/rules/Ruskey_Biz.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ruskeybiz.ru/ => http://ruskeybiz.ru/: (6, 'Could not resolve host: ruskeybiz.ru')
+Fetch error: http://www.ruskeybiz.ru/ => http://www.ruskeybiz.ru/: (6, 'Could not resolve host: www.ruskeybiz.ru')
+
 	Some page redirect to http.
 
 -->
-<ruleset name="Ruskey Biz (partial)">
+<ruleset name="Ruskey Biz (partial)" default_off='failed ruleset test'>
 
 	<target host="ruskeybiz.ru" />
 	<target host="www.ruskeybiz.ru" />
diff --git a/src/chrome/content/rules/SANS.edu.xml b/src/chrome/content/rules/SANS.edu.xml
index 8edeb0471d16..018727555d20 100644
--- a/src/chrome/content/rules/SANS.edu.xml
+++ b/src/chrome/content/rules/SANS.edu.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://portal.sans.edu/ => https://portal.sans.edu/: (6, 'Could not resolve host: portal.sans.edu')
+
 	SANS Technology Institute
 
 	For other SANS Institute coverage, see SANS.org.xml.
@@ -11,7 +15,7 @@
 		- portal
 
 -->
-<ruleset name="SANS.edu">
+<ruleset name="SANS.edu" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/SK_hynix.com.xml b/src/chrome/content/rules/SK_hynix.com.xml
index 5051a7c1392a..bf3b144a493d 100644
--- a/src/chrome/content/rules/SK_hynix.com.xml
+++ b/src/chrome/content/rules/SK_hynix.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://skhynix.com/ => https://skhynix.com/: (35, 'error:140773E8:SSL routines:SSL23_GET_SERVER_HELLO:reason(1000)')
+
 	SK hynix Inc.
 
 
@@ -8,7 +12,7 @@
 		- www.skhynix.com
 
 -->
-<ruleset name="SK hynix.com">
+<ruleset name="SK hynix.com" default_off='failed ruleset test'>
 
 	<target host="skhynix.com" />
 	<target host="www.skhynix.com" />
diff --git a/src/chrome/content/rules/SNSBank.xml b/src/chrome/content/rules/SNSBank.xml
index ce6c8fb48818..372a0f56851c 100644
--- a/src/chrome/content/rules/SNSBank.xml
+++ b/src/chrome/content/rules/SNSBank.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://servicepas.snsbank.nl/ => https://servicepas.snsbank.nl/: (28, 'Resolving timed out after 10520 milliseconds')
+
 	Rule created by Jeroen van der Gun.
 
 
@@ -23,7 +27,7 @@
 		- servicepas
 
 -->
-<ruleset name="SNS Bank">
+<ruleset name="SNS Bank" default_off='failed ruleset test'>
 
 	<target host="snsbank.nl" />
 	<target host="community.snsbank.nl" />
diff --git a/src/chrome/content/rules/SRB2.org.xml b/src/chrome/content/rules/SRB2.org.xml
index 965acc0d58fe..0a1ff15270cf 100644
--- a/src/chrome/content/rules/SRB2.org.xml
+++ b/src/chrome/content/rules/SRB2.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://srb2.org/ => https://srb2.org/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	Fully covered subdomains:
 
 		- (www.)
@@ -15,7 +19,7 @@
 		- wiki
 
 -->
-<ruleset name="SRB2.org">
+<ruleset name="SRB2.org" default_off='failed ruleset test'>
 
 	<target host="srb2.org" />
 	<target host="*.srb2.org" />
diff --git a/src/chrome/content/rules/SWCA.org.xml b/src/chrome/content/rules/SWCA.org.xml
index f93619185d13..cc60fd1117a7 100644
--- a/src/chrome/content/rules/SWCA.org.xml
+++ b/src/chrome/content/rules/SWCA.org.xml
@@ -1,4 +1,10 @@
-<ruleset name="SWCA.org">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://swca.org/ => https://www.swca.org/: (35, 'Unknown SSL protocol error in connection to www.swca.org:443 ')
+
+-->
+<ruleset name="SWCA.org" default_off='failed ruleset test'>
 
 	<target host="swca.org" />
 	<target host="*.swca.org" />
diff --git a/src/chrome/content/rules/SWISSCEX.com.xml b/src/chrome/content/rules/SWISSCEX.com.xml
index 7692b30414e4..255cb8acdd41 100644
--- a/src/chrome/content/rules/SWISSCEX.com.xml
+++ b/src/chrome/content/rules/SWISSCEX.com.xml
@@ -1,10 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://swisscex.com/ => https://swisscex.com/: (7, 'Failed to connect to swisscex.com port 443: Connection refused')
+Fetch error: http://www.swisscex.com/ => https://www.swisscex.com/: (7, 'Failed to connect to www.swisscex.com port 443: Connection refused')
+
 	CDN buckets:
 
 		- swcx0.r.worldssl.net
 
 -->
-<ruleset name="SWISSCEX.com">
+<ruleset name="SWISSCEX.com" default_off='failed ruleset test'>
 
 	<target host="swisscex.com" />
 	<target host="www.swisscex.com" />
diff --git a/src/chrome/content/rules/Sbarmen.no.xml b/src/chrome/content/rules/Sbarmen.no.xml
index b33ad7f65b0e..27914b36fb2d 100644
--- a/src/chrome/content/rules/Sbarmen.no.xml
+++ b/src/chrome/content/rules/Sbarmen.no.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://sbarmen.no/ => https://sbarmen.no/: (28, 'Connection timed out after 10000 milliseconds')
+
 	collaboration: self-signed
 
 -->
-<ruleset name="sbarmen.no (partial)">
+<ruleset name="sbarmen.no (partial)" default_off='failed ruleset test'>
 
 	<target host="sbarmen.no" />
 	<target host="www.sbarmen.no" />
diff --git a/src/chrome/content/rules/Sbucciami.xml b/src/chrome/content/rules/Sbucciami.xml
index 61b32de8e05c..18cec5aa31b2 100644
--- a/src/chrome/content/rules/Sbucciami.xml
+++ b/src/chrome/content/rules/Sbucciami.xml
@@ -1,4 +1,10 @@
-<ruleset name="Sbucciami">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://sbucciami.com/ => https://sbucciami.com/: Too many redirects while fetching 'https://sbucciami.com/'
+
+-->
+<ruleset name="Sbucciami" default_off='failed ruleset test'>
 
 	<target host="sbucciami.com" />
 	<target host="*.sbucciami.com" />
diff --git a/src/chrome/content/rules/SceneTap.xml b/src/chrome/content/rules/SceneTap.xml
index 8b8e28e25508..04002059c854 100644
--- a/src/chrome/content/rules/SceneTap.xml
+++ b/src/chrome/content/rules/SceneTap.xml
@@ -1,4 +1,10 @@
-<ruleset name="SceneTap">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://scenetap.com/ => https://scenetap.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="SceneTap" default_off='failed ruleset test'>
 
 	<target host="scenetap.com" />
 	<!--	* for cross-domain cookie.	-->
diff --git a/src/chrome/content/rules/Scooter-Attack.xml b/src/chrome/content/rules/Scooter-Attack.xml
index 09e79ea8d4fb..43c469c17bd7 100644
--- a/src/chrome/content/rules/Scooter-Attack.xml
+++ b/src/chrome/content/rules/Scooter-Attack.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://scooter-attack.com/ (200) => https://scooter-attack.com/ (521)
+
 	Nonfunctional subdomains:
 
 		- b2b		(http & https data differ)
 		- forum		(no https)
 
 -->
-<ruleset name="Scooter-Attack (partial)">
+<ruleset name="Scooter-Attack (partial)" default_off='failed ruleset test'>
 
 	<target host="scooter-attack.com" />
 	<target host="*.scooter-attack.com" />
diff --git a/src/chrome/content/rules/Scriptfodder.com.xml b/src/chrome/content/rules/Scriptfodder.com.xml
index dba63c395f84..c59b2fcbe543 100644
--- a/src/chrome/content/rules/Scriptfodder.com.xml
+++ b/src/chrome/content/rules/Scriptfodder.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="ScriptFodder">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://cdn.scriptfodder.com/ (200) => https://cdn.scriptfodder.com/ (403)
+
+-->
+<ruleset name="ScriptFodder" default_off='failed ruleset test'>
   <target host="scriptfodder.com" />
   <target host="www.scriptfodder.com" />
   <target host="cdn.scriptfodder.com" />
diff --git a/src/chrome/content/rules/Seafile-Server.de.xml b/src/chrome/content/rules/Seafile-Server.de.xml
index 7352278abf26..0fdb89eddb70 100644
--- a/src/chrome/content/rules/Seafile-Server.de.xml
+++ b/src/chrome/content/rules/Seafile-Server.de.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://seafileserver.de/ => https://seafileserver.de/: (51, "SSL: no alternative certificate subject name matches target host name 'seafileserver.de'")
+Fetch error: http://www.seafileserver.de/ => https://www.seafileserver.de/: (51, "SSL: no alternative certificate subject name matches target host name 'www.seafileserver.de'")
+
 	For other Seafile coverage, see Seafile.xml.
 
 
@@ -12,7 +17,7 @@
 		- wiki.seafile-server.de
 
 -->
-<ruleset name="Seafile-Server.de">
+<ruleset name="Seafile-Server.de" default_off='failed ruleset test'>
 
 	<target host="seafileserver.de" />
 	<target host="www.seafileserver.de" />
diff --git a/src/chrome/content/rules/Seals-with-Clubs.xml b/src/chrome/content/rules/Seals-with-Clubs.xml
index 6d42680df757..b87cc3b951db 100644
--- a/src/chrome/content/rules/Seals-with-Clubs.xml
+++ b/src/chrome/content/rules/Seals-with-Clubs.xml
@@ -1,4 +1,11 @@
-<ruleset name="Seals with Clubs.eu">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://sealswithclubs.eu/ => https://sealswithclubs.eu/: (28, 'Connection timed out after 10001 milliseconds')
+Fetch error: http://www.sealswithclubs.eu/ => https://www.sealswithclubs.eu/: (28, 'Connection timed out after 10001 milliseconds')
+
+-->
+<ruleset name="Seals with Clubs.eu" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Secure-u.de.xml b/src/chrome/content/rules/Secure-u.de.xml
index ceebb294c7ce..9189c1fa9420 100644
--- a/src/chrome/content/rules/Secure-u.de.xml
+++ b/src/chrome/content/rules/Secure-u.de.xml
@@ -1,4 +1,11 @@
-<ruleset name="secure-u e.V." platform="cacert">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.secure-u.de/ => https://www.secure-u.de/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://secure-u.de/ => https://secure-u.de/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
+-->
+<ruleset name="secure-u e.V." platform="cacert" default_off='failed ruleset test'>
 	<target host="www.secure-u.de"/>
 	<target host="secure-u.de"/>
 
diff --git a/src/chrome/content/rules/SecurePro_Software.xml b/src/chrome/content/rules/SecurePro_Software.xml
index 1c5d50ac98e6..e209f840c8b5 100644
--- a/src/chrome/content/rules/SecurePro_Software.xml
+++ b/src/chrome/content/rules/SecurePro_Software.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://secureprosoftware.com/ (200) => https://secureprosoftware.com/ (521)
+Non-2xx HTTP code: http://www.secureprosoftware.com/ (200) => https://secureprosoftware.com/ (521)
+
 	www: mismatched, CN: *.websitewelcome.com
 
 -->
-<ruleset name="SecurePro Software.com">
+<ruleset name="SecurePro Software.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Securepaynet.net.xml b/src/chrome/content/rules/Securepaynet.net.xml
index 2558e689c28e..829a8f791fce 100644
--- a/src/chrome/content/rules/Securepaynet.net.xml
+++ b/src/chrome/content/rules/Securepaynet.net.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cdrapplication.securepaynet.net/ => https://cdrapplication.securepaynet.net/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Fully covered domains:
 
 		- securepaynet.net	(→ www.securepaynet.net)
@@ -24,7 +28,7 @@
 		- www.cdrapplication.securepaynet.net
 
 -->
-<ruleset name="Securepaynet.net">
+<ruleset name="Securepaynet.net" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Secureserver.net.xml b/src/chrome/content/rules/Secureserver.net.xml
index f7002628726e..02259ad0f171 100644
--- a/src/chrome/content/rules/Secureserver.net.xml
+++ b/src/chrome/content/rules/Secureserver.net.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cloud.secureserver.net/ => https://cloud.secureserver.net/: (28, 'Connection timed out after 10001 milliseconds')
+
 	Fully covered hosts in *secureserver.net:
 
 		- cloud
@@ -15,7 +19,7 @@
 		- www
 
 -->
-<ruleset name="Secureserver.net (partial)">
+<ruleset name="Secureserver.net (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Security-Research-Labs.xml b/src/chrome/content/rules/Security-Research-Labs.xml
index 4501617498f9..75dc9c731908 100644
--- a/src/chrome/content/rules/Security-Research-Labs.xml
+++ b/src/chrome/content/rules/Security-Research-Labs.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.srlabs.de/ => https://www.srlabs.de/: (35, 'error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 unrecognized name')
+
 	Security Research Labs
 
 
@@ -9,7 +13,7 @@
 		- opensource
 
 -->
-<ruleset name="SRLabs.de">
+<ruleset name="SRLabs.de" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Selangorku.xml b/src/chrome/content/rules/Selangorku.xml
index cd3ff5515f32..d489e6be5f43 100644
--- a/src/chrome/content/rules/Selangorku.xml
+++ b/src/chrome/content/rules/Selangorku.xml
@@ -1,4 +1,10 @@
-<ruleset name="Selangorku">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://selangorku.com/ => https://selangorku.com/: (60, 'SSL certificate problem: self signed certificate')
+
+-->
+<ruleset name="Selangorku" default_off='failed ruleset test'>
 
 	<target host="selangorku.com" />
 	<target host="*.selangorku.com" />
diff --git a/src/chrome/content/rules/Sencha.xml b/src/chrome/content/rules/Sencha.xml
index 8625402665be..5aa8193e04e8 100644
--- a/src/chrome/content/rules/Sencha.xml
+++ b/src/chrome/content/rules/Sencha.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://sencha.com/ => https://www.sencha.com/: Too many redirects while fetching 'https://www.sencha.com/'
+
 	CDN buckets:
 
 		- extjs.cachefly.net
@@ -23,7 +27,7 @@
 	* Cachefly
 
 -->
-<ruleset name="Sencha (partial)">
+<ruleset name="Sencha (partial)" default_off='failed ruleset test'>
 
 	<target host="sencha.com" />
 	<target host="*.sencha.com" />
diff --git a/src/chrome/content/rules/SeoWizard.ru.xml b/src/chrome/content/rules/SeoWizard.ru.xml
index aa71416097d2..4e1569936858 100644
--- a/src/chrome/content/rules/SeoWizard.ru.xml
+++ b/src/chrome/content/rules/SeoWizard.ru.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://seowizard.ru/ => https://seowizard.ru/: (51, "SSL: no alternative certificate subject name matches target host name 'seowizard.ru'")
+
 	For other Sape coverage, see Sape.xml.
 
 
@@ -7,7 +11,7 @@
 		- www.seowizard.ru
 
 -->
-<ruleset name="SeoWizard.ru">
+<ruleset name="SeoWizard.ru" default_off='failed ruleset test'>
 
 	<target host="seowizard.ru" />
 	<target host="www.seowizard.ru" />
diff --git a/src/chrome/content/rules/Serverdensity.io.xml b/src/chrome/content/rules/Serverdensity.io.xml
index b6ed19b18e64..4ebbd80bde0b 100644
--- a/src/chrome/content/rules/Serverdensity.io.xml
+++ b/src/chrome/content/rules/Serverdensity.io.xml
@@ -1,4 +1,8 @@
-<!-- This rule was automatically generated based on an HSTS
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://serverdensity.io/ => https://serverdensity.io/: Too many redirects while fetching 'https://serverdensity.io/'
+ This rule was automatically generated based on an HSTS
      preload rule in the Chromium browser.  See
      https://src.chromium.org/viewvc/chrome/trunk/src/net/http/transport_security_state_static.h
      for the list of preloads.  Sites are added to the Chromium HSTS
@@ -7,7 +11,7 @@
 
      Because Chromium and derived browsers automatically force HTTPS for
      every access to this site, this rule applies only to Firefox. -->
-<ruleset name="Serverdensity.io" platform="firefox">
+<ruleset name="Serverdensity.io" platform="firefox" default_off='failed ruleset test'>
 <target host="serverdensity.io" />
 
 <securecookie host="^serverdensity\.io$" name=".+" />
diff --git a/src/chrome/content/rules/ShareThis.xml b/src/chrome/content/rules/ShareThis.xml
index e9c14495dd90..fe7c7e4e16c7 100644
--- a/src/chrome/content/rules/ShareThis.xml
+++ b/src/chrome/content/rules/ShareThis.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://forums.sharethis.com/ => https://forums.sharethis.com/: Too many redirects while fetching 'https://forums.sharethis.com/'
+Fetch error: http://support.sharethis.com/ => https://support.sharethis.com/: Too many redirects while fetching 'https://support.sharethis.com/'
+
 	CDN buckets:
 
 		- cdn.sharethis.com.edgesuite.net
@@ -52,7 +57,7 @@
 	² Secured by us
 
 -->
-<ruleset name="ShareThis (partial)">
+<ruleset name="ShareThis (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Sharedvue.net.xml b/src/chrome/content/rules/Sharedvue.net.xml
index 7996c6d0ae0a..254b09f669f7 100644
--- a/src/chrome/content/rules/Sharedvue.net.xml
+++ b/src/chrome/content/rules/Sharedvue.net.xml
@@ -1,4 +1,10 @@
-<ruleset name="sharedvue.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://sharedvue.net/ => https://sharedvue.net/: (7, 'Failed to connect to sharedvue.net port 443: Connection refused')
+
+-->
+<ruleset name="sharedvue.net" default_off='failed ruleset test'>
 
 	<target host="sharedvue.net" />
 	<target host="*.sharedvue.net" />
diff --git a/src/chrome/content/rules/ShortList.xml b/src/chrome/content/rules/ShortList.xml
index 33f0f42dd95b..d9c385949dad 100644
--- a/src/chrome/content/rules/ShortList.xml
+++ b/src/chrome/content/rules/ShortList.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cdn.shortlist.com/ => https://d20z6n9g3vmn1.cloudfront.net/: (6, 'Could not resolve host: d20z6n9g3vmn1.cloudfront.net')
+
 	Insecure cookies are set for these domains:
 
 		- .shortlist.com
 
 -->
-<ruleset name="ShortList.com">
+<ruleset name="ShortList.com" default_off='failed ruleset test'>
 
 	<target host="shortlist.com" />
 	<target host="admin.shortlist.com" />
diff --git a/src/chrome/content/rules/Shwyz.ca.xml b/src/chrome/content/rules/Shwyz.ca.xml
index 37af093d92a5..ae20b20d6786 100644
--- a/src/chrome/content/rules/Shwyz.ca.xml
+++ b/src/chrome/content/rules/Shwyz.ca.xml
@@ -1,4 +1,11 @@
-<ruleset name="shwyz.ca">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://shwyz.ca/ => https://shwyz.ca/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.shwyz.ca/ => https://www.shwyz.ca/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="shwyz.ca" default_off='failed ruleset test'>
 
 	<target host="shwyz.ca" />
 	<target host="www.shwyz.ca" />
diff --git a/src/chrome/content/rules/Silent_Sender.com.xml b/src/chrome/content/rules/Silent_Sender.com.xml
index 7f08c6da4b04..168a2aa5a3b8 100644
--- a/src/chrome/content/rules/Silent_Sender.com.xml
+++ b/src/chrome/content/rules/Silent_Sender.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="Silent Sender.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://silentsender.com/ => https://www.silentsender.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.silentsender.com/ => https://www.silentsender.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Silent Sender.com" default_off='failed ruleset test'>
 
 	<target host="silentsender.com" />
 	<target host="www.silentsender.com" />
diff --git a/src/chrome/content/rules/SilverRush_Style.xml b/src/chrome/content/rules/SilverRush_Style.xml
index 8ffcaf21ec7c..f44b2807c9ec 100644
--- a/src/chrome/content/rules/SilverRush_Style.xml
+++ b/src/chrome/content/rules/SilverRush_Style.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://silverrushstyle.com/ => https://www.silverrushstyle.com/: Too many redirects while fetching 'https://www.silverrushstyle.com/'
+
 	Problematic subdomains:
 
 		- ^	(mismatched, CN: secure.silverrushstyle.com)
 
 -->
-<ruleset name="SilverRush Style (partial)">
+<ruleset name="SilverRush Style (partial)" default_off='failed ruleset test'>
 
 	<target host="silverrushstyle.com" />
 	<target host="*.silverrushstyle.com" />
diff --git a/src/chrome/content/rules/Silvertunnel.org.xml b/src/chrome/content/rules/Silvertunnel.org.xml
index d8f9fd9bc4a5..29d9c9eb8e95 100644
--- a/src/chrome/content/rules/Silvertunnel.org.xml
+++ b/src/chrome/content/rules/Silvertunnel.org.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://silvertunnel.org/ => https://silvertunnel.org/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://www.silvertunnel.org/ => https://silvertunnel.org/: (28, 'Connection timed out after 10000 milliseconds')
+
 	www: http reply
 
 -->
-<ruleset name="silvertunnel.org">
+<ruleset name="silvertunnel.org" default_off='failed ruleset test'>
 
 	<target host="silvertunnel.org" />
 	<target host="www.silvertunnel.org" />
diff --git a/src/chrome/content/rules/SitePoint.xml b/src/chrome/content/rules/SitePoint.xml
index b867e35e363f..21913186fff4 100644
--- a/src/chrome/content/rules/SitePoint.xml
+++ b/src/chrome/content/rules/SitePoint.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.sitepoint.com/wp-content/plugins/wp-discourse/css/style.css => https://www.sitepoint.com/wp-content/plugins/wp-discourse/css/style.css: Too many redirects while fetching 'https://www.sitepoint.com/wp-content/plugins/wp-discourse/css/style.css'
+
 	CDN buckets:
 
 		- wac.41aa.edgecastcdn.net/??41AA/
@@ -49,7 +53,7 @@
 		- i2.sitepoint.com		(→ www)
 
 -->
-<ruleset name="SitePoint.com (partial)">
+<ruleset name="SitePoint.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Site_Blindado.xml b/src/chrome/content/rules/Site_Blindado.xml
index ac7816dc6c03..5947dbb3398a 100644
--- a/src/chrome/content/rules/Site_Blindado.xml
+++ b/src/chrome/content/rules/Site_Blindado.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://siteblindado.com/ => https://siteblindado.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	CDN buckets:
 
 		- a248.e.akamai.net/f/248/76110/1h/s3-sa-east-1.amazonaws.com/selo.siteblindado.com/
@@ -29,7 +33,7 @@
 			- www		(→ www.siteblindado.com)
 
 -->
-<ruleset name="Site Blindado">
+<ruleset name="Site Blindado" default_off='failed ruleset test'>
 
 	<target host="siteblindado.com" />
 	<target host="*.siteblindado.com" />
diff --git a/src/chrome/content/rules/Sitizens.xml b/src/chrome/content/rules/Sitizens.xml
index 6bea0191cc8f..b8d1ce37b905 100644
--- a/src/chrome/content/rules/Sitizens.xml
+++ b/src/chrome/content/rules/Sitizens.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://sitizens.com/ => https://sitizens.com/: (28, 'Resolving timed out after 10518 milliseconds')
+
 	Cert only matches ^sitizens.com
 
 -->
-<ruleset name="Sitizens">
+<ruleset name="Sitizens" default_off='failed ruleset test'>
 
 	<target host="sitizens.com" />
 	<target host="*.sitizens.com" />
diff --git a/src/chrome/content/rules/Skat.dk.xml b/src/chrome/content/rules/Skat.dk.xml
index bbddc84c60dd..f6aa33d67276 100644
--- a/src/chrome/content/rules/Skat.dk.xml
+++ b/src/chrome/content/rules/Skat.dk.xml
@@ -1,4 +1,10 @@
-<ruleset name="Skat.dk">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://skat.dk/ => https://www.skat.dk/: (35, 'Unknown SSL protocol error in connection to www.skat.dk:443 ')
+
+-->
+<ruleset name="Skat.dk" default_off='failed ruleset test'>
   <target host="skat.dk" />
   <target host="www.skat.dk" />
 
diff --git a/src/chrome/content/rules/Skyrider_GraalOnline.xml b/src/chrome/content/rules/Skyrider_GraalOnline.xml
index 3c3b06c763d8..0aa85311b4d3 100644
--- a/src/chrome/content/rules/Skyrider_GraalOnline.xml
+++ b/src/chrome/content/rules/Skyrider_GraalOnline.xml
@@ -1,4 +1,10 @@
-<ruleset name="Skyrider GraalOnline">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://skyriderplay.com/ (200) => https://skyriderplay.com/ (521)
+
+-->
+<ruleset name="Skyrider GraalOnline" default_off='failed ruleset test'>
 
 	<target host="skyriderplay.com" />
 	<target host="*.skyriderplay.com" />
diff --git a/src/chrome/content/rules/Slick_Products.xml b/src/chrome/content/rules/Slick_Products.xml
index 89e0d88116b8..22d315a47f1a 100644
--- a/src/chrome/content/rules/Slick_Products.xml
+++ b/src/chrome/content/rules/Slick_Products.xml
@@ -1,4 +1,11 @@
-<ruleset name="Slick Products">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://slickproductsusa.com/ => https://slickproductsusa.com/: Too many redirects while fetching 'https://slickproductsusa.com/'
+Fetch error: http://www.slickproductsusa.com/ => https://www.slickproductsusa.com/: Too many redirects while fetching 'https://www.slickproductsusa.com/'
+
+-->
+<ruleset name="Slick Products" default_off='failed ruleset test'>
 
 	<target host="slickproductsusa.com" />
 	<target host="www.slickproductsusa.com" />
diff --git a/src/chrome/content/rules/SlideShare.xml b/src/chrome/content/rules/SlideShare.xml
index 04ce63d1fabe..90202f2d8f85 100644
--- a/src/chrome/content/rules/SlideShare.xml
+++ b/src/chrome/content/rules/SlideShare.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://premium.slideshare.net/ => https://premium.slideshare.net/: (51, "SSL: no alternative certificate subject name matches target host name 'premium.slideshare.net'")
+
 	For other LinkedIn coverage, see LinkedIn.xml.
 
 
@@ -39,7 +43,7 @@
 		- apiexplorer.slideshare.net
 
 -->
-<ruleset name="SlideShare.net (partial)">
+<ruleset name="SlideShare.net (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/SmartPlanet.com.xml b/src/chrome/content/rules/SmartPlanet.com.xml
index 978b4b7948a1..07e52594f6f1 100644
--- a/src/chrome/content/rules/SmartPlanet.com.xml
+++ b/src/chrome/content/rules/SmartPlanet.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://smartplanet.com/ => https://smartplanet.com/: (35, 'error:14077458:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 unrecognized name')
+Fetch error: http://secure.smartplanet.com/ => https://secure.smartplanet.com/: (6, 'Could not resolve host: secure.smartplanet.com')
+
 	For problematic rules, see SmartPlanet.com-problematic.xml.
 
 	For other CBS coverage, see CBS.xml.
@@ -23,7 +28,7 @@
 	* Secured by us
 
 -->
-<ruleset name="SmartPlanet.com (partial)">
+<ruleset name="SmartPlanet.com (partial)" default_off='failed ruleset test'>
 
 	<target host="smartplanet.com" />
 	<target host="secure.smartplanet.com" />
diff --git a/src/chrome/content/rules/SnapEngage.xml b/src/chrome/content/rules/SnapEngage.xml
index 18dd68a1adb2..be91c1b6984a 100644
--- a/src/chrome/content/rules/SnapEngage.xml
+++ b/src/chrome/content/rules/SnapEngage.xml
@@ -1,4 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://snapengage-1.wpengine.netdna-cdn.com/ (200) => https://snapengage-1.wpengine.com/ (404)
+Non-2xx HTTP code: http://snapengage-3.wpengine.netdna-cdn.com/ (200) => https://snapengage-3.wpengine.com/ (404)
+Non-2xx HTTP code: http://snapengage-4.wpengine.netdna-cdn.com/ (200) => https://snapengage-4.wpengine.com/ (404)
+Non-2xx HTTP code: http://snapengage-5.wpengine.netdna-cdn.com/ (200) => https://snapengage-5.wpengine.com/ (404)
+Non-2xx HTTP code: http://snapengage-8.wpengine.netdna-cdn.com/ (200) => https://snapengage-8.wpengine.com/ (404)
+
 	For rules causing false MCB, see SnapEngage.com-falsemixed.xml.
 
 
@@ -77,7 +85,7 @@
 		- SnapABugVisit
 
 -->
-<ruleset name="SnapEngage (partial)">
+<ruleset name="SnapEngage (partial)" default_off='failed ruleset test'>
 
 	<target host="snapengage-1.wpengine.netdna-cdn.com" />
 	<target host="snapengage-3.wpengine.netdna-cdn.com" />
diff --git a/src/chrome/content/rules/SnugNote.xml b/src/chrome/content/rules/SnugNote.xml
index 3be5e7e766aa..fecd49d6f127 100644
--- a/src/chrome/content/rules/SnugNote.xml
+++ b/src/chrome/content/rules/SnugNote.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://snugnote.com/ => https://snugnote.com/: (6, 'Could not resolve host: snugnote.com')
+
 	CDN buckets:
 
 		- d109v76l78uty1.cloudfront.net
@@ -11,7 +15,7 @@
 		- help		(redirects to http; mismatched, CN: *.desk.com)
 
 -->
-<ruleset name="SnugNote (partial)">
+<ruleset name="SnugNote (partial)" default_off='failed ruleset test'>
 
 	<target host="snugnote.com" />
 	<target host="*.snugnote.com" />
diff --git a/src/chrome/content/rules/SoSci-Survey.xml b/src/chrome/content/rules/SoSci-Survey.xml
index c88e75e63e85..8fea997f567f 100644
--- a/src/chrome/content/rules/SoSci-Survey.xml
+++ b/src/chrome/content/rules/SoSci-Survey.xml
@@ -1,4 +1,10 @@
-<ruleset name="SoSci Survey">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://soscisurvey.de/ => https://soscisurvey.de/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="SoSci Survey" default_off='failed ruleset test'>
 	<target host="soscisurvey.de" />
 	<target host="www.soscisurvey.de" />
 
diff --git a/src/chrome/content/rules/Social_Reader.com.xml b/src/chrome/content/rules/Social_Reader.com.xml
index 0be615702340..cddc3cd207f0 100644
--- a/src/chrome/content/rules/Social_Reader.com.xml
+++ b/src/chrome/content/rules/Social_Reader.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://socialreader.com/ => https://socialreader.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	CDN buckets:
 
 		- d2pe20ur0h0p8p.cloudfront.net
@@ -16,7 +20,7 @@
 		- id
 
 -->
-<ruleset name="Social Reader.com (partial)">
+<ruleset name="Social Reader.com (partial)" default_off='failed ruleset test'>
 
 	<target host="socialreader.com" />
 	<target host="*.socialreader.com" />
diff --git a/src/chrome/content/rules/Sony_Latin_America.xml b/src/chrome/content/rules/Sony_Latin_America.xml
index 754c5fcf6208..2b49dd257863 100644
--- a/src/chrome/content/rules/Sony_Latin_America.xml
+++ b/src/chrome/content/rules/Sony_Latin_America.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://sonystyle.com.mx/ => https://www.sonystyle.com.mx/: (60, 'SSL certificate problem: certificate has expired')
+
 	For other Sony coverage, see Sony.xml.
 
 
@@ -12,7 +16,7 @@
 		- store.sony.com.mx	(some pages redirect to http)
 
 -->
-<ruleset name="Sony Latin America (partial)">
+<ruleset name="Sony Latin America (partial)" default_off='failed ruleset test'>
 
 	<target host="store.sony.com.mx" />
 		<!--exclusion pattern="^http://store\.sony\.com\.mx/mx/site/(?:catalog/CategoryDisplay|catalog/LeafCategory|index|information/Information)\.jsp" /-->
diff --git a/src/chrome/content/rules/Source-Elements.com.xml b/src/chrome/content/rules/Source-Elements.com.xml
index 193e6b66da75..614fd506fbde 100644
--- a/src/chrome/content/rules/Source-Elements.com.xml
+++ b/src/chrome/content/rules/Source-Elements.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Source-Elements.com (partial)">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.source-elements.com/ => https://www.source-elements.com/: Too many redirects while fetching 'https://www.source-elements.com/'
+
+-->
+<ruleset name="Source-Elements.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Sourcefire.com.xml b/src/chrome/content/rules/Sourcefire.com.xml
index dbd4616e707b..e4bcd8cf87c2 100644
--- a/src/chrome/content/rules/Sourcefire.com.xml
+++ b/src/chrome/content/rules/Sourcefire.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://info.sourcefire.com/ => https://info.sourcefire.com/: (7, 'Failed to connect to www.sourcefire.com port 443: Connection refused')
+
 	For other Cisco coverage, see Cisco.xml.
 
 
@@ -17,7 +21,7 @@
 		- info.sourcefire.com
 
 -->
-<ruleset name="Sourcefire.com">
+<ruleset name="Sourcefire.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Spendbitcoins.xml b/src/chrome/content/rules/Spendbitcoins.xml
index e5ebb8188481..5218a3e9eac5 100644
--- a/src/chrome/content/rules/Spendbitcoins.xml
+++ b/src/chrome/content/rules/Spendbitcoins.xml
@@ -1,4 +1,10 @@
-<ruleset name="Spendbitcoins">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://spendbitcoins.com/ => https://spendbitcoins.com/: Too many redirects while fetching 'https://spendbitcoins.com/'
+
+-->
+<ruleset name="Spendbitcoins" default_off='failed ruleset test'>
 
 	<target host="spendbitcoins.com" />
 	<target host="*.spendbitcoins.com" />
diff --git a/src/chrome/content/rules/Spiceworks.xml b/src/chrome/content/rules/Spiceworks.xml
index 866066f31aa2..930149f010dc 100644
--- a/src/chrome/content/rules/Spiceworks.xml
+++ b/src/chrome/content/rules/Spiceworks.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://resources2.spiceworks.com/ => https://resources2.spiceworks.com/: (6, 'Could not resolve host: xadmin.spiceworks.com')
+
 	Problematic hosts in *spiceworks.com:
 
 		- ^ ¹
@@ -35,7 +39,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Spiceworks.com">
+<ruleset name="Spiceworks.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/SplatF.xml b/src/chrome/content/rules/SplatF.xml
index eb835cc1ec82..964cb7df0724 100644
--- a/src/chrome/content/rules/SplatF.xml
+++ b/src/chrome/content/rules/SplatF.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cdn.splatf.com/ => https://dclr8nj9g78hi.cloudfront.net/: (6, 'Could not resolve host: dclr8nj9g78hi.cloudfront.net')
+
 	CDN buckets:
 
 		- dclr8nj9g78hi.cloudfront.net
@@ -11,7 +15,7 @@
 		- (www.)
 
 -->
-<ruleset name="SplatF (partial)">
+<ruleset name="SplatF (partial)" default_off='failed ruleset test'>
 
 	<target host="cdn.splatf.com" />
 
diff --git a/src/chrome/content/rules/Spontex.org.xml b/src/chrome/content/rules/Spontex.org.xml
index 66fe84dcef1e..8dd725ed33d2 100644
--- a/src/chrome/content/rules/Spontex.org.xml
+++ b/src/chrome/content/rules/Spontex.org.xml
@@ -1,4 +1,17 @@
-<ruleset name="Spontex.org" platform="cacert">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://spontex.org/ => https://spontex.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://www.spontex.org/ => https://www.spontex.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://fr.spontex.org/ => https://fr.spontex.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://en.spontex.org/ => https://en.spontex.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://media.spontex.org/ => https://media.spontex.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://stats.spontex.org/ => https://stats.spontex.org/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://m.spontex.org/ => https://m.spontex.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://adminmedia.spontex.org/ => https://adminmedia.spontex.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
+-->
+<ruleset name="Spontex.org" platform="cacert" default_off='failed ruleset test'>
 	<target host="spontex.org" />
 	<target host="www.spontex.org" />
 	<target host="fr.spontex.org" />
diff --git a/src/chrome/content/rules/Squirrel-webmail.surftown.com.xml b/src/chrome/content/rules/Squirrel-webmail.surftown.com.xml
index a5072698dcf4..b5773b324a2b 100644
--- a/src/chrome/content/rules/Squirrel-webmail.surftown.com.xml
+++ b/src/chrome/content/rules/Squirrel-webmail.surftown.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Squirrel-webmail.surftown.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://squirrel-webmail.surftown.com/ => https://squirrel-webmail.surftown.com/: (7, 'Failed to connect to squirrel-webmail.surftown.com port 443: Connection refused')
+
+-->
+<ruleset name="Squirrel-webmail.surftown.com" default_off='failed ruleset test'>
   <target host="squirrel-webmail.surftown.com" />
 
   <rule from="^http://squirrel-webmail\.surftown\.com/" to="https://squirrel-webmail.surftown.com/" />
diff --git a/src/chrome/content/rules/Stadt-bremerhaven.de.xml b/src/chrome/content/rules/Stadt-bremerhaven.de.xml
index 9161694aad63..f01a36209a34 100644
--- a/src/chrome/content/rules/Stadt-bremerhaven.de.xml
+++ b/src/chrome/content/rules/Stadt-bremerhaven.de.xml
@@ -1,4 +1,10 @@
-<ruleset name="Caschys Blog">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://stadt-bremerhaven.de/ => https://stadt-bremerhaven.de/: Too many redirects while fetching 'https://stadt-bremerhaven.de/'
+
+-->
+<ruleset name="Caschys Blog" default_off='failed ruleset test'>
 <target host="stadt-bremerhaven.de"/>
 <target host="*.stadt-bremerhaven.de"/>
 
diff --git a/src/chrome/content/rules/Stalkr.net.xml b/src/chrome/content/rules/Stalkr.net.xml
index 01a064315a0c..4adc6a3852bb 100644
--- a/src/chrome/content/rules/Stalkr.net.xml
+++ b/src/chrome/content/rules/Stalkr.net.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://stalkr.net/ => https://stalkr.net/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.stalkr.net/ => https://www.stalkr.net/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Nonfunctional subdomains:
 
 		- blog *
@@ -6,7 +11,7 @@
 	* Blogger
 
 -->
-<ruleset name="stalkr.net (partial)" platform="cacert">
+<ruleset name="stalkr.net (partial)" platform="cacert" default_off='failed ruleset test'>
 
 	<target host="stalkr.net" />
 	<target host="www.stalkr.net" />
diff --git a/src/chrome/content/rules/Standish-Management.xml b/src/chrome/content/rules/Standish-Management.xml
index e1a97dc5a3f4..8ea493a228d7 100644
--- a/src/chrome/content/rules/Standish-Management.xml
+++ b/src/chrome/content/rules/Standish-Management.xml
@@ -1,4 +1,10 @@
-<ruleset name="Standish Management">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://standishmanagement.com/ => https://standishmanagement.com/: Too many redirects while fetching 'https://standishmanagement.com/'
+
+-->
+<ruleset name="Standish Management" default_off='failed ruleset test'>
 
 	<target host="standishmanagement.com" />
 	<target host="*.standishmanagement.com" />
diff --git a/src/chrome/content/rules/StartCom.xml b/src/chrome/content/rules/StartCom.xml
index 14cf1558b7c7..312123d3c50e 100644
--- a/src/chrome/content/rules/StartCom.xml
+++ b/src/chrome/content/rules/StartCom.xml
@@ -1,4 +1,10 @@
-<ruleset name="StartCom">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://auth.startssl.com/ => https://auth.startssl.com/: (35, 'error:14094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure')
+
+-->
+<ruleset name="StartCom" default_off='failed ruleset test'>
   <target host="startssl.com" />
   <target host="*.startssl.com" />
   <target host="startssl.net" />
diff --git a/src/chrome/content/rules/StatusPage.io.xml b/src/chrome/content/rules/StatusPage.io.xml
index 2be6b4d3679c..2cea7a4be4f5 100644
--- a/src/chrome/content/rules/StatusPage.io.xml
+++ b/src/chrome/content/rules/StatusPage.io.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://help.statuspage.io/ => https://help.statuspage.io/: (51, "SSL: no alternative certificate subject name matches target host name 'help.statuspage.io'")
+
 	CDN buckets:
 
 		- status-page-blog.s3.amazonaws.com
@@ -26,7 +30,7 @@
 		- *		(per-client subdomains)
 
 -->
-<ruleset name="StatusPage.io">
+<ruleset name="StatusPage.io" default_off='failed ruleset test'>
 
 	<target host="statuspage.io" />
 	<target host="*.statuspage.io" />
diff --git a/src/chrome/content/rules/StaySmartOnline.xml b/src/chrome/content/rules/StaySmartOnline.xml
index c855b3425263..dfecfba1cfb7 100644
--- a/src/chrome/content/rules/StaySmartOnline.xml
+++ b/src/chrome/content/rules/StaySmartOnline.xml
@@ -1,4 +1,10 @@
-<ruleset name="Stay Smart Online">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://staysmartonline.gov.au/ => https://www.staysmartonline.gov.au/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
+-->
+<ruleset name="Stay Smart Online" default_off='failed ruleset test'>
 	<target host="staysmartonline.gov.au" />
 	<target host="*.staysmartonline.gov.au" />
 
diff --git a/src/chrome/content/rules/Stpeter.im.xml b/src/chrome/content/rules/Stpeter.im.xml
index 2cc2853acc4f..dd64c389d3ac 100644
--- a/src/chrome/content/rules/Stpeter.im.xml
+++ b/src/chrome/content/rules/Stpeter.im.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://garden.stpeter.im/ => https://garden.stpeter.im/: (51, "SSL: no alternative certificate subject name matches target host name 'garden.stpeter.im'")
+
 	Problematic subdomains:
 
 		- www	(mismatched, CN: mailhost.stpeter.im)
@@ -14,7 +18,7 @@
 		- mailhost
 
 -->
-<ruleset name="stpeter.im">
+<ruleset name="stpeter.im" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Street_Art_Utopia.xml b/src/chrome/content/rules/Street_Art_Utopia.xml
index f8c6b15b4d4d..527c9d4bab6a 100644
--- a/src/chrome/content/rules/Street_Art_Utopia.xml
+++ b/src/chrome/content/rules/Street_Art_Utopia.xml
@@ -1,4 +1,10 @@
-<ruleset name="Street Art Utopia">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://streetartutopia.com/ => https://streetartutopia.com/: Too many redirects while fetching 'https://streetartutopia.com/'
+
+-->
+<ruleset name="Street Art Utopia" default_off='failed ruleset test'>
 
 	<target host="streetartutopia.com" />
 	<target host="*.streetartutopia.com" />
diff --git a/src/chrome/content/rules/Strimoid.pl.xml b/src/chrome/content/rules/Strimoid.pl.xml
index ab34c73d4a1e..15ee98a01d4c 100644
--- a/src/chrome/content/rules/Strimoid.pl.xml
+++ b/src/chrome/content/rules/Strimoid.pl.xml
@@ -1,4 +1,11 @@
-<ruleset name="Strimoid.pl">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://strimoid.pl/ => https://strimoid.pl/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://www.strimoid.pl/ => https://strimoid.pl/: (28, 'Connection timed out after 10001 milliseconds')
+
+-->
+<ruleset name="Strimoid.pl" default_off='failed ruleset test'>
   <target host="strimoid.pl" />
   <target host="www.strimoid.pl" />
 
diff --git a/src/chrome/content/rules/Strugee.net.xml b/src/chrome/content/rules/Strugee.net.xml
index 55603b910d6d..8f55741db032 100644
--- a/src/chrome/content/rules/Strugee.net.xml
+++ b/src/chrome/content/rules/Strugee.net.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.strugee.net/ => https://www.strugee.net/: (51, "SSL: no alternative certificate subject name matches target host name 'www.strugee.net'")
+
 
 	All HTTPS, everywhere.
 
@@ -6,7 +10,7 @@
 
 -->
 
-<ruleset name="strugee.net">
+<ruleset name="strugee.net" default_off='failed ruleset test'>
 	<target host="strugee.net" />
 	<target host="www.strugee.net" />
 
diff --git a/src/chrome/content/rules/Stunnish.com.xml b/src/chrome/content/rules/Stunnish.com.xml
index 6e63c21ab470..20aa4c80c3d5 100644
--- a/src/chrome/content/rules/Stunnish.com.xml
+++ b/src/chrome/content/rules/Stunnish.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://stunnish.com/ (200) => https://www.stunnish.com/ (523)
+
 	Problematic subdomains:
 
 		- ^	(http reply)
@@ -20,7 +24,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Stunnish.com (false MCB)" platform="mixedcontent">
+<ruleset name="Stunnish.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="stunnish.com" />
 	<target host="*.stunnish.com" />
diff --git a/src/chrome/content/rules/Subrosa.io.xml b/src/chrome/content/rules/Subrosa.io.xml
index af2a4bbd3463..5447c2a36678 100644
--- a/src/chrome/content/rules/Subrosa.io.xml
+++ b/src/chrome/content/rules/Subrosa.io.xml
@@ -1,4 +1,10 @@
-<ruleset name="Subrosa.io">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.subrosa.io/ => https://www.subrosa.io/: (6, 'Could not resolve host: www.subrosa.io')
+
+-->
+<ruleset name="Subrosa.io" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Sunbeltsoftware.com.xml b/src/chrome/content/rules/Sunbeltsoftware.com.xml
index 27420f0b0994..af1864eacca9 100644
--- a/src/chrome/content/rules/Sunbeltsoftware.com.xml
+++ b/src/chrome/content/rules/Sunbeltsoftware.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="Sunbeltsoftware.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://sunbeltsoftware.com/ => https://sunbeltsoftware.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.sunbeltsoftware.com/ => https://www.sunbeltsoftware.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Sunbeltsoftware.com" default_off='failed ruleset test'>
 
 	<target host="sunbeltsoftware.com" />
 	<target host="www.sunbeltsoftware.com" />
diff --git a/src/chrome/content/rules/SunoSanuo.com.xml b/src/chrome/content/rules/SunoSanuo.com.xml
index 3bcf0cd9f736..153ccc9be754 100644
--- a/src/chrome/content/rules/SunoSanuo.com.xml
+++ b/src/chrome/content/rules/SunoSanuo.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://app.sunosunao.com/ => https://app.sunosunao.com/: (51, "SSL: no alternative certificate subject name matches target host name 'app.sunosunao.com'")
+
 	For other Chambal coverage, see Chambal.xml.
 
 
@@ -8,7 +12,7 @@
 		- www	(shows app; mismatched, CN: app.sunosunao.com)
 
 -->
-<ruleset name="SunoSanuo.com (partial)">
+<ruleset name="SunoSanuo.com (partial)" default_off='failed ruleset test'>
 
 	<target host="app.sunosunao.com" />
 
diff --git a/src/chrome/content/rules/SuperGuarantee.com.xml b/src/chrome/content/rules/SuperGuarantee.com.xml
index 3b1a0d29962e..a24edb9a3e0d 100644
--- a/src/chrome/content/rules/SuperGuarantee.com.xml
+++ b/src/chrome/content/rules/SuperGuarantee.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.superguarantee.com/ => https://www.superguarantee.com/: Redirect for 'https://www.superguarantee.com/' missing Location
+
 	For other Dex Media coverage, see Dex_Media.com.xml.
 
 
@@ -12,7 +16,7 @@
 		- Bug from fls.doubleclick.net
 
 -->
-<ruleset name="SuperGuarantee.com">
+<ruleset name="SuperGuarantee.com" default_off='failed ruleset test'>
 
 	<target host="superguarantee.com"/>
 	<target host="www.superguarantee.com"/>
diff --git a/src/chrome/content/rules/SuperMedia.xml b/src/chrome/content/rules/SuperMedia.xml
index e6f74d4bb68c..bd53c96b5718 100644
--- a/src/chrome/content/rules/SuperMedia.xml
+++ b/src/chrome/content/rules/SuperMedia.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://my.supermedia.com/ => https://my.supermedia.com/: Redirect for 'https://my.supermedia.com/' missing Location
+
 	For other Dex Media coverage, see Dex_Media.com.xml.
 
 
@@ -11,7 +15,7 @@
 	² Connection refused at redirect destination 
 
 -->
-<ruleset name="SuperMedia.com (partial)">
+<ruleset name="SuperMedia.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Superpages.com.xml b/src/chrome/content/rules/Superpages.com.xml
index c6ab739a3228..80de19a9d0ef 100644
--- a/src/chrome/content/rules/Superpages.com.xml
+++ b/src/chrome/content/rules/Superpages.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://claimlisting.superpages.com/ => https://claimlisting.superpages.com/: Redirect for 'https://claimlisting.superpages.com/' missing Location
+
 	For other Dex Media coverage, see Dex_Media.com.xml.
 
 
@@ -50,7 +54,7 @@
 	² Unsecurable <= redirects to http
 
 -->
-<ruleset name="Superpages.com (partial)">
+<ruleset name="Superpages.com (partial)" default_off='failed ruleset test'>
 
 	<target host="claimlisting.superpages.com"/>
 	<target host="imgssl.superpages.com" />
diff --git a/src/chrome/content/rules/Sweet_and_Sour.xml b/src/chrome/content/rules/Sweet_and_Sour.xml
index 735cc1ba26fa..28b833af9d68 100644
--- a/src/chrome/content/rules/Sweet_and_Sour.xml
+++ b/src/chrome/content/rules/Sweet_and_Sour.xml
@@ -1,4 +1,11 @@
-<ruleset name="Sweet &amp; Sour">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://sweetandsourstudio.com/ => https://sweetandsourstudio.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.sweetandsourstudio.com/ => https://www.sweetandsourstudio.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Sweet &amp; Sour" default_off='failed ruleset test'>
 
 	<target host="sweetandsourstudio.com" />
 	<target host="www.sweetandsourstudio.com" />
diff --git a/src/chrome/content/rules/Swiss-Federal-Railways.xml b/src/chrome/content/rules/Swiss-Federal-Railways.xml
index c3b8d5484710..ed4d6f5bc6a0 100644
--- a/src/chrome/content/rules/Swiss-Federal-Railways.xml
+++ b/src/chrome/content/rules/Swiss-Federal-Railways.xml
@@ -1,4 +1,18 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://freizeit.sbb.ch/ => https://freizeit.sbb.ch/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://freizeit1.sbb.ch/ => https://freizeit1.sbb.ch/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://leisure1.sbb.ch/ => https://leisure1.sbb.ch/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://loisirs.cff.ch/ => https://loisirs.cff.ch/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://loisirs1.cff.ch/ => https://loisirs1.cff.ch/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://loisirs2.cff.ch/ => https://loisirs2.cff.ch/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://loisirs3.cff.ch/ => https://loisirs3.cff.ch/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://tempolibero.ffs.ch/ => https://tempolibero.ffs.ch/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://tempolibero1.ffs.ch/ => https://tempolibero1.ffs.ch/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://tempolibero2.ffs.ch/ => https://tempolibero2.ffs.ch/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://tempolibero3.ffs.ch/ => https://tempolibero3.ffs.ch/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 Mismatch:
 	sbb.ch:
 	-blog
@@ -26,7 +40,7 @@ Redirect:
 	ffs.ch
 	-orario
 -->
-<ruleset name="Swiss Federal Railways (SBB/CFF/FFS)">
+<ruleset name="Swiss Federal Railways (SBB/CFF/FFS)" default_off='failed ruleset test'>
 	<target host="sbb.ch" />
 	<target host="freizeit.sbb.ch" />
 	<target host="freizeit1.sbb.ch" />
diff --git a/src/chrome/content/rules/Swiss.xml b/src/chrome/content/rules/Swiss.xml
index ea2a2293875b..1ef6a1d0639d 100644
--- a/src/chrome/content/rules/Swiss.xml
+++ b/src/chrome/content/rules/Swiss.xml
@@ -1,4 +1,10 @@
-<ruleset name="Swiss.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://my.swiss.com/ => https://my.swiss.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Swiss.com" default_off='failed ruleset test'>
 	<target host="swiss.com"/>
 	<target host="www.swiss.com"/>
 	<target host="lsy-www.swiss.com"/>
diff --git a/src/chrome/content/rules/Swissabroad.ch.xml b/src/chrome/content/rules/Swissabroad.ch.xml
index 5d1d8b520bd3..bead89fba54c 100644
--- a/src/chrome/content/rules/Swissabroad.ch.xml
+++ b/src/chrome/content/rules/Swissabroad.ch.xml
@@ -1,4 +1,10 @@
-<ruleset name="Swissabroad.ch">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.swissabroad.ch/ => https://www.swissabroad.ch/: (7, 'Failed to connect to www.swissabroad.ch port 443: Connection refused')
+
+-->
+<ruleset name="Swissabroad.ch" default_off='failed ruleset test'>
     <target host="www.swissabroad.ch" />
 
     <rule from="^http:"
diff --git a/src/chrome/content/rules/Switch.ch.xml b/src/chrome/content/rules/Switch.ch.xml
index 07821ace0bcb..85677fde689d 100644
--- a/src/chrome/content/rules/Switch.ch.xml
+++ b/src/chrome/content/rules/Switch.ch.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://nic.switch.ch/ => https://nic.switch.ch/: (6, 'Could not resolve host: nic.switch.ch')
+
 	Other SWITCH rulesets:
 
 		- Switchie.ch.xml
@@ -10,7 +14,7 @@
 		- mirror	(dropped)
 
 -->
-<ruleset name="switch.ch">
+<ruleset name="switch.ch" default_off='failed ruleset test'>
 
 	<target host="switch.ch" />
 	<target host="help.switch.ch" />
diff --git a/src/chrome/content/rules/Syncthing.net.xml b/src/chrome/content/rules/Syncthing.net.xml
index 4adacb88e320..b5fb04a8c97e 100644
--- a/src/chrome/content/rules/Syncthing.net.xml
+++ b/src/chrome/content/rules/Syncthing.net.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://discourse.syncthing.net/ => https://discourse.syncthing.net/: (51, "SSL: no alternative certificate subject name matches target host name 'discourse.syncthing.net'")
+
 	Fully covered hosts in *syncthing.net:
 
 		- (www.)?
 		- discourse
 
 -->
-<ruleset name="Syncthing.net">
+<ruleset name="Syncthing.net" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Synergist_SCADA.xml b/src/chrome/content/rules/Synergist_SCADA.xml
index c5b3dcf8a1c1..cc254b753ce8 100644
--- a/src/chrome/content/rules/Synergist_SCADA.xml
+++ b/src/chrome/content/rules/Synergist_SCADA.xml
@@ -1,4 +1,10 @@
-<ruleset name="Synergist SCADA">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://synergistscada.com/ => https://synergistscada.com/: Too many redirects while fetching 'https://synergistscada.com/'
+
+-->
+<ruleset name="Synergist SCADA" default_off='failed ruleset test'>
 
 	<target host="synergistscada.com" />
 	<target host="*.synergistscada.com" />
diff --git a/src/chrome/content/rules/T3.io.xml b/src/chrome/content/rules/T3.io.xml
index ec91ea18835e..59d3cad362a6 100644
--- a/src/chrome/content/rules/T3.io.xml
+++ b/src/chrome/content/rules/T3.io.xml
@@ -1,4 +1,10 @@
-<ruleset name="t3.io">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://t3.io/ => https://t3.io/: (60, 'SSL certificate problem: self signed certificate')
+
+-->
+<ruleset name="t3.io" default_off='failed ruleset test'>
 
 	<target host="t3.io" />
 	<target host="*.t3.io" />
diff --git a/src/chrome/content/rules/TAG_Online.com.xml b/src/chrome/content/rules/TAG_Online.com.xml
index f23e799bfdf7..c696db035964 100644
--- a/src/chrome/content/rules/TAG_Online.com.xml
+++ b/src/chrome/content/rules/TAG_Online.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://tagonline.com/ => https://www.tagonline.com/: Too many redirects while fetching 'https://www.tagonline.com/'
+
 	Nonfunctional subdomains:
 
 		- blog	(refused)
@@ -9,7 +13,7 @@
 		- ^	(cert only matches www)
 
 -->
-<ruleset name="TAG Online.com">
+<ruleset name="TAG Online.com" default_off='failed ruleset test'>
 
 	<target host="tagonline.com" />
 	<target host="*.tagonline.com" />
diff --git a/src/chrome/content/rules/TLS.so.xml b/src/chrome/content/rules/TLS.so.xml
index 656b53767f97..79e30eb6d0fe 100644
--- a/src/chrome/content/rules/TLS.so.xml
+++ b/src/chrome/content/rules/TLS.so.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.tls.so/ => https://www.tls.so/: (51, "SSL: no alternative certificate subject name matches target host name 'www.tls.so'")
+
 	Insecure cookies are set for these domains:
 
 		- .tls.so
 
 -->
-<ruleset name="TLS.so">
+<ruleset name="TLS.so" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/TRUSTe.xml b/src/chrome/content/rules/TRUSTe.xml
index 0018980dc9e3..c0183202af5d 100644
--- a/src/chrome/content/rules/TRUSTe.xml
+++ b/src/chrome/content/rules/TRUSTe.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://connect.truste.com/ => https://connect.truste.com/: (6, 'Could not resolve host: connect.truste.com')
+Fetch error: http://privacy.truste.com/ => https://privacy.truste.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	Problematic subdomains:
 
 		- ^	(cert only matches *.truste.com)
@@ -38,7 +43,7 @@
 		- www.truste.com
 
 -->
-<ruleset name="TRUSTe.com (partial)">
+<ruleset name="TRUSTe.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/TTIP-Stoppen.at.xml b/src/chrome/content/rules/TTIP-Stoppen.at.xml
index d64e2e8f0fc8..b5ed8f10fe8b 100644
--- a/src/chrome/content/rules/TTIP-Stoppen.at.xml
+++ b/src/chrome/content/rules/TTIP-Stoppen.at.xml
@@ -1,8 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ttip-stoppen.at/ => https://ttip-stoppen.at/: (51, "SSL: no alternative certificate subject name matches target host name 'ttip-stoppen.at'")
+Fetch error: http://www.ttip-stoppen.at/ => https://ttip-stoppen.at/: (51, "SSL: no alternative certificate subject name matches target host name 'ttip-stoppen.at'")
+
 	www.ttip-stoppen.at: Mismatched
 
 -->
-<ruleset name="TTIP-Stoppen.at">
+<ruleset name="TTIP-Stoppen.at" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/TankaFetast.com.xml b/src/chrome/content/rules/TankaFetast.com.xml
index 89038b84cca5..8ea9b1fd90d7 100644
--- a/src/chrome/content/rules/TankaFetast.com.xml
+++ b/src/chrome/content/rules/TankaFetast.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://tankafetast.com/ => https://tankafetast.com/: (35, 'error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error')
+
 	Mixed content:
 
 		- Web bug on (www.) track.adform.net *
@@ -6,7 +10,7 @@
 	* Secured by us
 
 -->
-<ruleset name="TankaFetast.com">
+<ruleset name="TankaFetast.com" default_off='failed ruleset test'>
 
 	<target host="tankafetast.com" />
 	<target host="*.tankafetast.com" />
diff --git a/src/chrome/content/rules/Tesco_Diets.com.xml b/src/chrome/content/rules/Tesco_Diets.com.xml
index 746ee90235f7..04536dde1064 100644
--- a/src/chrome/content/rules/Tesco_Diets.com.xml
+++ b/src/chrome/content/rules/Tesco_Diets.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://tescodiets.com/ => https://tescodiets.com/: (51, "SSL: no alternative certificate subject name matches target host name 'tescodiets.com'")
+Fetch error: http://www.tescodiets.com/ => https://www.tescodiets.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.tescodiets.com'")
+
 	For other Tesco coverage, see Tesco.com.xml.
 
 
@@ -12,7 +17,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Tesco Diets.com">
+<ruleset name="Tesco Diets.com" default_off='failed ruleset test'>
 
 	<target host="tescodiets.com" />
 	<target host="www.tescodiets.com" />
diff --git a/src/chrome/content/rules/Tesco_Share_and_Earn.com.xml b/src/chrome/content/rules/Tesco_Share_and_Earn.com.xml
index 4954bd94686d..5ca8507fdae3 100644
--- a/src/chrome/content/rules/Tesco_Share_and_Earn.com.xml
+++ b/src/chrome/content/rules/Tesco_Share_and_Earn.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Tesco Share and Earn.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://tescoshareandearn.com/ => https://tescoshareandearn.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
+-->
+<ruleset name="Tesco Share and Earn.com" default_off='failed ruleset test'>
 
 	<target host="tescoshareandearn.com" />
 	<target host="*.tescoshareandearn.com" />
diff --git a/src/chrome/content/rules/Texas-Instruments.xml b/src/chrome/content/rules/Texas-Instruments.xml
index 6f71bd51b580..124a8f4bc54d 100644
--- a/src/chrome/content/rules/Texas-Instruments.xml
+++ b/src/chrome/content/rules/Texas-Instruments.xml
@@ -1,4 +1,11 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://www-k.ext.ti.com/sc/technical-support/pic/americas.htm (200) => https://www.ti.com/ww/en/csc/support-Americas.html (404)
+Non-2xx HTTP code: http://www-k.ext.ti.com/sc/technical-support/pic/americas.htm? (200) => https://www.ti.com/ww/en/csc/support-Americas.html (404)
+Non-2xx HTTP code: http://www-k.ext.ti.com/sc/technical-support/pic/americas.htm?f (200) => https://www.ti.com/ww/en/csc/support-Americas.html (404)
+Non-2xx HTTP code: http://www-k.ext.ti.com/sc/technical-support/pic/americas.htm?o (200) => https://www.ti.com/ww/en/csc/support-Americas.html (404)
+
 	Texas Instruments
 
 
@@ -70,7 +77,7 @@
 	* Secured by us
 
 -->
-<ruleset name="TI.com (partial)">
+<ruleset name="TI.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/ThankYou.com.xml b/src/chrome/content/rules/ThankYou.com.xml
index d73ee186f047..dfe39f2e7af4 100644
--- a/src/chrome/content/rules/ThankYou.com.xml
+++ b/src/chrome/content/rules/ThankYou.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://shopping.thankyou.com/ => https://shopping.thankyou.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	For other Citigroup coverage, see Citigroup.com.xml.
 
 
@@ -30,7 +34,7 @@
 	p://travel is different from s://travel, but appears unused.
 
 -->
-<ruleset name="ThankYou.com">
+<ruleset name="ThankYou.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/The-Best-Hosting.xml b/src/chrome/content/rules/The-Best-Hosting.xml
index 432282cd769e..11d28802bfb4 100644
--- a/src/chrome/content/rules/The-Best-Hosting.xml
+++ b/src/chrome/content/rules/The-Best-Hosting.xml
@@ -1,4 +1,11 @@
-<ruleset name="The Best Hosting">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://the-best-hosting.net/ => https://the-best-hosting.net/: (6, 'Could not resolve host: the-best-hosting.net')
+Fetch error: http://www.the-best-hosting.net/ => https://www.the-best-hosting.net/: (6, 'Could not resolve host: www.the-best-hosting.net')
+
+-->
+<ruleset name="The Best Hosting" default_off='failed ruleset test'>
 
 	<target host="the-best-hosting.net"/>
 	<target host="www.the-best-hosting.net"/>
diff --git a/src/chrome/content/rules/The-Diplomat.xml b/src/chrome/content/rules/The-Diplomat.xml
index 9937f167972b..dd8379357095 100644
--- a/src/chrome/content/rules/The-Diplomat.xml
+++ b/src/chrome/content/rules/The-Diplomat.xml
@@ -1,4 +1,11 @@
-<ruleset name="The Diplomat">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://thediplomat.com/ => https://thediplomat.com/: Too many redirects while fetching 'https://thediplomat.com/'
+Fetch error: http://www.thediplomat.com/ => https://thediplomat.com/: Too many redirects while fetching 'https://thediplomat.com/'
+
+-->
+<ruleset name="The Diplomat" default_off='failed ruleset test'>
 
 	<target host="thediplomat.com" />
 	<target host="www.thediplomat.com" />
diff --git a/src/chrome/content/rules/The_109.xml b/src/chrome/content/rules/The_109.xml
index 6cbcc38ec726..221609f0a69b 100644
--- a/src/chrome/content/rules/The_109.xml
+++ b/src/chrome/content/rules/The_109.xml
@@ -1,4 +1,10 @@
-<ruleset name="The 109">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://the109.org/ => https://the109.org/: (7, 'Failed to connect to the109.org port 443: Connection refused')
+
+-->
+<ruleset name="The 109" default_off='failed ruleset test'>
 
 	<target host="the109.org" />
 	<target host="*.the109.org" />
diff --git a/src/chrome/content/rules/Thefind.xml b/src/chrome/content/rules/Thefind.xml
index c5592d564145..684e1d4d018b 100644
--- a/src/chrome/content/rules/Thefind.xml
+++ b/src/chrome/content/rules/Thefind.xml
@@ -1,4 +1,11 @@
-<ruleset name="TheFind">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://s.tfcdn.com/ => https://www.thefind.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://thefind.com/ => https://thefind.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="TheFind" default_off='failed ruleset test'>
 
 	<target host="s.tfcdn.com" />
 	<target host="thefind.com" />
diff --git a/src/chrome/content/rules/Themes_and_Co.com.xml b/src/chrome/content/rules/Themes_and_Co.com.xml
index cbd1fdcc54b6..6141cca2f934 100644
--- a/src/chrome/content/rules/Themes_and_Co.com.xml
+++ b/src/chrome/content/rules/Themes_and_Co.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.themesandco.com/ => https://www.themesandco.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.themesandco.com'")
+
 	Problematic subdomains:
 
 		- demo *
@@ -6,7 +10,7 @@
 	* Self-signed
 
 -->
-<ruleset name="Themes and Co.com">
+<ruleset name="Themes and Co.com" default_off='failed ruleset test'>
 
 	<target host="themesandco.com" />
 	<target host="www.themesandco.com" />
diff --git a/src/chrome/content/rules/Thijs_Alkema.de.xml b/src/chrome/content/rules/Thijs_Alkema.de.xml
index 6a35254f937c..148a411416ab 100644
--- a/src/chrome/content/rules/Thijs_Alkema.de.xml
+++ b/src/chrome/content/rules/Thijs_Alkema.de.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://thijsalkema.de/ => https://thijsalkema.de/: (51, "SSL: no alternative certificate subject name matches target host name 'thijsalkema.de'")
+Fetch error: http://www.thijsalkema.de/ => https://thijsalkema.de/: (51, "SSL: no alternative certificate subject name matches target host name 'thijsalkema.de'")
+
 	Problematic subdomains:
 
 		- www	(mismatched, CN: www.xnyhps.nl)
@@ -17,7 +22,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Thijs Alkema.de">
+<ruleset name="Thijs Alkema.de" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Thompson_Hotels.com-falsemixed.xml b/src/chrome/content/rules/Thompson_Hotels.com-falsemixed.xml
index 462597fb5147..ee1657217a7e 100644
--- a/src/chrome/content/rules/Thompson_Hotels.com-falsemixed.xml
+++ b/src/chrome/content/rules/Thompson_Hotels.com-falsemixed.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://thompsonhotels.com/ => https://www.thompsonhotels.com/: (52, 'Empty reply from server')
+
 	For rules not causing false/broken MCB, see Thompson_Hotels.com.xml.
 
 -->
-<ruleset name="Thompson Hotels.com (false MCB)" platform="mixedcontent">
+<ruleset name="Thompson Hotels.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="thompsonhotels.com" />
 	<target host="*.thompsonhotels.com" />
diff --git a/src/chrome/content/rules/Tires_N_Wheels.xml b/src/chrome/content/rules/Tires_N_Wheels.xml
index 64a462d45c37..ba9724472ef0 100644
--- a/src/chrome/content/rules/Tires_N_Wheels.xml
+++ b/src/chrome/content/rules/Tires_N_Wheels.xml
@@ -1,4 +1,10 @@
-<ruleset name="Tires N' Wheels">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://tiresnwheels.ca/ => https://tiresnwheels.ca/: Too many redirects while fetching 'https://tiresnwheels.ca/'
+
+-->
+<ruleset name="Tires N' Wheels" default_off='failed ruleset test'>
 
 	<target host="tiresnwheels.ca" />
 	<target host="*.tiresnwheels.ca" />
diff --git a/src/chrome/content/rules/Titanshare.to.xml b/src/chrome/content/rules/Titanshare.to.xml
index ef281012a6a8..8171d873e8ea 100644
--- a/src/chrome/content/rules/Titanshare.to.xml
+++ b/src/chrome/content/rules/Titanshare.to.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://titanshare.to/ => https://titanshare.to/: Too many redirects while fetching 'https://titanshare.to/'
+
 	Mixed content:
 
 		- Ads/web bugs, from:
@@ -10,7 +14,7 @@
 	² Unsecurable <= 404
 
 -->
-<ruleset name="Titanshare.to">
+<ruleset name="Titanshare.to" default_off='failed ruleset test'>
 
 	<target host="titanshare.to" />
 	<target host="*.titanshare.to" />
diff --git a/src/chrome/content/rules/Toolbox.com.xml b/src/chrome/content/rules/Toolbox.com.xml
index c632900cb6e5..a1188ff0aaec 100644
--- a/src/chrome/content/rules/Toolbox.com.xml
+++ b/src/chrome/content/rules/Toolbox.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cdn.toolbox.com/ => https://a248.e.akamai.net/f/90/3687/9/cdn.toolbox.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	For othe Ziff Davis coverage, see Ziff-Davis.xml.
 
 
@@ -10,7 +14,7 @@
 			- cdn
 
 -->
-<ruleset name="Toolbox.com (partial)">
+<ruleset name="Toolbox.com (partial)" default_off='failed ruleset test'>
 
 	<target host="cdn.toolbox.com" />
 
diff --git a/src/chrome/content/rules/Translink.xml b/src/chrome/content/rules/Translink.xml
index 97064b0127a1..73b9a09ea5ca 100644
--- a/src/chrome/content/rules/Translink.xml
+++ b/src/chrome/content/rules/Translink.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://translink.co.uk/ => https://www.translink.co.uk/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	!www times out/
 
 -->
-<ruleset name="Translink">
+<ruleset name="Translink" default_off='failed ruleset test'>
 
 	<target host="translink.co.uk" />
 	<target host="*.translink.co.uk" />
diff --git a/src/chrome/content/rules/Trendin.com.xml b/src/chrome/content/rules/Trendin.com.xml
index 6026da6c1637..a3c78c1ec82a 100644
--- a/src/chrome/content/rules/Trendin.com.xml
+++ b/src/chrome/content/rules/Trendin.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Trendin.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://trendin.com/ => https://trendin.com/: Too many redirects while fetching 'https://trendin.com/'
+
+-->
+<ruleset name="Trendin.com" default_off='failed ruleset test'>
 
 	<target host="trendin.com" />
 	<target host="*.trendin.com" />
diff --git a/src/chrome/content/rules/Troveread.com.xml b/src/chrome/content/rules/Troveread.com.xml
index 22f1c81562d9..211c1dc58020 100644
--- a/src/chrome/content/rules/Troveread.com.xml
+++ b/src/chrome/content/rules/Troveread.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://troveread.com/ => https://socialreader.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	CDN buckets:
 
 		- dizqy8916g7hx.cloudfront.net
@@ -12,7 +16,7 @@
 	www doesn't exist.
 
 -->
-<ruleset name="troveread.com">
+<ruleset name="troveread.com" default_off='failed ruleset test'>
 
 	<target host="troveread.com" />
 	<target host="s.troveread.com" />
diff --git a/src/chrome/content/rules/Tube4.me.xml b/src/chrome/content/rules/Tube4.me.xml
index c956117e7df3..7dfa187c7371 100644
--- a/src/chrome/content/rules/Tube4.me.xml
+++ b/src/chrome/content/rules/Tube4.me.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://tube4.me/ => https://tube4.me/: (60, 'SSL certificate problem: self signed certificate')
+
 	Mixed content:
 
 		- Images from (www.) *
@@ -6,7 +10,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Tube4.me">
+<ruleset name="Tube4.me" default_off='failed ruleset test'>
 
 	<target host="tube4.me" />
 	<target host="*.tube4.me" />
diff --git a/src/chrome/content/rules/TubeOffline.com.xml b/src/chrome/content/rules/TubeOffline.com.xml
index 465aad0f174b..d22e54332ffa 100644
--- a/src/chrome/content/rules/TubeOffline.com.xml
+++ b/src/chrome/content/rules/TubeOffline.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://tubeoffline.com/ => https://tubeoffline.com/: Too many redirects while fetching 'https://tubeoffline.com/'
+Fetch error: http://www.tubeoffline.com/ => https://www.tubeoffline.com/: Too many redirects while fetching 'https://www.tubeoffline.com/'
+
 	Fully covered hosts in *tubeoffline.com:
 
 		- (www.)?
@@ -16,7 +21,7 @@
 	* Secured by us
 
 -->
-<ruleset name="TubeOffline.com">
+<ruleset name="TubeOffline.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Tucows.xml b/src/chrome/content/rules/Tucows.xml
index 3ed997f673c6..06f778743669 100644
--- a/src/chrome/content/rules/Tucows.xml
+++ b/src/chrome/content/rules/Tucows.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://contact-privacy.com/ => http://contact-privacy.com/: (28, 'Resolving timed out after 10520 milliseconds')
+
 	See Tucows-mismatches.xml for problematic rules.
 
 
@@ -18,7 +22,7 @@
 	² Refused
 
 -->
-<ruleset name="Tucows (partial)">
+<ruleset name="Tucows (partial)" default_off='failed ruleset test'>
 
 	<target host="contact-privacy.com" />
 	<target host="support.ispbilling.com" />
diff --git a/src/chrome/content/rules/Turn_On_Social.xml b/src/chrome/content/rules/Turn_On_Social.xml
index 74a11fc591ce..0e072b75ef8d 100644
--- a/src/chrome/content/rules/Turn_On_Social.xml
+++ b/src/chrome/content/rules/Turn_On_Social.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://turnonsocial.com/ => https://turnonsocial.com/: (51, "SSL: no alternative certificate subject name matches target host name 'turnonsocial.com'")
+
 	www doesn't exist.
 
 
@@ -11,7 +15,7 @@
 	* 404; mismatched, CN: *.netdna-ssl.com
 
 -->
-<ruleset name="Turn On Social">
+<ruleset name="Turn On Social" default_off='failed ruleset test'>
 
 	<target host="turnonsocial.com" />
 	<target host="*.turnonsocial.com" />
diff --git a/src/chrome/content/rules/Twimg.com.xml b/src/chrome/content/rules/Twimg.com.xml
index cb7855f0329f..b6472679031e 100644
--- a/src/chrome/content/rules/Twimg.com.xml
+++ b/src/chrome/content/rules/Twimg.com.xml
@@ -1,4 +1,12 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://a6.twimg.com/ => https://a6.twimg.com/: (7, 'Failed to connect to a6.twimg.com port 443: Network is unreachable')
+Fetch error: http://a8.twimg.com/ => https://a8.twimg.com/: (6, 'Could not resolve host: a8.twimg.com')
+Fetch error: http://a9.twimg.com/ => https://a9.twimg.com/: (6, 'Could not resolve host: a9.twimg.com')
+
+-->
+
 <!--
 	For other Twitter coverage, see Twitter.xml.
 
@@ -58,7 +66,7 @@
 		- vmtc.twimg.com
 
 -->
-<ruleset name="Twimg.com">
+<ruleset name="Twimg.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 					-->
diff --git a/src/chrome/content/rules/Twitter.xml b/src/chrome/content/rules/Twitter.xml
index f040a681b6bc..f56647969171 100644
--- a/src/chrome/content/rules/Twitter.xml
+++ b/src/chrome/content/rules/Twitter.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://preview.cdn.twitter.com/ => https://preview.cdn.twitter.com/: (6, 'Could not resolve host: preview.cdn.twitter.com')
+Fetch error: http://preview-stage.cdn.twitter.com/ => https://preview-stage.cdn.twitter.com/: (28, 'Resolving timed out after 10519 milliseconds')
+
 	NB: If a host ceases to exist, just remove the respective test.
 
 
@@ -98,7 +103,7 @@
 		- Image on status from 38.media.tumblr.com
 
 -->
-<ruleset name="Twitter.com">
+<ruleset name="Twitter.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 					-->
diff --git a/src/chrome/content/rules/UBS.xml b/src/chrome/content/rules/UBS.xml
index 4e33cbac8583..9eb0655e1599 100644
--- a/src/chrome/content/rules/UBS.xml
+++ b/src/chrome/content/rules/UBS.xml
@@ -1,4 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://connect.ubs.com/ => https://connect.ubs.com/: (7, 'Failed to connect to connect.ubs.com port 443: Connection refused')
+Fetch error: http://ebanking-us.ubs.com/ => https://ebanking-us.ubs.com/: (51, "SSL: no alternative certificate subject name matches target host name 'ebanking-us.ubs.com'")
+Fetch error: http://onesource.ubs.com/ => https://onesource.ubs.com/: (28, 'Resolving timed out after 10519 milliseconds')
+Fetch error: http://www1.ubs.com/ => https://www1.ubs.com/: (7, 'Failed to connect to www1.ubs.com port 443: Connection refused')
+Fetch error: http://www2.ubs.com/ => https://www2.ubs.com/: (7, 'Failed to connect to www2.ubs.com port 443: Connection refused')
+
 	Nonfunctional ubs.com subdomains:
 
 		- financialservicesinc		(times out)
@@ -70,7 +78,7 @@
 		- www.ubs.com
 
 -->
-<ruleset name="UBS (partial)">
+<ruleset name="UBS (partial)" default_off='failed ruleset test'>
 	<target host="ubs.com" />
 	<target host="*.ubs.com" />
 	<target host="*.ibb.ubs.com" />
diff --git a/src/chrome/content/rules/UOL.xml b/src/chrome/content/rules/UOL.xml
index a2f73668cd68..afe0e697b8f1 100644
--- a/src/chrome/content/rules/UOL.xml
+++ b/src/chrome/content/rules/UOL.xml
@@ -1,4 +1,11 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://tracker.shopping.uol.com.br/ => https://tracker.shopping.uol.com.br/: (6, 'Could not resolve host: tracker.shopping.uol.com.br')
+Non-2xx HTTP code: http://tts.uol.com.br/ (200) => https://tts.uol.com.br/ (500)
+
+-->
+
 <!--
 	For rules causing MCB, see UOL.com.br-falsemixed.xml.
 
@@ -138,7 +145,7 @@
 		- Ads on todaoferta from www.googleadservices.com
 
 -->
-<ruleset name="UOL.com.br (partial)">
+<ruleset name="UOL.com.br (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 					-->
diff --git a/src/chrome/content/rules/Udemy.com.xml b/src/chrome/content/rules/Udemy.com.xml
index cb5091d5c26d..9a3becd3d9a9 100644
--- a/src/chrome/content/rules/Udemy.com.xml
+++ b/src/chrome/content/rules/Udemy.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://httpproxy.udemy.com/ (200) => https://httpproxy.udemy.com/ (404)
+
 	CDN buckets:
 
 		- www-udemy-com.global.ssl.fastly.net
@@ -32,7 +36,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Udemy.com">
+<ruleset name="Udemy.com" default_off='failed ruleset test'>
 
 	<target host="udemy.com" />
 	<target host="about.udemy.com" />
diff --git a/src/chrome/content/rules/Udistrital.xml b/src/chrome/content/rules/Udistrital.xml
index 79ee5128b52e..112496f792ef 100644
--- a/src/chrome/content/rules/Udistrital.xml
+++ b/src/chrome/content/rules/Udistrital.xml
@@ -1,4 +1,11 @@
-<ruleset name="Universidad Distrital" platform="firefox">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://udistrital.edu.co/ => https://udistrital.edu.co/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+Fetch error: http://www.udistrital.edu.co/ => https://udistrital.edu.co/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+
+-->
+<ruleset name="Universidad Distrital" platform="firefox" default_off='failed ruleset test'>
 
        <target host="udistrital.edu.co" />
        <target host="www.udistrital.edu.co" />
diff --git a/src/chrome/content/rules/Uguu.se.xml b/src/chrome/content/rules/Uguu.se.xml
index 9ccf37298504..c6fa55520297 100644
--- a/src/chrome/content/rules/Uguu.se.xml
+++ b/src/chrome/content/rules/Uguu.se.xml
@@ -1,4 +1,12 @@
-<ruleset name="Uguu.se" >
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://uguu.se/ => https://uguu.se/: (7, 'Failed to connect to uguu.se port 443: Connection refused')
+Fetch error: http://www.uguu.se/ => https://www.uguu.se/: (7, 'Failed to connect to www.uguu.se port 443: Connection refused')
+Fetch error: http://a.uguu.se/ => https://a.uguu.se/: (7, 'Failed to connect to a.uguu.se port 443: Connection refused')
+
+-->
+<ruleset name="Uguu.se"  default_off='failed ruleset test'>
 	<target host="uguu.se" />
 	<target host="www.uguu.se" />
 	<target host="a.uguu.se" />
diff --git a/src/chrome/content/rules/Uhub.xml b/src/chrome/content/rules/Uhub.xml
index 308a49a3dd04..e77399e7ec46 100644
--- a/src/chrome/content/rules/Uhub.xml
+++ b/src/chrome/content/rules/Uhub.xml
@@ -1,4 +1,10 @@
-<ruleset name="uhub">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://uhub.org/ => https://uhub.org/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="uhub" default_off='failed ruleset test'>
 
 	<target host="uhub.org" />
 	<target host="www.uhub.org" />
diff --git a/src/chrome/content/rules/UltraNature_Lean.xml b/src/chrome/content/rules/UltraNature_Lean.xml
index c82d5c865801..9e413e4b83ae 100644
--- a/src/chrome/content/rules/UltraNature_Lean.xml
+++ b/src/chrome/content/rules/UltraNature_Lean.xml
@@ -1,4 +1,10 @@
-<ruleset name="UltraNature Lean">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ultranaturelean.com/ => https://ultranaturelean.com/: (6, 'Could not resolve host: ultranaturelean.com')
+
+-->
+<ruleset name="UltraNature Lean" default_off='failed ruleset test'>
 
 	<target host="ultranaturelean.com" />
 	<target host="*.ultranaturelean.com" />
diff --git a/src/chrome/content/rules/Ultra_Facil.com.br.xml b/src/chrome/content/rules/Ultra_Facil.com.br.xml
index 5318c035f88c..7af1a4969e9d 100644
--- a/src/chrome/content/rules/Ultra_Facil.com.br.xml
+++ b/src/chrome/content/rules/Ultra_Facil.com.br.xml
@@ -1,4 +1,10 @@
-<ruleset name="Ultra Facil.com.br">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ultrafacil.com.br/ => https://ultrafacil.com.br/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+
+-->
+<ruleset name="Ultra Facil.com.br" default_off='failed ruleset test'>
 
 	<target host="ultrafacil.com.br" />
 	<target host="*.ultrafacil.com.br" />
diff --git a/src/chrome/content/rules/Umbel.com.xml b/src/chrome/content/rules/Umbel.com.xml
index 8639cde24a2f..7ed87015ffd5 100644
--- a/src/chrome/content/rules/Umbel.com.xml
+++ b/src/chrome/content/rules/Umbel.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://api.umbel.com/ => https://api.umbel.com/: Too many redirects while fetching 'https://api.umbel.com/'
+
 	CDN buckets:
 
 		- sitemedia-umbel.netdna-ssl.com
@@ -17,7 +21,7 @@
 		- media
 
 -->
-<ruleset name="Umbel.com">
+<ruleset name="Umbel.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Umea_Hackerspace.se.xml b/src/chrome/content/rules/Umea_Hackerspace.se.xml
index 3dca04b3cb12..bbc97f66b889 100644
--- a/src/chrome/content/rules/Umea_Hackerspace.se.xml
+++ b/src/chrome/content/rules/Umea_Hackerspace.se.xml
@@ -1,4 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://umeahackerspace.se/ => https://umeahackerspace.se/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://social.umeahackerspace.se/ => https://social.umeahackerspace.se/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://stuff.umeahackerspace.se/ => https://stuff.umeahackerspace.se/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://wiki.umeahackerspace.se/ => https://wiki.umeahackerspace.se/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://www.umeahackerspace.se/ => https://www.umeahackerspace.se/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
 	Umeå Hackerspace
 
 
@@ -22,7 +30,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Umea Hackerspace.se" platform="cacert">
+<ruleset name="Umea Hackerspace.se" platform="cacert" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Unbit.it.xml b/src/chrome/content/rules/Unbit.it.xml
index cc75b42c7cac..9f36d7a5cab5 100644
--- a/src/chrome/content/rules/Unbit.it.xml
+++ b/src/chrome/content/rules/Unbit.it.xml
@@ -1,4 +1,10 @@
-<ruleset name="Unbit.it (partial)" platform="mixedcontent">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://unbit.it/ => https://unbit.it/: Too many redirects while fetching 'https://unbit.it/'
+
+-->
+<ruleset name="Unbit.it (partial)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="unbit.it"/>
 	<target host="*.unbit.it"/>
diff --git a/src/chrome/content/rules/Unitarian_Universalist_Association_of_Congregations.xml b/src/chrome/content/rules/Unitarian_Universalist_Association_of_Congregations.xml
index 02ef98233843..90af990f774b 100644
--- a/src/chrome/content/rules/Unitarian_Universalist_Association_of_Congregations.xml
+++ b/src/chrome/content/rules/Unitarian_Universalist_Association_of_Congregations.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://uua.org/ => https://uua.org/: (51, "SSL: no alternative certificate subject name matches target host name 'uua.org'")
+
 	Nonfunctional subdomains:
 
 		- img	(shows www, valid cert)
@@ -7,7 +11,7 @@
 	Mixed images from img
 
 -->
-<ruleset name="Unitarian Universalist Association of Congregations (partial)">
+<ruleset name="Unitarian Universalist Association of Congregations (partial)" default_off='failed ruleset test'>
 
 	<target host="uua.org" />
 	<target host="www.uua.org" />
diff --git a/src/chrome/content/rules/Universite_Laval.xml b/src/chrome/content/rules/Universite_Laval.xml
index 31a91274386e..ae609f1d1b81 100644
--- a/src/chrome/content/rules/Universite_Laval.xml
+++ b/src/chrome/content/rules/Universite_Laval.xml
@@ -1,4 +1,16 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.aide.ulaval.ca/ => https://www.aide.ulaval.ca/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://dsnacc.dti.ulaval.ca/ => https://dsnacc.dti.ulaval.ca/: (6, 'Could not resolve host: dsnacc.dti.ulaval.ca')
+Fetch error: http://www.dsnacc.dti.ulaval.ca/ => https://www.dsnacc.dti.ulaval.ca/: (6, 'Could not resolve host: www.dsnacc.dti.ulaval.ca')
+Fetch error: http://leel.ecn.ulaval.ca/ => https://leel.ecn.ulaval.ca/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.modules.fd.ulaval.ca/ => https://www.modules.fd.ulaval.ca/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://fesp.ulaval.ca/ => https://fesp.ulaval.ca/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.fesp.ulaval.ca/ => https://www.fesp.ulaval.ca/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://intranet.rh.ulaval.ca/ => https://intranet.rh.ulaval.ca/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://viraj.ulaval.ca/ => https://viraj.ulaval.ca/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Known nonfunctional sub domains as of 02/2015:
 		- aelies (self signed certificate)
 		- arcticnet (invalid certificate)
@@ -31,7 +43,7 @@
 		- sgc (does not load)
 
 -->
-<ruleset name="Universit&#233; Laval (partial)">
+<ruleset name="Universit&#233; Laval (partial)" default_off='failed ruleset test'>
 	<target host="ulaval.ca" />
 	<target host="www.ulaval.ca" />
 	<target host="www2.ulaval.ca" />
diff --git a/src/chrome/content/rules/University-of-California-Berkeley.xml b/src/chrome/content/rules/University-of-California-Berkeley.xml
index 030dc608a1a5..b7dadf52d088 100644
--- a/src/chrome/content/rules/University-of-California-Berkeley.xml
+++ b/src/chrome/content/rules/University-of-California-Berkeley.xml
@@ -1,8 +1,17 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://beartracks-new.berkeley.edu/ => https://beartracks-new.berkeley.edu/: (7, 'Failed to connect to beartracks-new.berkeley.edu port 443: Connection refused')
+Fetch error: http://wikihub-new.berkeley.edu/ => https://wikihub-new.berkeley.edu/: (7, 'Failed to connect to wikihub-new.berkeley.edu port 443: Connection refused')
+Fetch error: http://accounts-dev.ocf.berkeley.edu/ => https://accounts-dev.ocf.berkeley.edu/: (6, 'Could not resolve host: accounts-dev.ocf.berkeley.edu')
+Fetch error: http://puppet.ocf.berkeley.edu/ => https://puppet.ocf.berkeley.edu/: (28, 'Connection timed out after 10001 milliseconds')
+Fetch error: http://fortuna.security.berkeley.edu/ => https://fortuna.security.berkeley.edu/: (7, 'Failed to connect to fortuna.security.berkeley.edu port 443: No route to host')
+Fetch error: http://urshare-prod1.urel.berkeley.edu/ => https://urshare-prod1.urel.berkeley.edu/: (28, 'Connection timed out after 10001 milliseconds')
+
 	University of California, Berkeley
 	http://www.berkeley.edu/
 -->
-<ruleset name="Berkeley.edu (partial)">
+<ruleset name="Berkeley.edu (partial)" default_off='failed ruleset test'>
 	<target host="airbears.berkeley.edu" />
 	<target host="asterix.berkeley.edu" />
 	<target host="atcal.berkeley.edu" />
diff --git a/src/chrome/content/rules/University-of-Maryland.xml b/src/chrome/content/rules/University-of-Maryland.xml
index beb6802ebb35..ff53ed9904b1 100644
--- a/src/chrome/content/rules/University-of-Maryland.xml
+++ b/src/chrome/content/rules/University-of-Maryland.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://lib.umd.edu/ => https://lib.umd.edu/: (51, "SSL: no alternative certificate subject name matches target host name 'lib.umd.edu'")
+
 	University of Maryland
 
 
@@ -114,7 +118,7 @@
 	* Secured by us
 
 -->
-<ruleset name="UMd.edu (partial)">
+<ruleset name="UMd.edu (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/University-of-Michigan.xml b/src/chrome/content/rules/University-of-Michigan.xml
index 84fa73000ce0..9785c38027e4 100644
--- a/src/chrome/content/rules/University-of-Michigan.xml
+++ b/src/chrome/content/rules/University-of-Michigan.xml
@@ -1,4 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://friend.umich.edu/ => https://friend.umich.edu/: (6, 'Could not resolve host: friend.umich.edu')
+Fetch error: http://law.umich.edu/ => https://law.umich.edu/: (51, "SSL: no alternative certificate subject name matches target host name 'law.umich.edu'")
+Fetch error: http://lsa.umich.edu/ => https://lsa.umich.edu/: (51, "SSL: no alternative certificate subject name matches target host name 'lsa.umich.edu'")
+Fetch error: http://servicerequest.umich.edu/ => https://servicerequest.umich.edu/: (6, 'Could not resolve host: servicerequest.umich.edu')
+Fetch error: http://www.lsa.umich.edu/ => https://lsa.umich.edu/: (51, "SSL: no alternative certificate subject name matches target host name 'lsa.umich.edu'")
+
 	University of Michigan
 
 
@@ -67,7 +75,7 @@
 		- friend.weblogin.umich.edu
 
 -->
-<ruleset name="UMich.edu (partial)">
+<ruleset name="UMich.edu (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Uppsalahem.se.xml b/src/chrome/content/rules/Uppsalahem.se.xml
index 338101d70083..5308046bd556 100644
--- a/src/chrome/content/rules/Uppsalahem.se.xml
+++ b/src/chrome/content/rules/Uppsalahem.se.xml
@@ -1,4 +1,10 @@
-<ruleset name="Uppsalahem.se">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://kund.uppsalahem.se/ => https://kund.uppsalahem.se/: (6, 'Could not resolve host: pa.uppsalahem.se')
+
+-->
+<ruleset name="Uppsalahem.se" default_off='failed ruleset test'>
         <target host="uppsalahem.se" />
 	<target host="www.uppsalahem.se" />
         <target host="kund.uppsalahem.se" />
diff --git a/src/chrome/content/rules/Userium.com.xml b/src/chrome/content/rules/Userium.com.xml
index f6bcdf98303f..acc959270b9b 100644
--- a/src/chrome/content/rules/Userium.com.xml
+++ b/src/chrome/content/rules/Userium.com.xml
@@ -1,4 +1,11 @@
-<ruleset name="Userium.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://userium.com/ => https://userium.com/: (51, "SSL: no alternative certificate subject name matches target host name 'userium.com'")
+Fetch error: http://www.userium.com/ => https://www.userium.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.userium.com'")
+
+-->
+<ruleset name="Userium.com" default_off='failed ruleset test'>
 
 	<target host="userium.com" />
 	<target host="www.userium.com" />
diff --git a/src/chrome/content/rules/UsplusU.com.xml b/src/chrome/content/rules/UsplusU.com.xml
index 2c07f2cea817..21a379d33ab9 100644
--- a/src/chrome/content/rules/UsplusU.com.xml
+++ b/src/chrome/content/rules/UsplusU.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="UsplusU.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://usplusu.com/ => https://usplusu.com/: (51, "SSL: no alternative certificate subject name matches target host name 'usplusu.com'")
+
+-->
+<ruleset name="UsplusU.com" default_off='failed ruleset test'>
 
 	<target host="usplusu.com" />
 	<target host="*.usplusu.com" />
diff --git a/src/chrome/content/rules/Utah-Education-Network.xml b/src/chrome/content/rules/Utah-Education-Network.xml
index caa0d6bcf6c0..d29d13717cd1 100644
--- a/src/chrome/content/rules/Utah-Education-Network.xml
+++ b/src/chrome/content/rules/Utah-Education-Network.xml
@@ -1,8 +1,12 @@
-<!--	!functional:
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://uen.org/ => https://www.eun.org/: (28, 'Connection timed out after 10000 milliseconds')
+	!functional:
 		- uen.org/^(css|images)+/.+
 		- pioneer.uen.org
 -->
-<ruleset name="Utah Education Network (partial)">
+<ruleset name="Utah Education Network (partial)" default_off='failed ruleset test'>
 
 	<target host="uen.org"/>
 	<target host="online.uen.org"/>
diff --git a/src/chrome/content/rules/VMware.xml b/src/chrome/content/rules/VMware.xml
index a54744a97d9b..6d799aa4a26a 100644
--- a/src/chrome/content/rules/VMware.xml
+++ b/src/chrome/content/rules/VMware.xml
@@ -1,4 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://campaign.wmware.com/ => https://campaign.wmware.com/: (6, 'Could not resolve host: campaign.wmware.com')
+Fetch error: http://communities.wmware.com/ => https://communities.wmware.com/: (6, 'Could not resolve host: communities.wmware.com')
+Fetch error: http://download3.wmware.com/ => https://download3.wmware.com/: (6, 'Could not resolve host: download3.wmware.com')
+Fetch error: http://downloads.wmware.com/ => https://downloads.wmware.com/: (6, 'Could not resolve host: downloads.wmware.com')
+Fetch error: http://my.wmware.com/ => https://my.wmware.com/: (6, 'Could not resolve host: my.wmware.com')
+Fetch error: http://solutionexchange.wmware.com/ => https://solutionexchange.wmware.com/: (6, 'Could not resolve host: solutionexchange.wmware.com')
+Fetch error: http://store.wmware.com/ => https://store.wmware.com/: (6, 'Could not resolve host: store.wmware.com')
+Fetch error: http://www.wmware.com/ => https://www.wmware.com/: (7, 'Failed to connect to www.wmware.com port 443: Connection refused')
+
 	info is handled in Eloqua-clients.xml.
 
 	Other VMware rulesets:
@@ -65,7 +76,7 @@
 	* Secured by us
 
 -->
-<ruleset name="VMware.com (partial)">
+<ruleset name="VMware.com (partial)" default_off='failed ruleset test'>
 
 	<target host="vmware.com" />
 	<target host="*.vmware.com" />
diff --git a/src/chrome/content/rules/Valve.xml b/src/chrome/content/rules/Valve.xml
index ac6bd4a72e8c..5dd24f8db2d0 100644
--- a/src/chrome/content/rules/Valve.xml
+++ b/src/chrome/content/rules/Valve.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://valvesoftware.com/ => https://valvesoftware.com/: Too many redirects while fetching 'https://valvesoftware.com/'
+Fetch error: http://www.valvesoftware.com/ => https://www.valvesoftware.com/: Too many redirects while fetching 'https://www.valvesoftware.com/'
+
 	Other Valve rulesets:
 
 		- Dota_2.com.xml
@@ -37,7 +42,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Valve Software.com (partial)">
+<ruleset name="Valve Software.com (partial)" default_off='failed ruleset test'>
 
 	<target host="valvesoftware.com" />
 	<target host="developer.valvesoftware.com" />
diff --git a/src/chrome/content/rules/Variety_Latino.com.xml b/src/chrome/content/rules/Variety_Latino.com.xml
index 361f9828c745..6db2eb3c0f5d 100644
--- a/src/chrome/content/rules/Variety_Latino.com.xml
+++ b/src/chrome/content/rules/Variety_Latino.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="Variety Latino.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.varietylatino.com/ => https://www.varietylatino.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.varietylatino.com'")
+
+-->
+<ruleset name="Variety Latino.com" default_off='failed ruleset test'>
 
 	<target host="varietylatino.com" />
 	<target host="www.varietylatino.com" />
diff --git a/src/chrome/content/rules/Vegas_Deal_Hunter.xml b/src/chrome/content/rules/Vegas_Deal_Hunter.xml
index 8b4c09a45c57..e9dd1f93b514 100644
--- a/src/chrome/content/rules/Vegas_Deal_Hunter.xml
+++ b/src/chrome/content/rules/Vegas_Deal_Hunter.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://vegasdealhunter.com/ => https://www.vegasdealhunter.com/: (7, 'Failed to connect to www.vegasdealhunter.com port 443: Connection refused')
+
 	^ times out
 
 -->
-<ruleset name="Vegas Deal Hunter">
+<ruleset name="Vegas Deal Hunter" default_off='failed ruleset test'>
 
 	<target host="vegasdealhunter.com" />
 	<target host="*.vegasdealhunter.com" />
diff --git a/src/chrome/content/rules/VersionHistory.io.xml b/src/chrome/content/rules/VersionHistory.io.xml
index 13ce99dca841..5ede21d4049e 100644
--- a/src/chrome/content/rules/VersionHistory.io.xml
+++ b/src/chrome/content/rules/VersionHistory.io.xml
@@ -1,10 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://versionhistory.io/ => https://versionhistory.io/: (6, 'Could not resolve host: versionhistory.io')
+Fetch error: http://www.versionhistory.io/ => https://versionhistory.io/: (6, 'Could not resolve host: versionhistory.io')
+
 	meta: Redirects to http
 
 	www: Cert only matches ^versionhistory.io
 
 -->
-<ruleset name="VersionHistory.io (partial)">
+<ruleset name="VersionHistory.io (partial)" default_off='failed ruleset test'>
 
 	<target host="versionhistory.io" />
 	<target host="www.versionhistory.io" />
diff --git a/src/chrome/content/rules/Vesess.xml b/src/chrome/content/rules/Vesess.xml
index 3d29259aa94a..2df45f7045db 100644
--- a/src/chrome/content/rules/Vesess.xml
+++ b/src/chrome/content/rules/Vesess.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://app.curdbee.com/ => https://app.curdbee.com/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
 	For problematic rules, see Vesess-expired.xml.
 
 
@@ -11,7 +15,7 @@
 		- (www.)vesess.com	(cert: *.websitewelcome.com; shows directory tree)
 
 -->
-<ruleset name="Vesess (partial)">
+<ruleset name="Vesess (partial)" default_off='failed ruleset test'>
 
 	<target host="app.curdbee.com" />
 
diff --git a/src/chrome/content/rules/Vice.xml b/src/chrome/content/rules/Vice.xml
index 5763cf7366a8..aebd900bd4d1 100644
--- a/src/chrome/content/rules/Vice.xml
+++ b/src/chrome/content/rules/Vice.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://assets-i-d.vice.com/ => https://d1wzhalc7g55g3.cloudfront.net/: (6, 'Could not resolve host: d1wzhalc7g55g3.cloudfront.net')
+
 	For problematic rules, see Vice-problematic.xml.
 
 
@@ -116,7 +120,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Vice.com (partial)">
+<ruleset name="Vice.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Victorias_Secret.xml b/src/chrome/content/rules/Victorias_Secret.xml
index ef8183064759..fd50e80bcf18 100644
--- a/src/chrome/content/rules/Victorias_Secret.xml
+++ b/src/chrome/content/rules/Victorias_Secret.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://dm.victoriassecret.com/ => https://dm.victoriassecret.com/: (52, 'Empty reply from server')
+
 	Victoria's Secret
 
 	Other Victoria's Secret rulesets:
@@ -37,7 +41,7 @@
 		- .www.victoriassecret.com
 
 -->
-<ruleset name="Victorias Secret.com (partial)">
+<ruleset name="Victorias Secret.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/VideoHub.tv.xml b/src/chrome/content/rules/VideoHub.tv.xml
index 6b122e31604d..3e60fb020a2f 100644
--- a/src/chrome/content/rules/VideoHub.tv.xml
+++ b/src/chrome/content/rules/VideoHub.tv.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://marketplace.videohub.tv/ => https://marketplace.videohub.tv/: (7, 'Failed to connect to marketplace.videohub.tv port 443: Connection refused')
+Fetch error: http://publishers.videohub.tv/ => https://publishers.videohub.tv/: (6, 'Could not resolve host: publishers.videohub.tv')
+
 	For other Tremor Video coverage, see Tremor_Video.com.xml.
 
 
@@ -15,7 +20,7 @@
 		- publishers
 
 -->
-<ruleset name="VideoHub.tv (partial)">
+<ruleset name="VideoHub.tv (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Videodroid.org.xml b/src/chrome/content/rules/Videodroid.org.xml
index 397ccd1b031e..168b03fc14a9 100644
--- a/src/chrome/content/rules/Videodroid.org.xml
+++ b/src/chrome/content/rules/Videodroid.org.xml
@@ -1,4 +1,10 @@
-<ruleset name="Videodroid.org">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://videodroid.org/ (200) => https://www.videodroid.org/ (403)
+
+-->
+<ruleset name="Videodroid.org" default_off='failed ruleset test'>
   <target host="videodroid.org" />
   <target host="www.videodroid.org" />
 
diff --git a/src/chrome/content/rules/Vidup.me-falsemixed.xml b/src/chrome/content/rules/Vidup.me-falsemixed.xml
index ab4cf8a6e78d..c35764659d3e 100644
--- a/src/chrome/content/rules/Vidup.me-falsemixed.xml
+++ b/src/chrome/content/rules/Vidup.me-falsemixed.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://vidup.me/ => https://vidup.me/: (7, 'Failed to connect to vidup.me port 443: Connection refused')
+
 	For rules not causing false/broken MCB, see Vidup.me.xml.
 
 -->
-<ruleset name="Vidup.me (fales MCB)" platform="mixedcontent">
+<ruleset name="Vidup.me (fales MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="vidup.me" />
 	<target host="*.vidup.me" />
diff --git a/src/chrome/content/rules/Vie_Pratique.fr.xml b/src/chrome/content/rules/Vie_Pratique.fr.xml
index e619f6cbaf7f..bc2c6d9c7851 100644
--- a/src/chrome/content/rules/Vie_Pratique.fr.xml
+++ b/src/chrome/content/rules/Vie_Pratique.fr.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://viepratique.fr/ (200) => https://www.viepratique.fr/ (521)
+
 	Nonfunctional subdomains:
 
 		- coffretgourmand *
@@ -24,7 +28,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Vie Pratique.fr (partial)">
+<ruleset name="Vie Pratique.fr (partial)" default_off='failed ruleset test'>
 
 	<target host="viepratique.fr" />
 	<target host="*.viepratique.fr" />
diff --git a/src/chrome/content/rules/Virginia-Polytechnic-Institute-and-State-University.xml b/src/chrome/content/rules/Virginia-Polytechnic-Institute-and-State-University.xml
index f65e95be9e2f..4c8799de142e 100644
--- a/src/chrome/content/rules/Virginia-Polytechnic-Institute-and-State-University.xml
+++ b/src/chrome/content/rules/Virginia-Polytechnic-Institute-and-State-University.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://filebox.vt.edu/ => https://filebox.vt.edu/: (7, 'Failed to connect to filebox.vt.edu port 443: Connection refused')
+Non-2xx HTTP code: http://ulfs.lib.vt.edu/ (200) => https://ulfs.lib.vt.edu/ (403)
+Fetch error: http://confluence.research.vt.edu/ => https://confluence.research.vt.edu/: (28, 'Connection timed out after 10000 milliseconds')
+
 	Virginia Polytechnic Institute and State University
 
 
@@ -87,7 +93,7 @@
 		- (www.)vtnews
 
 -->
-<ruleset name="VT.edu (partial)">
+<ruleset name="VT.edu (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Virtual_News_Center.xml b/src/chrome/content/rules/Virtual_News_Center.xml
index ca6d3d25b4a8..dd25ab8feb74 100644
--- a/src/chrome/content/rules/Virtual_News_Center.xml
+++ b/src/chrome/content/rules/Virtual_News_Center.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://virtualnewscenter.wpengine.netdna-cdn.com/ => https://virtualnewscenter.com/: Too many redirects while fetching 'https://virtualnewscenter.com/'
+Fetch error: http://virtualnewscenter.com/ => https://virtualnewscenter.com/: Too many redirects while fetching 'https://virtualnewscenter.com/'
+
 	CDN buckets:
 
 		- virtualnewscenter.wpengine.netdna-cdn.com
@@ -6,7 +11,7 @@
 			- ssl does not exist
 
 -->
-<ruleset name="Virtual News Center">
+<ruleset name="Virtual News Center" default_off='failed ruleset test'>
 
 	<target host="virtualnewscenter.wpengine.netdna-cdn.com" />
 	<target host="virtualnewscenter.com" />
diff --git a/src/chrome/content/rules/Vitamin_Shoppe.xml b/src/chrome/content/rules/Vitamin_Shoppe.xml
index def9db042cd7..ab51b8b0a7b5 100644
--- a/src/chrome/content/rules/Vitamin_Shoppe.xml
+++ b/src/chrome/content/rules/Vitamin_Shoppe.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://vitaminshoppe.com/ => https://www.vitaminshoppe.com/: Too many redirects while fetching 'https://www.vitaminshoppe.com/'
+
 	vitaminshoppe.liveclicker.com
 
 		- video
@@ -26,7 +30,7 @@
 	² Unsecurable <= dropped
 
 -->
-<ruleset name="Vitamin Shoppe.com (partial)">
+<ruleset name="Vitamin Shoppe.com (partial)" default_off='failed ruleset test'>
 
 	<target host="vitaminshoppe.com" />
 	<target host="*.vitaminshoppe.com" />
diff --git a/src/chrome/content/rules/Vox_Media.com.xml b/src/chrome/content/rules/Vox_Media.com.xml
index fdefceb0214f..d4f72577c026 100644
--- a/src/chrome/content/rules/Vox_Media.com.xml
+++ b/src/chrome/content/rules/Vox_Media.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cdn.hymnal.voxmedia.com/ => https://cdn.hymnal.voxmedia.com/: (51, "SSL: no alternative certificate subject name matches target host name 'cdn.hymnal.voxmedia.com'")
+
 	For other Vox Media coverage, see Vox.com.xml.
 
 
@@ -57,7 +61,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Vox Media.com (false MCB)" platform="mixedcontent">
+<ruleset name="Vox Media.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/WLxrs.com.xml b/src/chrome/content/rules/WLxrs.com.xml
index cbeaf95c6d95..12d5cbb0e07f 100644
--- a/src/chrome/content/rules/WLxrs.com.xml
+++ b/src/chrome/content/rules/WLxrs.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://skydrive.wlxrs.com/ => https://skydrive.wlxrs.com/: (6, 'Could not resolve host: skydrive.wlxrs.com')
+
 	For other Microsoft coverage, see Microsoft.xml.
 
 
@@ -11,7 +15,7 @@
 			- skydrive
 
 -->
-<ruleset name="WLxrs.com">
+<ruleset name="WLxrs.com" default_off='failed ruleset test'>
 
 	<target host="*.wlxrs.com" />
 
diff --git a/src/chrome/content/rules/WTFismyIP.xml b/src/chrome/content/rules/WTFismyIP.xml
index 0c1ea677027d..20d6f5e25e75 100644
--- a/src/chrome/content/rules/WTFismyIP.xml
+++ b/src/chrome/content/rules/WTFismyIP.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ipv6.wtfismyip.com/ => https://ipv6.wtfismyip.com/: (7, '')
+
 	Fully covered hosts:
 
 		- (www.)?
@@ -6,7 +10,7 @@
 		- ipv6
 
 -->
-<ruleset name="WTF is my IP.com">
+<ruleset name="WTF is my IP.com" default_off='failed ruleset test'>
 	<target host="wtfismyip.com" />
 	<target host="ipv4.wtfismyip.com" />
 	<target host="ipv6.wtfismyip.com" />
diff --git a/src/chrome/content/rules/WalletGenerator.net.xml b/src/chrome/content/rules/WalletGenerator.net.xml
index 254f59426d7a..2eb3551b4ad9 100644
--- a/src/chrome/content/rules/WalletGenerator.net.xml
+++ b/src/chrome/content/rules/WalletGenerator.net.xml
@@ -1,4 +1,10 @@
-<ruleset name="WalletGenerator.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.walletgenerator.net/ => https://www.walletgenerator.net/: (60, 'SSL certificate problem: self signed certificate')
+
+-->
+<ruleset name="WalletGenerator.net" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Wash_Post.com.xml b/src/chrome/content/rules/Wash_Post.com.xml
index 644b11391d6f..ad7e47508b73 100644
--- a/src/chrome/content/rules/Wash_Post.com.xml
+++ b/src/chrome/content/rules/Wash_Post.com.xml
@@ -1,8 +1,12 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://washpost.com/ => https://washpost.com/: (6, 'Could not resolve host: washpost.com')
+
 	For other Washington Post Company coverage, see Washington-Post-Company.xml.
 
 -->
-<ruleset name="Wash Post.com">
+<ruleset name="Wash Post.com" default_off='failed ruleset test'>
 
 	<target host="washpost.com" />
 	<target host="*.washpost.com" />
diff --git a/src/chrome/content/rules/Wauland.de.xml b/src/chrome/content/rules/Wauland.de.xml
index 468d136ceddb..677e65909490 100644
--- a/src/chrome/content/rules/Wauland.de.xml
+++ b/src/chrome/content/rules/Wauland.de.xml
@@ -1,4 +1,11 @@
-<ruleset name="Wauland.de">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://wauland.de/ => https://wauland.de/: (35, 'error:04091068:rsa routines:INT_RSA_VERIFY:bad signature')
+Fetch error: http://www.wauland.de/ => https://www.wauland.de/: (35, 'error:04091068:rsa routines:INT_RSA_VERIFY:bad signature')
+
+-->
+<ruleset name="Wauland.de" default_off='failed ruleset test'>
 	<target host="wauland.de" />
 	<target host="www.wauland.de" />
 
diff --git a/src/chrome/content/rules/WeGotEd.com.xml b/src/chrome/content/rules/WeGotEd.com.xml
index 78a3c921dc40..587952247b6f 100644
--- a/src/chrome/content/rules/WeGotEd.com.xml
+++ b/src/chrome/content/rules/WeGotEd.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://wegoted.com/ => https://wegoted.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.wegoted.com/ => https://www.wegoted.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	Mixed content:
 
 		- css from fonts.googleapis.com *
@@ -8,7 +13,7 @@
 	* Secured by us
 
 -->
-<ruleset name="WeGotEd.com">
+<ruleset name="WeGotEd.com" default_off='failed ruleset test'>
 
 	<target host="wegoted.com" />
 	<target host="www.wegoted.com" />
diff --git a/src/chrome/content/rules/WeGotWax.com.xml b/src/chrome/content/rules/WeGotWax.com.xml
index 14346049faaa..93e2ba8facc0 100644
--- a/src/chrome/content/rules/WeGotWax.com.xml
+++ b/src/chrome/content/rules/WeGotWax.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="WeGotWax.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://wegotwax.com/ => https://www.wegotwax.com/: (35, 'Unknown SSL protocol error in connection to www.wegotwax.com:443 ')
+
+-->
+<ruleset name="WeGotWax.com" default_off='failed ruleset test'>
 
 	<target host="wegotwax.com" />
 	<target host="*.wegotwax.com" />
diff --git a/src/chrome/content/rules/WebINK.com.xml b/src/chrome/content/rules/WebINK.com.xml
index a02eb219bcaa..56bf084f75b2 100644
--- a/src/chrome/content/rules/WebINK.com.xml
+++ b/src/chrome/content/rules/WebINK.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://app.webink.com/ => https://app.webink.com/: Too many redirects while fetching 'https://app.webink.com/'
+
 	For other Celartem coverage, see Celartem.xml.
 
 
@@ -37,7 +41,7 @@
 	* Secured by us
 
 -->
-<ruleset name="WebINK.com (partial)">
+<ruleset name="WebINK.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/WebSanity.xml b/src/chrome/content/rules/WebSanity.xml
index 1a68e2fc02bd..c4c699dbca06 100644
--- a/src/chrome/content/rules/WebSanity.xml
+++ b/src/chrome/content/rules/WebSanity.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://traffic.websanity.com/ => https://traffic.websanity.com/: (6, 'Could not resolve host: traffic.websanity.com')
+
 	Nonfunctional hosts in *websanity.com:
 
 		- ^ ¹
@@ -8,7 +12,7 @@
 	² Refused
 
 -->
-<ruleset name="WebSanity.com (partial)">
+<ruleset name="WebSanity.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/WebShopRevolution.com.xml b/src/chrome/content/rules/WebShopRevolution.com.xml
index 70f114b40905..bc41ec5bff8d 100644
--- a/src/chrome/content/rules/WebShopRevolution.com.xml
+++ b/src/chrome/content/rules/WebShopRevolution.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="WebShop Revolution">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://webshoprevolution.com/ => https://webshoprevolution.com/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="WebShop Revolution" default_off='failed ruleset test'>
     
     <!-- WebShop Revolution Sites and Client Shops -->
     <target host="webshoprevolution.com" />
diff --git a/src/chrome/content/rules/WebTrust.xml b/src/chrome/content/rules/WebTrust.xml
index 6030525850e8..c04369c515f7 100644
--- a/src/chrome/content/rules/WebTrust.xml
+++ b/src/chrome/content/rules/WebTrust.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://cert.webtrust.org/ (200) => https://cert.webtrust.org/ (403)
+Non-2xx HTTP code: http://entrust.webtrust.org/ (200) => https://entrust.webtrust.org/ (403)
+
 	Nonfunctional subdomains:
 
 		- (www.) *
@@ -6,7 +11,7 @@
 	* Reset
 
 -->
-<ruleset name="WebTrust.org (partial)">
+<ruleset name="WebTrust.org (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Web_Foundation.org.xml b/src/chrome/content/rules/Web_Foundation.org.xml
index 492ffc9305d3..fd3747a9050f 100644
--- a/src/chrome/content/rules/Web_Foundation.org.xml
+++ b/src/chrome/content/rules/Web_Foundation.org.xml
@@ -1,4 +1,11 @@
-<ruleset name="Web Foundation.org">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://webfoundation.org/ => https://webfoundation.org/: Too many redirects while fetching 'https://webfoundation.org/'
+Fetch error: http://www.webfoundation.org/ => https://www.webfoundation.org/: Too many redirects while fetching 'https://www.webfoundation.org/'
+
+-->
+<ruleset name="Web Foundation.org" default_off='failed ruleset test'>
 
 	<target host="webfoundation.org" />
 	<target host="www.webfoundation.org" />
diff --git a/src/chrome/content/rules/Webento.xml b/src/chrome/content/rules/Webento.xml
index 218b6ab221a6..d3918a45553a 100644
--- a/src/chrome/content/rules/Webento.xml
+++ b/src/chrome/content/rules/Webento.xml
@@ -1,4 +1,10 @@
-<ruleset name="Webento">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://webento.com/ => https://webento.com/: (35, 'error:14077438:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error')
+
+-->
+<ruleset name="Webento" default_off='failed ruleset test'>
 
 	<target host="webento.com" />
 	<target host="*.webento.com" />
diff --git a/src/chrome/content/rules/Weboolu.xml b/src/chrome/content/rules/Weboolu.xml
index 19ee7f8dec1c..c8901336c12a 100644
--- a/src/chrome/content/rules/Weboolu.xml
+++ b/src/chrome/content/rules/Weboolu.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://weboolu.com/ => https://weboolu.com/: (7, 'Failed to connect to weboolu.com port 443: Connection refused')
+
 	Nonfunctional domains:
 
 		- developer.weboolu.com
 
 -->
-<ruleset name="Weboolu (partial)">
+<ruleset name="Weboolu (partial)" default_off='failed ruleset test'>
 
 	<target host="weboolu.com" />
 	<target host="*.weboolu.com" />
diff --git a/src/chrome/content/rules/Webroot.com.xml b/src/chrome/content/rules/Webroot.com.xml
index 8731ec55a584..cca65a4426dd 100644
--- a/src/chrome/content/rules/Webroot.com.xml
+++ b/src/chrome/content/rules/Webroot.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://webroot.com/ => https://webroot.com/: (28, 'Resolving timed out after 10519 milliseconds')
+
 	Mixed content:
 
 		- Images on community from $self *
@@ -9,7 +13,7 @@
 	www: some pages redirect to http
 
 -->
-<ruleset name="Webroot.com (partial)">
+<ruleset name="Webroot.com (partial)" default_off='failed ruleset test'>
 
 	<target host="webroot.com" />
 	<target host="*.webroot.com" />
diff --git a/src/chrome/content/rules/WebsiteGrowers.com.xml b/src/chrome/content/rules/WebsiteGrowers.com.xml
index 7796cb6eb923..fb3d87baf348 100644
--- a/src/chrome/content/rules/WebsiteGrowers.com.xml
+++ b/src/chrome/content/rules/WebsiteGrowers.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="WebsiteGrowers.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://websitegrowers.com/ => https://websitegrowers.com/: Too many redirects while fetching 'https://websitegrowers.com/'
+
+-->
+<ruleset name="WebsiteGrowers.com" default_off='failed ruleset test'>
 
 	<target host="websitegrowers.com" />
 	<target host="*.websitegrowers.com" />
diff --git a/src/chrome/content/rules/Webtrends.com.xml b/src/chrome/content/rules/Webtrends.com.xml
index 79a45bec41fd..21d69ad0f3db 100644
--- a/src/chrome/content/rules/Webtrends.com.xml
+++ b/src/chrome/content/rules/Webtrends.com.xml
@@ -1,4 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://auth.webtrends.com/ => https://auth.webtrends.com/: (28, 'Connection timed out after 10001 milliseconds')
+Fetch error: http://blackberry.webtrends.com/ => https://blackberry.webtrends.com/: (6, 'Could not resolve host: blackberry.webtrends.com')
+Fetch error: http://connect.webtrends.com/ => https://connect.webtrends.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://uat.connect.webtrends.com/ => https://uat.connect.webtrends.com/: (6, 'Could not resolve host: uat.connect.webtrends.com')
+Fetch error: http://apps.uat.connect.webtrends.com/ => https://apps.uat.connect.webtrends.com/: (6, 'Could not resolve host: apps.uat.connect.webtrends.com')
+Fetch error: http://developer.webtrends.com/ => https://developer.webtrends.com/: (28, 'Operation timed out after 15002 milliseconds with 0 bytes received')
+
 	Tracking network, included on lots of sites. may carry banners.
 	If we are to download their content, at least do it by https.
 
@@ -81,7 +90,7 @@
 		- .www.webtrends.com
 
 -->
-<ruleset name="Webtrends.com (partial)">
+<ruleset name="Webtrends.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Western_Union.xml b/src/chrome/content/rules/Western_Union.xml
index 6f2cbf1a07ad..cf86fa5b8f9f 100644
--- a/src/chrome/content/rules/Western_Union.xml
+++ b/src/chrome/content/rules/Western_Union.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://wupaymentsolutions.com/ => https://wupaymentsolutions.com/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://www.wupaymentsolutions.com/ => https://www.wupaymentsolutions.com/: (60, 'SSL certificate problem: certificate has expired')
+
 		- westernunion.com.d1.sc.omtrdc.net
 
 			- metrics
@@ -43,7 +48,7 @@
 		- (www.)wupaymentsolutions.com
 
 -->
-<ruleset name="Western Union (partial)">
+<ruleset name="Western Union (partial)" default_off='failed ruleset test'>
 
 	<target host="*.westernunion.com" />
 	<target host="wupaymentsolutions.com" />
diff --git a/src/chrome/content/rules/Wikimedia.xml b/src/chrome/content/rules/Wikimedia.xml
index 07c42e0aafc1..245216b674a4 100644
--- a/src/chrome/content/rules/Wikimedia.xml
+++ b/src/chrome/content/rules/Wikimedia.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://icinga.wmflabs.org/ => https://icinga.wmflabs.org/: (6, 'Could not resolve host: icinga.wmflabs.org')
+Fetch error: http://ganglia.wmflabs.org/ => https://ganglia.wmflabs.org/: (6, 'Could not resolve host: ganglia.wmflabs.org')
+
 	Wikipedia and other Wikimedia Foundation wikis previously had no real HTTPS support, and
 	URLs had to be rewritten to https://secure.wikimedia.org/$wikitype/$language/ . This is no
 	longer the case, see https://blog.wikimedia.org/2011/10/03/native-https-support-enabled-for-all-wikimedia-foundation-wikis/ ,
@@ -31,7 +36,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Wikimedia">
+<ruleset name="Wikimedia" default_off='failed ruleset test'>
 
 	<target host="enwp.org" />
 	<target host="frwp.org" />
diff --git a/src/chrome/content/rules/Wildcard_Corp.com.xml b/src/chrome/content/rules/Wildcard_Corp.com.xml
index 20d2efc5c22b..3ddc277b6062 100644
--- a/src/chrome/content/rules/Wildcard_Corp.com.xml
+++ b/src/chrome/content/rules/Wildcard_Corp.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://assemblys.net/ => https://assemblys.net/: (6, 'Could not resolve host: assemblys.net')
+
 	Other Wildcard Corp rulesets:
 
 		- Cdig.me.xml
@@ -19,7 +23,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Wildcard Corp.com">
+<ruleset name="Wildcard Corp.com" default_off='failed ruleset test'>
 
 	<target host="assemblys.net" />
 	<target host="*.assemblys.net" />
diff --git a/src/chrome/content/rules/Wilde_Beuger_Solmecke.xml b/src/chrome/content/rules/Wilde_Beuger_Solmecke.xml
index a02dd8be9e84..0d59015f7f30 100644
--- a/src/chrome/content/rules/Wilde_Beuger_Solmecke.xml
+++ b/src/chrome/content/rules/Wilde_Beuger_Solmecke.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://wbs-law.de/ => https://wbs-law.de/: (51, "SSL: no alternative certificate subject name matches target host name 'wbs-law.de'")
+
 	Problematic subdomains:
 
 		- ^	(self-signed, mismatched; CN: 17833.whserv.de)		
 
 -->
-<ruleset name="Wilde Beuger Solmecke">
+<ruleset name="Wilde Beuger Solmecke" default_off='failed ruleset test'>
 	<target host="wbs-law.de" />
 	<target host="www.wbs-law.de" />
 
diff --git a/src/chrome/content/rules/Wiley.xml b/src/chrome/content/rules/Wiley.xml
index ffa970900aed..ba7d26dd0408 100644
--- a/src/chrome/content/rules/Wiley.xml
+++ b/src/chrome/content/rules/Wiley.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://sp.onlinelibrary.wiley.com/ (200) => https://sp.onlinelibrary.wiley.com/ (403)
+
 	Nonfunctional subdomains:
 
 		- bcs		(no https)
@@ -16,7 +20,7 @@
 		- higheredbcs	(works; mismatched, CN: onlinelibrary)
 
 -->
-<ruleset name="Wiley (partial)">
+<ruleset name="Wiley (partial)" default_off='failed ruleset test'>
 
 	<target host="wiley.com"/>
 	<target host="*.wiley.com"/>
diff --git a/src/chrome/content/rules/William-Hill.xml b/src/chrome/content/rules/William-Hill.xml
index f2ad9579f618..b94c227c072d 100644
--- a/src/chrome/content/rules/William-Hill.xml
+++ b/src/chrome/content/rules/William-Hill.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://whdn.williamhill.com/ (200) => https://secdn.williamhill.com/ (400)
+
 	For problematic rules, see William-Hill-mismatches.xml
 
 
@@ -55,7 +59,7 @@
 			- auth, casino, games, poker, www from whdn.williamhill.com
 
 -->
-<ruleset name="William Hill.com (partial)">
+<ruleset name="William Hill.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/WinTieWin.xml b/src/chrome/content/rules/WinTieWin.xml
index 1c92cfbe111d..c3c3fc1044ab 100644
--- a/src/chrome/content/rules/WinTieWin.xml
+++ b/src/chrome/content/rules/WinTieWin.xml
@@ -1,4 +1,10 @@
-<ruleset name="WinTieWin">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://wintiewin.com/ => https://wintiewin.com/: (28, 'Operation timed out after 15000 milliseconds with 0 bytes received')
+
+-->
+<ruleset name="WinTieWin" default_off='failed ruleset test'>
 
 	<target host="wintiewin.com" />
 	<target host="*.wintiewin.com" />
diff --git a/src/chrome/content/rules/Windows.net.xml b/src/chrome/content/rules/Windows.net.xml
index 79ec7ddced2e..de69cccc4d50 100644
--- a/src/chrome/content/rules/Windows.net.xml
+++ b/src/chrome/content/rules/Windows.net.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://msngpm.accesscontrol.windows.net/ => https://msngpm.accesscontrol.windows.net/: (6, 'Could not resolve host: msngpm.accesscontrol.windows.net')
+
 	For other Microsoft coverage, see Microsoft.xml.
 
 
@@ -12,7 +16,7 @@
 		- msngpm.accesscontrol.windows.net
 
 -->
-<ruleset name="Windows.net">
+<ruleset name="Windows.net" default_off='failed ruleset test'>
 
 	<target host="windows.net" />
 	<target host="msngpm.accesscontrol.windows.net" />
diff --git a/src/chrome/content/rules/Windows_Phone.xml b/src/chrome/content/rules/Windows_Phone.xml
index 5a98e83031c9..8633e87ead83 100644
--- a/src/chrome/content/rules/Windows_Phone.xml
+++ b/src/chrome/content/rules/Windows_Phone.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://images.partner.windowsphone.com/ => https://images.partner.windowsphone.com/: (51, "SSL: no alternative certificate subject name matches target host name 'images.partner.windowsphone.com'")
+
 	For other Microsoft coverage, see Microsoft.xml.
 
 
@@ -25,7 +29,7 @@
 		- developer.windowsphone.com
 
 -->
-<ruleset name="Windows Phone.com">
+<ruleset name="Windows Phone.com" default_off='failed ruleset test'>
 
 	<!--	Direct reiwrtes:
 				-->
diff --git a/src/chrome/content/rules/Winoptions.com.xml b/src/chrome/content/rules/Winoptions.com.xml
index 3907f56e4b44..8af0e3c5a489 100644
--- a/src/chrome/content/rules/Winoptions.com.xml
+++ b/src/chrome/content/rules/Winoptions.com.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cms.winoptions.com/ => http://cms.winoptions.com/: (6, 'Could not resolve host: cms.winoptions.com')
+
 	Nonfunctional subdomains:
 
 		- ^ ¹
@@ -8,7 +12,7 @@
 	² 503, expired 2012-01-27
 
 -->
-<ruleset name="Winoptions.com (partial)">
+<ruleset name="Winoptions.com (partial)" default_off='failed ruleset test'>
 
 	<target host="cms.winoptions.com" />
 		<!--
diff --git a/src/chrome/content/rules/WiredSafety.org.xml b/src/chrome/content/rules/WiredSafety.org.xml
index acbb2b624e26..a9582279faa8 100644
--- a/src/chrome/content/rules/WiredSafety.org.xml
+++ b/src/chrome/content/rules/WiredSafety.org.xml
@@ -1,4 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://adults.wiredsafety.org/ => https://adults.wiredsafety.org/: (6, 'Could not resolve host: adults.wiredsafety.org')
+Fetch error: http://industry.wiredsafety.org/ => https://industry.wiredsafety.org/: (6, 'Could not resolve host: industry.wiredsafety.org')
+Fetch error: http://law.wiredsafety.org/ => https://law.wiredsafety.org/: (6, 'Could not resolve host: law.wiredsafety.org')
+Fetch error: http://parents.wiredsafety.org/ => https://parents.wiredsafety.org/: (6, 'Could not resolve host: parents.wiredsafety.org')
+Fetch error: http://policy.wiredsafety.org/ => https://policy.wiredsafety.org/: (6, 'Could not resolve host: policy.wiredsafety.org')
+Fetch error: http://schools.wiredsafety.org/ => https://schools.wiredsafety.org/: (6, 'Could not resolve host: schools.wiredsafety.org')
+Fetch error: http://victims.wiredsafety.org/ => https://victims.wiredsafety.org/: (6, 'Could not resolve host: victims.wiredsafety.org')
+Fetch error: http://youth.wiredsafety.org/ => https://youth.wiredsafety.org/: (6, 'Could not resolve host: youth.wiredsafety.org')
+
 	Fully covered hosts in *wiredsafety.org:
 
 		- (www.)?
@@ -26,7 +37,7 @@
 		- youth.wiredsafety.org
 
 -->
-<ruleset name="WiredSafety.org">
+<ruleset name="WiredSafety.org" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Wistia.xml b/src/chrome/content/rules/Wistia.xml
index 2b072cc49876..4b2cd6cafc42 100644
--- a/src/chrome/content/rules/Wistia.xml
+++ b/src/chrome/content/rules/Wistia.xml
@@ -1,4 +1,10 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://grove-cdn.wistia.com/ (200) => https://wistia.sslcs.cdngc.net/ (404)
+
+-->
+
 <!--
 	Other Wistia rulesets:
 
@@ -38,7 +44,7 @@
 			- prime
 
 -->
-<ruleset name="Wistia.com (partial)">
+<ruleset name="Wistia.com (partial)" default_off='failed ruleset test'>
 
 	<target host="app.wistia.com" />
 	<target host="buy.wistia.com" />
diff --git a/src/chrome/content/rules/Wza.us.xml b/src/chrome/content/rules/Wza.us.xml
index 9b1bf6385e60..e96060b8bed0 100644
--- a/src/chrome/content/rules/Wza.us.xml
+++ b/src/chrome/content/rules/Wza.us.xml
@@ -1,4 +1,11 @@
-<ruleset name="wza.us" platform="cacert">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://wza.us/ => https://wza.us/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://www.wza.us/ => https://www.wza.us/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
+-->
+<ruleset name="wza.us" platform="cacert" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/XFCE.org.xml b/src/chrome/content/rules/XFCE.org.xml
index fabb720f9610..8e41f5a113a3 100644
--- a/src/chrome/content/rules/XFCE.org.xml
+++ b/src/chrome/content/rules/XFCE.org.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://translations.xfce.org/ => https://translations.xfce.org/: (51, "SSL: no alternative certificate subject name matches target host name 'translations.xfce.org'")
+
 	See XFCE.org-self-signed.xml for problematic rules.
 
 
@@ -32,7 +36,7 @@
 		- wiki
 
 -->
-<ruleset name="XFCE.org (partial)">
+<ruleset name="XFCE.org (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/XILO-Communications.xml b/src/chrome/content/rules/XILO-Communications.xml
index df544c98b979..71984e964f28 100644
--- a/src/chrome/content/rules/XILO-Communications.xml
+++ b/src/chrome/content/rules/XILO-Communications.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://discuss.xilo.net/ => https://discuss.xilo.net/: (51, "SSL: no alternative certificate subject name matches target host name 'discuss.xilo.net'")
+
 	XILO Communications
 
 
@@ -20,7 +24,7 @@
 		- my
 
 -->
-<ruleset name="XILO.net (partial)">
+<ruleset name="XILO.net (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/XMission.xml b/src/chrome/content/rules/XMission.xml
index 24c5add2ce93..783c4bbf9b29 100644
--- a/src/chrome/content/rules/XMission.xml
+++ b/src/chrome/content/rules/XMission.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://livesupport.xmission.com/ => https://livesupport.xmission.com/: (60, 'SSL certificate problem: certificate has expired')
+
 	For problematic rules, see XMission.com-problematic.xml.
 
 
@@ -40,7 +44,7 @@
 		- wiki.xmission.com
 
 -->
-<ruleset name="XMission.com (partial)">
+<ruleset name="XMission.com (partial)" default_off='failed ruleset test'>
 
 	<target host="xmission.com" />
 	<!--target host="accounting.xmission.com" /-->
diff --git a/src/chrome/content/rules/Xapo.com.xml b/src/chrome/content/rules/Xapo.com.xml
index f970b48dc7d7..0a1b48aa0892 100644
--- a/src/chrome/content/rules/Xapo.com.xml
+++ b/src/chrome/content/rules/Xapo.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://help.xapo.com/ => https://xapo.inbenta.com/: (51, "SSL: no alternative certificate subject name matches target host name 'xapo.inbenta.com'")
+Fetch error: http://support.xapo.com/ => https://xapo.inbenta.com/: (51, "SSL: no alternative certificate subject name matches target host name 'xapo.inbenta.com'")
+
 	Problematic subdomains:
 
 		- help *
@@ -17,7 +22,7 @@
 		- support	(→ xapo.inbenta.com)
 
 -->
-<ruleset name="Xapo.com">
+<ruleset name="Xapo.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Xavisys.xml b/src/chrome/content/rules/Xavisys.xml
index 67578ea220d2..6d2f58cee635 100644
--- a/src/chrome/content/rules/Xavisys.xml
+++ b/src/chrome/content/rules/Xavisys.xml
@@ -1,4 +1,10 @@
-<ruleset name="Xavisys.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.xavisys.com/ => https://www.xavisys.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.xavisys.com'")
+
+-->
+<ruleset name="Xavisys.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Xbox.xml b/src/chrome/content/rules/Xbox.xml
index e1c9729bb6d4..01d7f2585fe2 100644
--- a/src/chrome/content/rules/Xbox.xml
+++ b/src/chrome/content/rules/Xbox.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://retailer.xbox.com/ => https://retailer.xbox.com/: (6, 'Could not resolve host: retailer.xbox.com')
+Fetch error: http://solutions.xbox.com/ => https://solutions.xbox.com/: (35, 'Unknown SSL protocol error in connection to solutions.xbox.com:443 ')
+
 	For problematic rules, see Xbox-problematic.xml.
 
 
@@ -79,7 +84,7 @@
 		- music.xbox.com
 
 -->
-<ruleset name="Xbox.com (partial)">
+<ruleset name="Xbox.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Xetra.com.xml b/src/chrome/content/rules/Xetra.com.xml
index b38eb70c70ab..cf34fd71f14b 100644
--- a/src/chrome/content/rules/Xetra.com.xml
+++ b/src/chrome/content/rules/Xetra.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://xetra.com/ => https://xetra.com/: Too many redirects while fetching 'https://xetra.com/'
+Fetch error: http://www.xetra.com/ => https://www.xetra.com/: Too many redirects while fetching 'https://www.xetra.com/'
+
 	For other Deutsche Börse Group coverage, see Deutsche_Boerse.xml.
 
 
@@ -9,7 +14,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Xetra.com">
+<ruleset name="Xetra.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Xfire.xml b/src/chrome/content/rules/Xfire.xml
index f5d75d7ed863..0fa4dec6abea 100644
--- a/src/chrome/content/rules/Xfire.xml
+++ b/src/chrome/content/rules/Xfire.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://secure.xfire.com/ => https://secure.xfire.com/: (7, 'Failed to connect to secure.xfire.com port 443: Connection refused')
+Fetch error: http://social.xfire.com/ => https://social.xfire.com/: (7, 'Failed to connect to social.xfire.com port 443: Connection refused')
+
 	For problematic rules, see Xfire.com-problematic.xml.
 
 
@@ -31,7 +36,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Xfire.com (partial)">
+<ruleset name="Xfire.com (partial)" default_off='failed ruleset test'>
 
 	<!--target host="xfire.com" /-->
 	<target host="secure.xfire.com"/>
diff --git a/src/chrome/content/rules/Xplosion_interactive.xml b/src/chrome/content/rules/Xplosion_interactive.xml
index 80977a80310f..18956b3fa48f 100644
--- a/src/chrome/content/rules/Xplosion_interactive.xml
+++ b/src/chrome/content/rules/Xplosion_interactive.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://16042.pi.xplosion.de/ => https://16042.pi.xplosion.de/: (6, 'Could not resolve host: 16042.pi.xplosion.de')
+
 	xplosion interactive
 
 
@@ -9,7 +13,7 @@
 		- pimages
 
 -->
-<ruleset name="xplosion.de">
+<ruleset name="xplosion.de" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Y6xjgkgwj47us5ca.onion.xml b/src/chrome/content/rules/Y6xjgkgwj47us5ca.onion.xml
index ce8b8650525d..6d2043a8c655 100644
--- a/src/chrome/content/rules/Y6xjgkgwj47us5ca.onion.xml
+++ b/src/chrome/content/rules/Y6xjgkgwj47us5ca.onion.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://y6xjgkgwj47us5ca.onion/ => https://y6xjgkgwj47us5ca.onion/: (6, 'Could not resolve host: y6xjgkgwj47us5ca.onion')
+
 	For other Intercept coverage, see First_Look.org.xml.
 
 
@@ -6,7 +10,7 @@
 	just for fetch testing to be skipped.
 
 -->
-<ruleset name="y6xjgkgwj47us5ca.onion" platform="mixedcontent">
+<ruleset name="y6xjgkgwj47us5ca.onion" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/YIFY_Torrents.xml b/src/chrome/content/rules/YIFY_Torrents.xml
index 9708c12071dc..625adc99f07d 100644
--- a/src/chrome/content/rules/YIFY_Torrents.xml
+++ b/src/chrome/content/rules/YIFY_Torrents.xml
@@ -1,4 +1,10 @@
-<ruleset name="YIFY Torrents">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://yify-torrents.im/ => https://yify-torrents.im/: (51, "SSL: no alternative certificate subject name matches target host name 'yify-torrents.im'")
+
+-->
+<ruleset name="YIFY Torrents" default_off='failed ruleset test'>
 
 	<target host="yify-torrents.com" />
 	<target host="*.yify-torrents.com" />
diff --git a/src/chrome/content/rules/Ya.ru.xml b/src/chrome/content/rules/Ya.ru.xml
index aeec282a6912..39977bf4af97 100644
--- a/src/chrome/content/rules/Ya.ru.xml
+++ b/src/chrome/content/rules/Ya.ru.xml
@@ -1,4 +1,17 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.ewent.ya.ru/ => https://www.ewent.ya.ru/: (51, "SSL: no alternative certificate subject name matches target host name 'www.ewent.ya.ru'")
+Fetch error: http://ewents.ya.ru/ => https://ewents.ya.ru/: (51, "SSL: no alternative certificate subject name matches target host name 'ewents.ya.ru'")
+Fetch error: http://www.ewents.ya.ru/ => https://www.ewents.ya.ru/: (51, "SSL: no alternative certificate subject name matches target host name 'www.ewents.ya.ru'")
+Fetch error: http://events.ya.ru/ => https://events.ya.ru/: (51, "SSL: no alternative certificate subject name matches target host name 'events.ya.ru'")
+Fetch error: http://www.events.ya.ru/ => https://www.events.ya.ru/: (51, "SSL: no alternative certificate subject name matches target host name 'www.events.ya.ru'")
+Fetch error: http://ivents.ya.ru/ => https://ivents.ya.ru/: (51, "SSL: no alternative certificate subject name matches target host name 'ivents.ya.ru'")
+Fetch error: http://www.ivents.ya.ru/ => https://www.ivents.ya.ru/: (51, "SSL: no alternative certificate subject name matches target host name 'www.ivents.ya.ru'")
+Fetch error: http://sobitia.ya.ru/ => https://sobitia.ya.ru/: (51, "SSL: no alternative certificate subject name matches target host name 'sobitia.ya.ru'")
+
+-->
+
 <!--
 	For other Yandex coverage, see Yandex.xml.
 
@@ -87,7 +100,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Ya.ru (partial)">
+<ruleset name="Ya.ru (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Yahoo_Japan.xml b/src/chrome/content/rules/Yahoo_Japan.xml
index 58fbeb87b29d..564cf5ae97c9 100644
--- a/src/chrome/content/rules/Yahoo_Japan.xml
+++ b/src/chrome/content/rules/Yahoo_Japan.xml
@@ -1,4 +1,11 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://adserver.yahoo.co.jp/ => https://adserver.yahoo.co.jp/: (6, 'Could not resolve host: adserver.yahoo.co.jp')
+Fetch error: http://contact.advertising.yahoo.co.jp/ => https://contact.advertising.yahoo.co.jp/: (6, 'Could not resolve host: contact.advertising.yahoo.co.jp')
+Fetch error: http://secure.stepup.yahoo.co.jp/ => https://secure.stepup.yahoo.co.jp/: (6, 'Could not resolve host: secure.stepup.yahoo.co.jp')
+Fetch error: http://stepup.yahoo.co.jp/ => https://secure.stepup.yahoo.co.jp/: (6, 'Could not resolve host: secure.stepup.yahoo.co.jp')
+
 	For other Yahoo coverage, see Yahoo.xml
 
 
@@ -172,7 +179,7 @@
 		- .yahoo.co.jp
 
 -->
-<ruleset name="Yahoo.co.JP (partial)">
+<ruleset name="Yahoo.co.JP (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Yammer.xml b/src/chrome/content/rules/Yammer.xml
index 42944b480941..3909a7e6d4b1 100644
--- a/src/chrome/content/rules/Yammer.xml
+++ b/src/chrome/content/rules/Yammer.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://sites.staging.yammer.com/ => https://sites.staging.yammer.com/: (6, 'Could not resolve host: sites.staging.yammer.com')
+Fetch error: http://whatsnew.yammer.com/ => https://whatsnew.yammer.com/: (6, 'Could not resolve host: whatsnew.yammer.com')
+Fetch error: http://whatsnew.staging.yammer.com/ => https://sites.staging.yammer.com/summer-release-2012/: (6, 'Could not resolve host: sites.staging.yammer.com')
+
 	For problematic coverage, see Yammer-problematic.xml.
 
 	For other Microsoft coverage, see Microsoft.xml.
@@ -58,7 +64,7 @@
 		- devices.yammer.com
 
 -->
-<ruleset name="Yammer.com">
+<ruleset name="Yammer.com" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Yandex.by.xml b/src/chrome/content/rules/Yandex.by.xml
index dd6b6ecb5f6d..b6694d65757e 100644
--- a/src/chrome/content/rules/Yandex.by.xml
+++ b/src/chrome/content/rules/Yandex.by.xml
@@ -1,4 +1,13 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://beta.yandex.by/ => https://beta.yandex.by/: (28, 'Connection timed out after 10001 milliseconds')
+Fetch error: http://feedback2.yandex.by/ => https://feedback2.yandex.by/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://www.internet.yandex.by/ => https://www.internet.yandex.by/: (6, 'Could not resolve host: www.internet.yandex.by')
+Fetch error: http://islands.yandex.by/ => https://islands.yandex.by/: (28, 'Connection timed out after 10001 milliseconds')
+
+-->
+
 <!--
 	For other Yandex coverage, see Yandex.xml.
 
@@ -188,7 +197,7 @@
 	² Unsecurable <= dropped
 
 -->
-<ruleset name="Yandex.by (partial)">
+<ruleset name="Yandex.by (partial)" default_off='failed ruleset test'>
 
 	<target host="yandex.by" />
 	<target host="advertising.yandex.by" />
diff --git a/src/chrome/content/rules/Yandex.com.tr.xml b/src/chrome/content/rules/Yandex.com.tr.xml
index 7eb989ec091d..b8bfa916d1fd 100644
--- a/src/chrome/content/rules/Yandex.com.tr.xml
+++ b/src/chrome/content/rules/Yandex.com.tr.xml
@@ -1,4 +1,16 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://bar.yandex.com.tr/ => https://bar.yandex.com.tr/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://m.contact2.yandex.com.tr/ => https://m.contact2.yandex.com.tr/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://interactive-answers.yandex.com.tr/ => https://interactive-answers.yandex.com.tr/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://www.internet.yandex.com.tr/ => https://www.internet.yandex.com.tr/: (6, 'Could not resolve host: www.internet.yandex.com.tr')
+Fetch error: http://islands.yandex.com.tr/ => https://islands.yandex.com.tr/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://suggests.rasp.yandex.com.tr/ => https://suggests.rasp.yandex.com.tr/: (51, "SSL: no alternative certificate subject name matches target host name 'suggests.rasp.yandex.com.tr'")
+Fetch error: http://suggests.seferler.yandex.com.tr/ => https://suggests.seferler.yandex.com.tr/: (51, "SSL: no alternative certificate subject name matches target host name 'suggests.seferler.yandex.com.tr'")
+
+-->
+
 <!--
 	For other Yandex coverage, see Yandex.xml.
 
@@ -243,7 +255,7 @@
 	* Secured by us
  
 -->
-<ruleset name="Yandex.com.tr (partial)">
+<ruleset name="Yandex.com.tr (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Yandex.com.ua.xml b/src/chrome/content/rules/Yandex.com.ua.xml
index 03c2eeb98bd8..1faef2246e65 100644
--- a/src/chrome/content/rules/Yandex.com.ua.xml
+++ b/src/chrome/content/rules/Yandex.com.ua.xml
@@ -1,4 +1,13 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://mobile.yandex.com.ua/ (200) => https://mobile.yandex.com.ua/ (404)
+Fetch error: http://weather.yandex.com.ua/ => https://weather.yandex.com.ua/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://www.weather.yandex.com.ua/ => https://www.weather.yandex.com.ua/: (28, 'Connection timed out after 10000 milliseconds')
+Non-2xx HTTP code: http://www.mobile.yandex.com.ua/ (200) => https://mobile.yandex.com.ua/ (404)
+
+-->
+
 <!--
 	For other Yandex coverage, see Yandex.xml.
 
@@ -47,7 +56,7 @@
 		- mail.yandex.com.ua
 
 -->
-<ruleset name="Yandex.com.ua (partial)">
+<ruleset name="Yandex.com.ua (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Yandex.com.xml b/src/chrome/content/rules/Yandex.com.xml
index 0a96d7d15c0c..71513a7e3c02 100644
--- a/src/chrome/content/rules/Yandex.com.xml
+++ b/src/chrome/content/rules/Yandex.com.xml
@@ -1,4 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.internet.yandex.com/ => https://www.internet.yandex.com/: (6, 'Could not resolve host: www.internet.yandex.com')
+Fetch error: http://www.constructor.maps.yandex.com/ => https://www.constructor.maps.yandex.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.constructor.maps.yandex.com'")
+Fetch error: http://passport.yandex.com/ => https://passport.yandex.com/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://suggest.rasp.yandex.com/ => https://suggest.rasp.yandex.com/: (6, 'Could not resolve host: suggest.rasp.yandex.com')
+Fetch error: http://startups.yandex.com/ => https://startups.yandex.com/: (52, 'Empty reply from server')
+Fetch error: http://developer.tech.yandex.com/ => https://developer.tech.yandex.com/: (52, 'Empty reply from server')
+Fetch error: http://www.tech.yandex.com/ => https://www.tech.yandex.com/: (52, 'Empty reply from server')
+Fetch error: http://technologies.yandex.com/ => https://technologies.yandex.com/: (52, 'Empty reply from server')
+
 	For other Yandex coverage, see Yandex.xml.
 
 
@@ -198,7 +209,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Yandex.com (partial)">
+<ruleset name="Yandex.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Yandex.kz.xml b/src/chrome/content/rules/Yandex.kz.xml
index 6c6d00b3c51d..82549bcebe9d 100644
--- a/src/chrome/content/rules/Yandex.kz.xml
+++ b/src/chrome/content/rules/Yandex.kz.xml
@@ -1,4 +1,14 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://opera.yandex.kz/download/ => https://opera.yandex.ru/download/: (28, 'Operation timed out after 14984 milliseconds with 19775230 out of 34018040 bytes received')
+Fetch error: http://beta.yandex.kz/ => https://beta.yandex.kz/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://www.internet.yandex.kz/ => https://www.internet.yandex.kz/: (6, 'Could not resolve host: www.internet.yandex.kz')
+Fetch error: http://islands.yandex.kz/ => https://islands.yandex.kz/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://suggests.rasp.yandex.kz/ => https://suggests.rasp.yandex.kz/: (51, "SSL: no alternative certificate subject name matches target host name 'suggests.rasp.yandex.kz'")
+
+-->
+
 <!--
 	For other Yandex coverage, see Yandex.xml.
 
@@ -188,7 +198,7 @@
 	² Unsecurable <= dropped
 
 -->
-<ruleset name="Yandex.kz (partial)">
+<ruleset name="Yandex.kz (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Yandex.ua.xml b/src/chrome/content/rules/Yandex.ua.xml
index 4acca8b3c98c..04e61245c6da 100644
--- a/src/chrome/content/rules/Yandex.ua.xml
+++ b/src/chrome/content/rules/Yandex.ua.xml
@@ -1,4 +1,11 @@
 
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://beta.yandex.ua/ => https://beta.yandex.ua/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://islands.yandex.ua/ => https://islands.yandex.ua/: (28, 'Connection timed out after 10000 milliseconds')
+
+-->
+
 <!--
 	For other Yandex coverage, see Yandex.xml.
 
@@ -137,7 +144,7 @@
 	² Unsecurable <= dropped
 
 -->
-<ruleset name="Yandex.ua (partial)">
+<ruleset name="Yandex.ua (partial)" default_off='failed ruleset test'>
 
 	<target host="yandex.ua" />
 	<target host="auto.yandex.ua" />
diff --git a/src/chrome/content/rules/Yannick.net.xml b/src/chrome/content/rules/Yannick.net.xml
index c538b646511f..cb8c0b7538a0 100644
--- a/src/chrome/content/rules/Yannick.net.xml
+++ b/src/chrome/content/rules/Yannick.net.xml
@@ -1,4 +1,10 @@
-<ruleset name="Yannick.net">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://yannick.net/ => https://yannick.net/: Too many redirects while fetching 'https://yannick.net/'
+
+-->
+<ruleset name="Yannick.net" default_off='failed ruleset test'>
 
 	<target host="yannick.net" />
 	<target host="*.yannick.net" />
diff --git a/src/chrome/content/rules/YieldSelect.com.xml b/src/chrome/content/rules/YieldSelect.com.xml
index 4e63cb63246a..e395149c9628 100644
--- a/src/chrome/content/rules/YieldSelect.com.xml
+++ b/src/chrome/content/rules/YieldSelect.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://yieldselect.com/ => https://yieldselect.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+Fetch error: http://www.yieldselect.com/ => https://www.yieldselect.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	For problematic rules, see YieldSelect.com-problematic.xml.
 
 
@@ -20,7 +25,7 @@
 		- www.yieldselect.com
 
 -->
-<ruleset name="YieldSelect.com (partial)">
+<ruleset name="YieldSelect.com (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Youm7.com.xml b/src/chrome/content/rules/Youm7.com.xml
index d62cda16de2d..d34c39d96598 100644
--- a/src/chrome/content/rules/Youm7.com.xml
+++ b/src/chrome/content/rules/Youm7.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://cairopost.youm7.com/ => http://cairopost.youm7.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://thecairopost.youm7.com/ => http://thecairopost.youm7.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	For rules causing false/broken MCB, see Youm7.com-falsemixed.xml.
 
 
@@ -49,7 +54,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Youm7.com (partial)">
+<ruleset name="Youm7.com (partial)" default_off='failed ruleset test'>
 
 	<target host="youm7.com" />
 	<target host="img1.youm7.com" />
diff --git a/src/chrome/content/rules/Young-Pirates.Eu.xml b/src/chrome/content/rules/Young-Pirates.Eu.xml
index 02681f57c375..39f60e3a45bb 100644
--- a/src/chrome/content/rules/Young-Pirates.Eu.xml
+++ b/src/chrome/content/rules/Young-Pirates.Eu.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.young-pirates.eu/ => https://www.young-pirates.eu/: (6, 'Could not resolve host: www.young-pirates.eu')
+
 	Young Pirates of Europe
 
 
@@ -15,7 +19,7 @@
 		- Images from multiweb.junge-piraten.de
 
 -->
-<ruleset name="Young-Pirates.Eu">
+<ruleset name="Young-Pirates.Eu" default_off='failed ruleset test'>
 	<target host="young-pirates.eu" />
 	<target host="forum.young-pirates.eu" />
 	<target host="lists.young-pirates.eu" />
diff --git a/src/chrome/content/rules/Young_Rewired_State.org.xml b/src/chrome/content/rules/Young_Rewired_State.org.xml
index b09d1276ba87..48142f2bcccd 100644
--- a/src/chrome/content/rules/Young_Rewired_State.org.xml
+++ b/src/chrome/content/rules/Young_Rewired_State.org.xml
@@ -1,4 +1,10 @@
-<ruleset name="Young Rewired State.org">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://www.youngrewiredstate.org/ (200) => https://www.youngrewiredstate.org/ (523)
+
+-->
+<ruleset name="Young Rewired State.org" default_off='failed ruleset test'>
 
 	<target host="youngrewiredstate.org" />
 	<target host="www.youngrewiredstate.org" />
diff --git a/src/chrome/content/rules/YourBittorrent.xml b/src/chrome/content/rules/YourBittorrent.xml
index 349dff90a1bf..0bcc798b3081 100644
--- a/src/chrome/content/rules/YourBittorrent.xml
+++ b/src/chrome/content/rules/YourBittorrent.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://i.yourbittorrent.com/ (200) => https://yourbittorrent.com/images/ (403)
+
 	CDN buckets:
 
 		- ybt.cdn.netdna-cdn.com
@@ -13,7 +17,7 @@
 		- i	(404)
 
 -->
-<ruleset name="YourBittorrent">
+<ruleset name="YourBittorrent" default_off='failed ruleset test'>
 
 	<target host="yourbittorrent.com" />
 	<target host="i.yourbittorrent.com" />
diff --git a/src/chrome/content/rules/Yunbi.com.xml b/src/chrome/content/rules/Yunbi.com.xml
index b9fbfbe5a39b..b20cd24fd418 100644
--- a/src/chrome/content/rules/Yunbi.com.xml
+++ b/src/chrome/content/rules/Yunbi.com.xml
@@ -1,4 +1,9 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.yunbi.com/ => https://www.yunbi.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.yunbi.com'")
+Fetch error: http://yun.yunbi.com/ => https://yun.yunbi.com/: (51, "SSL: no alternative certificate subject name matches target host name 'yun.yunbi.com'")
+
 	Nonfunctional subdomains:
 
 		- bbs *
@@ -13,7 +18,7 @@
 		- yun
 
 -->
-<ruleset name="Yunbi.com (partial)">
+<ruleset name="Yunbi.com (partial)" default_off='failed ruleset test'>
 
 	<target host="yunbi.com" />
 	<target host="www.yunbi.com" />
diff --git a/src/chrome/content/rules/ZZounds.com.xml b/src/chrome/content/rules/ZZounds.com.xml
index e203491f4d9a..c388216de9ec 100644
--- a/src/chrome/content/rules/ZZounds.com.xml
+++ b/src/chrome/content/rules/ZZounds.com.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://c9.zzounds.com/ => https://c9.zzounds.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://c10.zzounds.com/ => https://c10.zzounds.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+Fetch error: http://c12.zzounds.com/ => https://c12.zzounds.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
+
 	CDN buckets:
 
 		- cachepe.zzounds.com.cdngc.net
@@ -37,7 +43,7 @@
 		- delivery
 
 -->
-<ruleset name="zZounds.com">
+<ruleset name="zZounds.com" default_off='failed ruleset test'>
 
 	<target host="zzounds.com" />
 	<target host="*.zzounds.com" />
diff --git a/src/chrome/content/rules/Zap_Lab.xml b/src/chrome/content/rules/Zap_Lab.xml
index c1254b9cca3d..ca082d8b8cac 100644
--- a/src/chrome/content/rules/Zap_Lab.xml
+++ b/src/chrome/content/rules/Zap_Lab.xml
@@ -1,4 +1,10 @@
-<ruleset name="The Zap Lab">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://thezaplab.com/ => https://thezaplab.com/: (35, 'error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol')
+
+-->
+<ruleset name="The Zap Lab" default_off='failed ruleset test'>
 
 	<target host="thezaplab.com" />
 	<target host="*.thezaplab.com" />
diff --git a/src/chrome/content/rules/ZeHosting.xml b/src/chrome/content/rules/ZeHosting.xml
index e094c6207b25..c03be8e90db5 100644
--- a/src/chrome/content/rules/ZeHosting.xml
+++ b/src/chrome/content/rules/ZeHosting.xml
@@ -1,10 +1,14 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://secure.zehosting.com/ => https://secure.zehosting.com/: (6, 'Could not resolve host: secure.zehosting.com')
+
 	Nonfunctional subdomains:
 
 		- (www.)	("temporarily unavailable"; self-signed, CN: ne-r004-060cl)
 
 -->
-<ruleset name="ZeHosting (partial)">
+<ruleset name="ZeHosting (partial)" default_off='failed ruleset test'>
 
 	<target host="secure.zehosting.com" />
 
diff --git a/src/chrome/content/rules/Zen-Internet.xml b/src/chrome/content/rules/Zen-Internet.xml
index 05967b2369ee..b5c371ea3401 100644
--- a/src/chrome/content/rules/Zen-Internet.xml
+++ b/src/chrome/content/rules/Zen-Internet.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://livechat.zen.co.uk/ => https://livechat.zen.co.uk/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Zen Internet
 
 
@@ -25,7 +29,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Zen.co.uk">
+<ruleset name="Zen.co.uk" default_off='failed ruleset test'>
 
 	<target host="zen.co.uk" />
 	<target host="blog.zen.co.uk" />
diff --git a/src/chrome/content/rules/Zenspider.com.xml b/src/chrome/content/rules/Zenspider.com.xml
index 426680e6943b..dc510185022c 100644
--- a/src/chrome/content/rules/Zenspider.com.xml
+++ b/src/chrome/content/rules/Zenspider.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="zenspider.com (partial)"  platform="cacert">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://envy.zenspider.com/ => https://envy.zenspider.com/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
+-->
+<ruleset name="zenspider.com (partial)"  platform="cacert" default_off='failed ruleset test'>
 	<target host="envy.zenspider.com" />
 
 	<rule from="^http:"
diff --git a/src/chrome/content/rules/Zerzar.xml b/src/chrome/content/rules/Zerzar.xml
index fd4537b11d50..534168a0505d 100644
--- a/src/chrome/content/rules/Zerzar.xml
+++ b/src/chrome/content/rules/Zerzar.xml
@@ -1,4 +1,11 @@
-<ruleset name="Zerzar.com">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://zerzar.com/ => https://zerzar.com/: (60, 'SSL certificate problem: self signed certificate')
+Fetch error: http://www.zerzar.com/ => https://www.zerzar.com/: (60, 'SSL certificate problem: self signed certificate')
+
+-->
+<ruleset name="Zerzar.com" default_off='failed ruleset test'>
 
 	<target host="zerzar.com" />
 	<target host="www.zerzar.com" />
diff --git a/src/chrome/content/rules/Zeusclicks.com.xml b/src/chrome/content/rules/Zeusclicks.com.xml
index 43b00e9ba8c3..82b468f1bda1 100644
--- a/src/chrome/content/rules/Zeusclicks.com.xml
+++ b/src/chrome/content/rules/Zeusclicks.com.xml
@@ -1,11 +1,15 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ads2.zeusclicks.com/ => https://ads2.zeusclicks.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
 	Nonfunctional subdomains:
 
 		- (www.)	(shows kip; expired 2013-07-14; self-signed, CN: kip.simplecom.net)
 		- cdn		(refused)
 
 -->
-<ruleset name="ZeusClicks.com (partial)">
+<ruleset name="ZeusClicks.com (partial)" default_off='failed ruleset test'>
 
 	<target host="ads2.zeusclicks.com" />
 
diff --git a/src/chrome/content/rules/Zoho.jp.xml b/src/chrome/content/rules/Zoho.jp.xml
index 6b2409153990..2da2a30d3ebb 100644
--- a/src/chrome/content/rules/Zoho.jp.xml
+++ b/src/chrome/content/rules/Zoho.jp.xml
@@ -1,4 +1,8 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://forums.zoho.jp/ => https://forums.zoho.jp/: (6, 'Could not resolve host: forums.zoho.jp')
+
 	For other Zoho coverage, see Zoho.xml.
 
 
@@ -17,7 +21,7 @@
 
 
 -->
-<ruleset name="Zoho.jp (partial)">
+<ruleset name="Zoho.jp (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Zoho.xml b/src/chrome/content/rules/Zoho.xml
index c4a853355848..815e08d6126a 100644
--- a/src/chrome/content/rules/Zoho.xml
+++ b/src/chrome/content/rules/Zoho.xml
@@ -1,4 +1,19 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://customer-blogs.zoho.com/ => https://customer-blogs.zoho.com/: (6, 'Could not resolve host: customer-blogs.zoho.com')
+Fetch error: http://www.blogs.zoho.com/ => https://www.blogs.zoho.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.blogs.zoho.com'")
+Fetch error: http://kbase.creator.zoho.com/ => https://kbase.creator.zoho.com/: (51, "SSL: no alternative certificate subject name matches target host name 'kbase.creator.zoho.com'")
+Fetch error: http://lounge.creator.zoho.com/ => https://lounge.creator.zoho.com/: (6, 'Could not resolve host: lounge.creator.zoho.com')
+Fetch error: http://www.creator.zoho.com/ => https://www.creator.zoho.com/: (28, 'Connection timed out after 10001 milliseconds')
+Fetch error: http://crmkbase.zoho.com/ => https://crmkbase.zoho.com/: Too many redirects while fetching 'https://crmkbase.zoho.com/'
+Fetch error: http://planner.zoho.com/ => https://planner.zoho.com/: (6, 'Could not resolve host: planner.zoho.com')
+Fetch error: http://share.zoho.com/ => https://share.zoho.com/: (6, 'Could not resolve host: share.zoho.com')
+Fetch error: http://show2.zoho.com/ => https://show2.zoho.com/: (6, 'Could not resolve host: show2.zoho.com')
+Fetch error: http://viewer.zoho.com/ => https://viewer.zoho.com/: (6, 'Could not resolve host: viewer.zoho.com')
+Fetch error: http://export.writer.zoho.com/ => https://export.writer.zoho.com/: (6, 'Could not resolve host: export.writer.zoho.com')
+Fetch error: http://writer2.zoho.com/ => https://writer2.zoho.com/: (6, 'Could not resolve host: writer2.zoho.com')
+
 	For problematic rules, see Zoho-mismatches.xml.
 
 
@@ -25,7 +40,7 @@
 	² Cert only matches *.zoho.com
 
 -->
-<ruleset name="Zoho (partial)">
+<ruleset name="Zoho (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Zugaina.xml b/src/chrome/content/rules/Zugaina.xml
index 09883897360a..4a5c2fbde465 100644
--- a/src/chrome/content/rules/Zugaina.xml
+++ b/src/chrome/content/rules/Zugaina.xml
@@ -1,4 +1,10 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://gentoo.zugaina.org/ => https://gentoo.zugaina.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://gentoo-overlays.zugaina.org/ => https://gentoo-overlays.zugaina.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+Fetch error: http://gpo.zugaina.org/ => https://gpo.zugaina.org/: (60, 'SSL certificate problem: self signed certificate in certificate chain')
+
 	For problematic rules, see Zugaina-mismatches.xml and Zugaina.org-problematic.xml.
 
 
@@ -29,7 +35,7 @@
 	yews.zugaina.org times out over http => status unknown.
 
 -->
-<ruleset name="Zugaina (partial)" platform="cacert">
+<ruleset name="Zugaina (partial)" platform="cacert" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/Zumzi.xml b/src/chrome/content/rules/Zumzi.xml
index 42f081caf56d..3f5d40a91bd9 100644
--- a/src/chrome/content/rules/Zumzi.xml
+++ b/src/chrome/content/rules/Zumzi.xml
@@ -1,4 +1,13 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://zumzi.md/ => https://zumzi.md/: (7, 'Failed to connect to zumzi.md port 443: Connection refused')
+Fetch error: http://biz.zumzi.md/ => https://biz.zumzi.md/: (7, 'Failed to connect to biz.zumzi.md port 443: Connection refused')
+Fetch error: http://www.zumzi.md/ => https://www.zumzi.md/: (7, 'Failed to connect to www.zumzi.md port 443: Connection refused')
+Fetch error: http://zumzi.ro/ => https://zumzi.ro/: (7, 'Failed to connect to zumzi.ro port 443: Connection refused')
+Fetch error: http://biz.zumzi.ro/ => https://biz.zumzi.ro/: (7, 'Failed to connect to biz.zumzi.ro port 443: Connection refused')
+Fetch error: http://www.zumzi.ro/ => https://www.zumzi.ro/: (7, 'Failed to connect to www.zumzi.ro port 443: Connection refused')
+
 	Fully covered domains:
 
 		- zumzi.com subdomains:
@@ -16,7 +25,7 @@
 		- biz.zumzi.ro
 
 -->
-<ruleset name="Zumzi (partial)">
+<ruleset name="Zumzi (partial)" default_off='failed ruleset test'>
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/anibis.ch.xml b/src/chrome/content/rules/anibis.ch.xml
index ecab443213a2..77ab2e048657 100644
--- a/src/chrome/content/rules/anibis.ch.xml
+++ b/src/chrome/content/rules/anibis.ch.xml
@@ -1,4 +1,10 @@
-<ruleset name="anibis.ch">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://anibis.ch/ => https://www.anibis.ch/: Too many redirects while fetching 'https://www.anibis.ch/'
+
+-->
+<ruleset name="anibis.ch" default_off='failed ruleset test'>
   <target host="anibis.ch"/>
   <target host="*.anibis.ch"/>
 
diff --git a/src/chrome/content/rules/avoinministerio.xml b/src/chrome/content/rules/avoinministerio.xml
index 88a283f09abc..1efd4ef82e45 100644
--- a/src/chrome/content/rules/avoinministerio.xml
+++ b/src/chrome/content/rules/avoinministerio.xml
@@ -1,4 +1,11 @@
-<ruleset name="Avoin ministeri&#246;">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.avoinministerio.fi/ => https://www.avoinministerio.fi/: (60, 'SSL certificate problem: certificate has expired')
+Fetch error: http://avoinministerio.fi/ => https://www.avoinministerio.fi/: (60, 'SSL certificate problem: certificate has expired')
+
+-->
+<ruleset name="Avoin ministeri&#246;" default_off='failed ruleset test'>
   <target host="www.avoinministerio.fi" />
   <target host="avoinministerio.fi" />
 
diff --git a/src/chrome/content/rules/divShare.xml b/src/chrome/content/rules/divShare.xml
index 3fcfab0245e9..d584c793281d 100644
--- a/src/chrome/content/rules/divShare.xml
+++ b/src/chrome/content/rules/divShare.xml
@@ -1,4 +1,10 @@
-<ruleset name="divShare" platform="mixedcontent">
+
+<!--
+Disabled by https-everywhere-checker because:
+Non-2xx HTTP code: http://divshare.com/ (200) => https://divshare.com/ (403)
+
+-->
+<ruleset name="divShare" platform="mixedcontent" default_off='failed ruleset test'>
 
 	<target host="divshare.com" />
 	<!--	* for cross-domain cookies.	-->
diff --git a/src/chrome/content/rules/eHarmony.xml b/src/chrome/content/rules/eHarmony.xml
index 8c3d18103fd2..902816ae4586 100644
--- a/src/chrome/content/rules/eHarmony.xml
+++ b/src/chrome/content/rules/eHarmony.xml
@@ -1,6 +1,10 @@
-<!--	There are international versions of eHarmony which utilize the areas tld. These rules do not cover them at this time.
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://eharmony.com/ => https://eharmony.com/: Too many redirects while fetching 'https://eharmony.com/'
+	There are international versions of eHarmony which utilize the areas tld. These rules do not cover them at this time.
 -->
-<ruleset name="eHarmony (partial)">
+<ruleset name="eHarmony (partial)" default_off='failed ruleset test'>
 
 	<target host="eharmony.com"/>
 	<target host="*.eharmony.com"/>
diff --git a/src/chrome/content/rules/kantonalbanken.xml b/src/chrome/content/rules/kantonalbanken.xml
index 4d251a8159fb..22179308a999 100644
--- a/src/chrome/content/rules/kantonalbanken.xml
+++ b/src/chrome/content/rules/kantonalbanken.xml
@@ -1,8 +1,24 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://portail.bvc.ch/ => https://portail.bvc.ch/: (6, 'Could not resolve host: portail.bvc.ch')
+Fetch error: http://tradedirect.bvc.ch/ => https://tradedirect.bvc.ch/: (6, 'Could not resolve host: tradedirect.bvc.ch')
+Fetch error: http://bkb.ch/ => https://www.bkb.ch/: Too many redirects while fetching 'https://www.bkb.ch/'
+Fetch error: http://www.bkb.ch/ => https://www.bkb.ch/: Too many redirects while fetching 'https://www.bkb.ch/'
+Fetch error: http://blkb.ch/ => https://blkb.ch/: (51, "SSL: no alternative certificate subject name matches target host name 'blkb.ch'")
+Fetch error: http://tradedirect.ch/ => https://tradedirect.ch/: (51, "SSL: no alternative certificate subject name matches target host name 'tradedirect.ch'")
+Fetch error: http://edl.sgkb.ch/ => https://edl.sgkb.ch/: (6, 'Could not resolve host: edl.sgkb.ch')
+Fetch error: http://etradingpro.sgkb.ch/ => https://etradingpro.sgkb.ch/: (6, 'Could not resolve host: etradingpro.sgkb.ch')
+Fetch error: http://ricointernet.sgkb.ch/ => https://ricointernet.sgkb.ch/: (6, 'Could not resolve host: ricointernet.sgkb.ch')
+Fetch error: http://wwwsec.zugerkb.ch/ => https://wwwsec.zugerkb.ch/: (6, 'Could not resolve host: wwwsec.zugerkb.ch')
+Fetch error: http://bkb.ch/ => https://www.bkb.ch/: Too many redirects while fetching 'https://www.bkb.ch/'
+Fetch error: http://blkb.ch/ => https://blkb.ch/: (51, "SSL: no alternative certificate subject name matches target host name 'blkb.ch'")
+Fetch error: http://tradedirect.ch/ => https://tradedirect.ch/: (51, "SSL: no alternative certificate subject name matches target host name 'tradedirect.ch'")
+
 	Not supported:
 	- newhome.ch
 -->
-<ruleset name="Schweizer Kantonalbanken">
+<ruleset name="Schweizer Kantonalbanken" default_off='failed ruleset test'>
 	<target host="akb.ch"/>
 	<target host="*.akb.ch"/>
 	<target host="appkb.ch"/>
diff --git a/src/chrome/content/rules/migros.xml b/src/chrome/content/rules/migros.xml
index 1e9f0e53a36a..007ce87292af 100644
--- a/src/chrome/content/rules/migros.xml
+++ b/src/chrome/content/rules/migros.xml
@@ -1,4 +1,14 @@
-<ruleset name="Migros">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://migros.ch/ => https://www.migros.ch/: Too many redirects while fetching 'https://www.migros.ch/'
+Fetch error: http://www.migros.ch/ => https://www.migros.ch/: Too many redirects while fetching 'https://www.migros.ch/'
+Fetch error: http://m-go.migros.ch/ => https://m-go.migros.ch/: (6, 'Could not resolve host: m-go.migros.ch')
+Fetch error: http://twistymania.migros.ch/ => https://twistymania.migros.ch/: (51, "SSL: no alternative certificate subject name matches target host name 'twistymania.migros.ch'")
+Fetch error: http://m-budget.migros.ch/ => https://m-budget.migros.ch/: (60, 'SSL certificate problem: self signed certificate')
+
+-->
+<ruleset name="Migros" default_off='failed ruleset test'>
 	<target host="migros.ch"/>
 	<target host="www.migros.ch"/>
 	<target host="melectronics.ch"/>
diff --git a/src/chrome/content/rules/srg-ssr.xml b/src/chrome/content/rules/srg-ssr.xml
index f762cf9c0037..40547b41af78 100644
--- a/src/chrome/content/rules/srg-ssr.xml
+++ b/src/chrome/content/rules/srg-ssr.xml
@@ -1,4 +1,9 @@
-<!--
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://srgssr.ch/ => https://srgssr.ch/: Too many redirects while fetching 'https://srgssr.ch/'
+Fetch error: http://www.srgssr.ch/ => https://www.srgssr.ch/: Too many redirects while fetching 'https://www.srgssr.ch/'
+
 	Missmatch:
 		- *rtsr.ch
 		- *rtr.ch
@@ -44,7 +49,7 @@
 	Mixed Content:
 		- (www\.)?rsi.ch
 -->
-<ruleset name="SRG SSR (partial)">
+<ruleset name="SRG SSR (partial)" default_off='failed ruleset test'>
 	<target host="broadcast.ch"/>
 	<target host="www.broadcast.ch"/>
 	<target host="swissinfo.ch"/>
diff --git a/src/chrome/content/rules/swissgov.xml b/src/chrome/content/rules/swissgov.xml
index ff92493b13ad..3f255ea84199 100644
--- a/src/chrome/content/rules/swissgov.xml
+++ b/src/chrome/content/rules/swissgov.xml
@@ -1,4 +1,16 @@
+
 <!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://ag.ch/ => https://ag.ch/: (51, "SSL: no alternative certificate subject name matches target host name 'ag.ch'")
+Non-2xx HTTP code: http://gl.ch/ (200) => https://gl.ch/ (400)
+Non-2xx HTTP code: http://jura.ch/ (200) => https://jura.ch/ (404)
+Fetch error: http://zh.ch/ => https://zh.ch/: (6, 'Could not resolve host: zh.ch')
+Fetch error: http://vs.ch/ => https://vs.ch/: (6, 'Could not resolve host: vs.ch')
+Fetch error: http://baselland.ch/ => https://baselland.ch/: (51, "SSL: no alternative certificate subject name matches target host name 'baselland.ch'")
+Fetch error: http://be.ch/ => https://be.ch/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://sh.ch/ => https://sh.ch/: (51, "SSL: no alternative certificate subject name matches target host name 'sh.ch'")
+Fetch error: http://gr.ch/ => https://gr.ch/: (6, 'Could not resolve host: gr.ch')
+
 	no certificate:
 	*.admin.ch
 	*.*.admin.ch
@@ -69,7 +81,7 @@
 	zh.ch
 	-www.*
 -->
-<ruleset name="Schweizer Regierung">
+<ruleset name="Schweizer Regierung" default_off='failed ruleset test'>
 	<target host="www.blog.edoeb.admin.ch"/>
 	<target host="api3.geo.admin.ch"/>
 	<target host="map.geo.admin.ch"/>
diff --git a/src/chrome/content/rules/tldrio.xml b/src/chrome/content/rules/tldrio.xml
index 6224c2340113..9b4132c99bde 100644
--- a/src/chrome/content/rules/tldrio.xml
+++ b/src/chrome/content/rules/tldrio.xml
@@ -1,4 +1,10 @@
-<ruleset name="tldrio">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://api.tldr.io/ => https://api.tldr.io/: (60, 'SSL certificate problem: unable to get local issuer certificate')
+
+-->
+<ruleset name="tldrio" default_off='failed ruleset test'>
 	<target host="api.tldr.io" />
 
 	<rule from="^http:"
diff --git a/src/chrome/content/rules/tmall.com.xml b/src/chrome/content/rules/tmall.com.xml
index a729ef0af604..3c9b43fe85c3 100644
--- a/src/chrome/content/rules/tmall.com.xml
+++ b/src/chrome/content/rules/tmall.com.xml
@@ -1,4 +1,10 @@
-<ruleset name="tmall.com (partial)">
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://www.tmall.com/ => https://www.tmall.com/: (35, 'Unknown SSL protocol error in connection to www.tmall.com:443 ')
+
+-->
+<ruleset name="tmall.com (partial)" default_off='failed ruleset test'>
 	<target host="tmall.com"/>
 	<target host="www.tmall.com"/>
 
diff --git a/src/chrome/content/rules/upc-cablecom.xml b/src/chrome/content/rules/upc-cablecom.xml
index aa1105b55840..692f5b6190d6 100644
--- a/src/chrome/content/rules/upc-cablecom.xml
+++ b/src/chrome/content/rules/upc-cablecom.xml
@@ -1,4 +1,9 @@
-<!--
+
+<!--
+Disabled by https-everywhere-checker because:
+Fetch error: http://upc-cablecom.ch/ => https://upc-cablecom.ch/: (28, 'Connection timed out after 10000 milliseconds')
+Fetch error: http://upc-cablecom.biz/ => https://upc-cablecom.biz/: (28, 'Connection timed out after 10000 milliseconds')
+
 	CDN buckets: 
 
 		- www.orion.lgi.com.c.footprint.net
@@ -20,7 +25,7 @@
 		- static
 
 -->
-<ruleset name="UPC Cablecom">
+<ruleset name="UPC Cablecom" default_off='failed ruleset test'>
 	<target host="upc-cablecom.ch"/>
 	<target host="www.upc-cablecom.ch"/>
 	<target host="jira.upc-cablecom.ch"/>

From 4ed3abca58630fe3820f9d900478cf64709aa0f1 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 01:34:27 +0000
Subject: [PATCH 02/58] [Chromium.org] Remove developer.chromium.org and
 reenable

---
 src/chrome/content/rules/Chromium.org.xml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/src/chrome/content/rules/Chromium.org.xml b/src/chrome/content/rules/Chromium.org.xml
index 6072f4ed9250..f9dba5886bdd 100644
--- a/src/chrome/content/rules/Chromium.org.xml
+++ b/src/chrome/content/rules/Chromium.org.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://developer.chromium.org/ => https://developer.chromium.org/: (6, 'Could not resolve host: developer.chromium.org')
-
 	For other Google coverage, see GoogleServices.xml.
 
 
@@ -23,7 +19,6 @@ Fetch error: http://developer.chromium.org/ => https://developer.chromium.org/:
 		- codesearch
 		- cs
 		- dev
-		- developer
 		- gerrit
 		- git
 		- planet
@@ -37,7 +32,7 @@ Fetch error: http://developer.chromium.org/ => https://developer.chromium.org/:
 	* Secured by us
 
 -->
-<ruleset name="Chromium.org" default_off='failed ruleset test'>
+<ruleset name="Chromium.org">
 
 	<!--	Direct rewrites:
 				-->
@@ -48,7 +43,6 @@ Fetch error: http://developer.chromium.org/ => https://developer.chromium.org/:
 	<target host="codesearch.chromium.org" />
 	<target host="cs.chromium.org" />
 	<target host="dev.chromium.org" />
-	<target host="developer.chromium.org" />
 	<target host="gerrit.chromium.org" />
 	<target host="git.chromium.org" />
 	<target host="planet.chromium.org" />

From 161e87d4dbbb4dda3322b73b36c8e7c306ea9125 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 17:01:40 +0000
Subject: [PATCH 03/58] [CloudFlare.xml] Remove nonexistent subdomain and
 reenable.

---
 src/chrome/content/rules/CloudFlare.xml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/src/chrome/content/rules/CloudFlare.xml b/src/chrome/content/rules/CloudFlare.xml
index 4d9cf1229b2d..9773b421f5b6 100644
--- a/src/chrome/content/rules/CloudFlare.xml
+++ b/src/chrome/content/rules/CloudFlare.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://cfdnscheck.cloudflare.com/ => https://cfdnscheck.cloudflare.com/: (6, 'Could not resolve host: cfdnscheck.cloudflare.com')
-
 	Other CloudFlare rulesets:
 
 		- Cdnjs.xml
@@ -19,7 +15,7 @@ Fetch error: http://cfdnscheck.cloudflare.com/ => https://cfdnscheck.cloudflare.
 	wildcard cookies for every client domain.
 
 -->
-<ruleset name="CloudFlare.com" default_off='failed ruleset test'>
+<ruleset name="CloudFlare.com">
 
 	<!--	Direct rewrites:
 				-->
@@ -29,7 +25,6 @@ Fetch error: http://cfdnscheck.cloudflare.com/ => https://cfdnscheck.cloudflare.
 	<target host="blog.cloudflare.com" />
 	<target host="cdnjs.cloudflare.com" />
 	<target host="cdn-static.cloudflare.com" />
-	<target host="cfdnscheck.cloudflare.com" />
 	<target host="cn.cloudflare.com" />
 	<target host="de.cloudflare.com" />
 	<target host="developers.cloudflare.com" />

From 0e4d9e71f2f8dd6c775a699e92d2f03e8054c3d7 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 17:18:08 +0000
Subject: [PATCH 04/58] [Der Keiler.com] cdn has moved; fix and reenable

---
 src/chrome/content/rules/Der_Keiler.com.xml | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/src/chrome/content/rules/Der_Keiler.com.xml b/src/chrome/content/rules/Der_Keiler.com.xml
index 1b52ec195a0e..ffaff3a5a17e 100644
--- a/src/chrome/content/rules/Der_Keiler.com.xml
+++ b/src/chrome/content/rules/Der_Keiler.com.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Non-2xx HTTP code: http://cdn.derkeiler.com/ (200) => https://dk.cachefly.net/ (404)
-
 	Nonfunctional subdomains:
 
 		- (www.) *
@@ -14,12 +10,12 @@ Non-2xx HTTP code: http://cdn.derkeiler.com/ (200) => https://dk.cachefly.net/ (
 	* Refused
 
 -->
-<ruleset name="Der Keiler.com (partial)" default_off='failed ruleset test'>
+<ruleset name="Der Keiler.com (partial)">
 
 	<target host="cdn.derkeiler.com" />
 
 
 	<rule from="^http://cdn\.derkeiler\.com/"
-		to="https://dk.cachefly.net/" />
+		to="https://d30uw9rfekksi5.cloudfront.net/" />
 
 </ruleset>

From b0798f6f5b960fdf520b809e1dbb018807444d97 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 17:24:03 +0000
Subject: [PATCH 05/58] [Diasp.de] Force www and reenable

---
 src/chrome/content/rules/Diasp.de.xml | 10 +++-------
 1 file changed, 3 insertions(+), 7 deletions(-)

diff --git a/src/chrome/content/rules/Diasp.de.xml b/src/chrome/content/rules/Diasp.de.xml
index 53ecc00dbf85..e094cd73b149 100644
--- a/src/chrome/content/rules/Diasp.de.xml
+++ b/src/chrome/content/rules/Diasp.de.xml
@@ -1,15 +1,11 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://www.diasp.de/ => https://www.diasp.de/: (51, "SSL: no alternative certificate subject name matches target host name 'www.diasp.de'")
-
--->
-<ruleset name="Diasp.de" default_off='failed ruleset test'>
+<ruleset name="Diasp.de">
 
 	<!--	Direct rewrites:
 				-->
   <target host="diasp.de" />
   <target host="www.diasp.de" />
 
+  <rule from="^http://diasp\.de/" to="https://www.diasp.de/" />
+
   <rule from="^http:" to="https:" />
 </ruleset>

From 64bb73133dc40bf4b95f4cdedc2b0dc9c32865b5 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 17:34:34 +0000
Subject: [PATCH 06/58] [Dice] Remove cdn.dice.com and reenable.

Most or all of the former content has been moved straight to http://insights.dice.com/, which is not available over https.
---
 src/chrome/content/rules/Dice.xml | 17 +----------------
 1 file changed, 1 insertion(+), 16 deletions(-)

diff --git a/src/chrome/content/rules/Dice.xml b/src/chrome/content/rules/Dice.xml
index d1e8d6046c10..c87ed02f62ed 100644
--- a/src/chrome/content/rules/Dice.xml
+++ b/src/chrome/content/rules/Dice.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://cdn.dice.com/ => https://d1i4601q19kpjz.cloudfront.net/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
-
 	For rules causing false/broken MCB, see Dice-problematic.xml.
 
 
@@ -13,13 +9,6 @@ Fetch error: http://cdn.dice.com/ => https://d1i4601q19kpjz.cloudfront.net/: (28
 		- Slashdot_Media.xml
 
 
-	CDN buckets:
-
-		- d1i4601q19kpjz.cloudfront.net
-
-			- cdn
-
-
 	Nonfunctional subdomains:
 
 		- marketing ¹
@@ -86,7 +75,7 @@ Fetch error: http://cdn.dice.com/ => https://d1i4601q19kpjz.cloudfront.net/: (28
 	* Secured by us
 
 -->
-<ruleset name="Dice.com (partial)" default_off='failed ruleset test'>
+<ruleset name="Dice.com (partial)">
 
 	<target host="assets.dice.com" />
 	<target host="employer.dice.com" />
@@ -97,7 +86,6 @@ Fetch error: http://cdn.dice.com/ => https://d1i4601q19kpjz.cloudfront.net/: (28
 	<!--	Complications:
 				-->
 	<target host="dice.com" />
-	<target host="cdn.dice.com" />
 
 		<!--	Redirects to http:
 						-->
@@ -137,9 +125,6 @@ Fetch error: http://cdn.dice.com/ => https://d1i4601q19kpjz.cloudfront.net/: (28
 	<rule from="^http://dice\.com/"
 		to="https://www.dice.com/" />
 
-	<rule from="^http://cdn\.dice\.com/"
-		to="https://d1i4601q19kpjz.cloudfront.net/" />
-
 	<rule from="^http:"
 		to="https:" />
 

From 6667ec95b4cfd15c2d5ba23d4605fc4317032361 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 17:41:04 +0000
Subject: [PATCH 07/58] [Disconnect.me] Remove forum.disconnect.me and
 reenable.

They're in the process of moving it to https://disconnect.me/forum.
---
 src/chrome/content/rules/Disconnect.me.xml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/src/chrome/content/rules/Disconnect.me.xml b/src/chrome/content/rules/Disconnect.me.xml
index 7b1477ac67f6..96556bbce735 100644
--- a/src/chrome/content/rules/Disconnect.me.xml
+++ b/src/chrome/content/rules/Disconnect.me.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://forum.disconnect.me/ => https://forum.disconnect.me/: (7, 'Failed to connect to forum.disconnect.me port 443: Connection refused')
-
 	CDN buckets:
 
 		- s3.amazonaws.com/disconnectblogimages/
@@ -12,16 +8,14 @@ Fetch error: http://forum.disconnect.me/ => https://forum.disconnect.me/: (7, 'F
 
 		- (www.)
 		- blog
-		- forum
 		- piwik
 		- search
 
 -->
-<ruleset name="Disconnect.me" default_off='failed ruleset test'>
+<ruleset name="Disconnect.me">
 
 	<target host="disconnect.me" />
 	<target host="blog.disconnect.me" />
-	<target host="forum.disconnect.me" />
 	<target host="search.disconnect.me" />
 	<target host="piwik.disconnect.me" />
 	<target host="www.disconnect.me" />

From 506c47519c0b603a906a19171f607354a80e60c3 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 17:59:36 +0000
Subject: [PATCH 08/58] FBI.gov: foia.fbi.gov has moved to www.fbi.gov/foia;
 fix and reenable

---
 .../content/rules/Federal-Bureau-of-Investigation.xml    | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/src/chrome/content/rules/Federal-Bureau-of-Investigation.xml b/src/chrome/content/rules/Federal-Bureau-of-Investigation.xml
index daa1a7d26e93..47edc99d01f3 100644
--- a/src/chrome/content/rules/Federal-Bureau-of-Investigation.xml
+++ b/src/chrome/content/rules/Federal-Bureau-of-Investigation.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://foia.fbi.gov/ => https://foia.fbi.gov/: (28, 'Connection timed out after 10001 milliseconds')
-
 	Federal Bureau of Investigation
 
 	For other US government coverage, see US-government.xml.
@@ -13,7 +9,7 @@ Fetch error: http://foia.fbi.gov/ => https://foia.fbi.gov/: (28, 'Connection tim
 		- .fbi.gov
 
 -->
-<ruleset name="FBI.gov (partial)" default_off='failed ruleset test'>
+<ruleset name="FBI.gov (partial)">
 
 	<!--	Direct rewrites:
 				-->
@@ -42,6 +38,9 @@ Fetch error: http://foia.fbi.gov/ => https://foia.fbi.gov/: (28, 'Connection tim
 	<rule from="^http://fbi\.gov/"
 		to="https://www.fbi.gov/" />
 
+	<rule from="^http://foia\.fbi\.gov/"
+		to="https://www.fbi.gov/foia/" />
+
 	<rule from="^http:"
 		to="https:" />
 

From 4498d0e9b0cde08aff3c6eddd76c5925867ed014 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 18:26:30 +0000
Subject: [PATCH 09/58] [Disconnect.me] Re-add and redirect forum.disconnect.me

---
 src/chrome/content/rules/Disconnect.me.xml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/src/chrome/content/rules/Disconnect.me.xml b/src/chrome/content/rules/Disconnect.me.xml
index 96556bbce735..97a7c7838147 100644
--- a/src/chrome/content/rules/Disconnect.me.xml
+++ b/src/chrome/content/rules/Disconnect.me.xml
@@ -8,6 +8,7 @@
 
 		- (www.)
 		- blog
+		- forum
 		- piwik
 		- search
 
@@ -16,6 +17,7 @@
 
 	<target host="disconnect.me" />
 	<target host="blog.disconnect.me" />
+	<target host="forum.disconnect.me" />
 	<target host="search.disconnect.me" />
 	<target host="piwik.disconnect.me" />
 	<target host="www.disconnect.me" />
@@ -24,6 +26,9 @@
 	<securecookie host="^blog\.disconnect\.me$" name=".+" />
 
 
+	<rule from="^https?://forum\.disconnect\.me/"
+		to="https://disconnect.me/forum/" />
+
 	<rule from="^http:"
 		to="https:" />
 

From 286c06505823d4e727d37c4e2f16de610a6689ca Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 18:38:10 +0000
Subject: [PATCH 10/58] [Diasp.de] I got that backwards

---
 src/chrome/content/rules/Diasp.de.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/chrome/content/rules/Diasp.de.xml b/src/chrome/content/rules/Diasp.de.xml
index e094cd73b149..93dc80902125 100644
--- a/src/chrome/content/rules/Diasp.de.xml
+++ b/src/chrome/content/rules/Diasp.de.xml
@@ -5,7 +5,7 @@
   <target host="diasp.de" />
   <target host="www.diasp.de" />
 
-  <rule from="^http://diasp\.de/" to="https://www.diasp.de/" />
+  <rule from="^http://www\.diasp\.de/" to="https://diasp.de/" />
 
   <rule from="^http:" to="https:" />
 </ruleset>

From e324f9bc908028e9e1ed1d27751923d2cb889494 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 19:43:19 +0000
Subject: [PATCH 11/58] [iNaturalist.org] Fix and update

---
 src/chrome/content/rules/INaturalist.org.xml | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

diff --git a/src/chrome/content/rules/INaturalist.org.xml b/src/chrome/content/rules/INaturalist.org.xml
index 142c61cd9994..71fb027e5158 100644
--- a/src/chrome/content/rules/INaturalist.org.xml
+++ b/src/chrome/content/rules/INaturalist.org.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://inaturalist.org/ => https://inaturalist.org/: (51, "SSL: no alternative certificate subject name matches target host name 'inaturalist.org'")
-
 	CDN buckets:
 
 		- s3.amazonaws.com/static.inaturalist.org/
@@ -18,19 +14,23 @@ Fetch error: http://inaturalist.org/ => https://inaturalist.org/: (51, "SSL: no
 	* Secured by us, doesn't trip MCB
 
 -->
-<ruleset name="iNaturalist.org" default_off='failed ruleset test'>
+<ruleset name="iNaturalist.org">
 
 	<target host="inaturalist.org" />
-	<target host="*.inaturalist.org" />
+	<target host="static.inaturalist.org" />
+	<target host="www.inaturalist.org" />
 
 
 	<securecookie host="^www\.inaturalist\.org$" name=".+" />
 
 
-	<rule from="^http://(www\.)?inaturalist\.org/"
-		to="https://$1inaturalist.org/" />
+	<rule from="^http://inaturalist\.org/"
+		to="https://www.inaturalist.org/" />
 
 	<rule from="^http://static\.inaturalist\.org/"
 		to="https://s3.amazonaws.com/static.inaturalist.org/" />
 
-</ruleset>
\ No newline at end of file
+	<rule from="^http:"
+		to="https:" />
+
+</ruleset>

From 9850bdf3026cc7b5496dae3a740d8c19f536b227 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 20:11:51 +0000
Subject: [PATCH 12/58] [Microsoft Ventures.com] Fix and re-enable

---
 src/chrome/content/rules/Microsoft_Ventures.com.xml | 9 ++++-----
 1 file changed, 4 insertions(+), 5 deletions(-)

diff --git a/src/chrome/content/rules/Microsoft_Ventures.com.xml b/src/chrome/content/rules/Microsoft_Ventures.com.xml
index 7a7c104a51ad..cc8ad729e25c 100644
--- a/src/chrome/content/rules/Microsoft_Ventures.com.xml
+++ b/src/chrome/content/rules/Microsoft_Ventures.com.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://microsoftventures.com/ => https://microsoftventures.com/: (51, "SSL: no alternative certificate subject name matches target host name 'microsoftventures.com'")
-
 	For other Microsoft coverage, see Microsoft.xml.
 
 
@@ -14,7 +10,7 @@ Fetch error: http://microsoftventures.com/ => https://microsoftventures.com/: (5
 		- .www.microsoftventures.com
 
 -->
-<ruleset name="Microsoft Ventures.com" default_off='failed ruleset test'>
+<ruleset name="Microsoft Ventures.com">
 
 	<!--	Direct rewrites:
 				-->
@@ -32,6 +28,9 @@ Fetch error: http://microsoftventures.com/ => https://microsoftventures.com/: (5
 	<securecookie host="^\.www\.microsoftventures\.com$" name=".+" />
 
 
+	<rule from="^http://microsoftventures\.com/"
+		to="https://www.microsoftventures.com/" />
+
 	<rule from="^http:"
 		to="https:" />
 

From 02702bdb979358ca2ac1ad959a72fcc789c9e510 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 20:26:10 +0000
Subject: [PATCH 13/58] [NIST.gov] Work around redirect loop and reenable

---
 .../National-Institute-of-Standards-and-Technology.xml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/chrome/content/rules/National-Institute-of-Standards-and-Technology.xml b/src/chrome/content/rules/National-Institute-of-Standards-and-Technology.xml
index 56695f4b0a30..a88ee4127220 100644
--- a/src/chrome/content/rules/National-Institute-of-Standards-and-Technology.xml
+++ b/src/chrome/content/rules/National-Institute-of-Standards-and-Technology.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://web.nvd.nist.gov/ => https://web.nvd.nist.gov/: Too many redirects while fetching 'https://web.nvd.nist.gov/'
-
 	National Institute of Standards and Technology
 
 	For other US government coverage, see US-government.xml.
@@ -32,7 +28,7 @@ Fetch error: http://web.nvd.nist.gov/ => https://web.nvd.nist.gov/: Too many red
 		- web.nvd.nist.gov
 
 -->
-<ruleset name="NIST.gov (partial)" default_off='failed ruleset test'>
+<ruleset name="NIST.gov (partial)">
 
 	<target host="nvd.nist.gov" />
 	<target host="web.nvd.nist.gov" />
@@ -45,6 +41,10 @@ Fetch error: http://web.nvd.nist.gov/ => https://web.nvd.nist.gov/: Too many red
 
 	<securecookie host="^.*\.nist\.gov$" name=".*" />
 
+	<!-- https://web.nvd.nist.gov/ redirects to itself -->
+	<exclusion pattern="http://web\.nvd\.nist\.gov/$" />
+
+	<test url="http://web.nvd.nist.gov/view/vuln/search" />
 
 	<rule from="^http:"
 		to="https:" />

From d1a3faea78fa59053369ffaaa6d991b5eae41406 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 20:38:15 +0000
Subject: [PATCH 14/58] [Ansible.com] https://ansible.com/ times out; reenable;
 style

---
 .../content/rules/Ansible.com-problematic.xml |  6 +++++-
 src/chrome/content/rules/Ansible.com.xml      | 21 ++++++++-----------
 2 files changed, 14 insertions(+), 13 deletions(-)

diff --git a/src/chrome/content/rules/Ansible.com-problematic.xml b/src/chrome/content/rules/Ansible.com-problematic.xml
index 0b64613c7876..153a1ae31f23 100644
--- a/src/chrome/content/rules/Ansible.com-problematic.xml
+++ b/src/chrome/content/rules/Ansible.com-problematic.xml
@@ -4,10 +4,14 @@
 -->
 <ruleset name="Ansible.com (mismatched)" default_off="mismatched">
 
+	<target host="ansible.com" />
 	<target host="www.ansible.com" />
 
 
-	<rule from="^http://www\.ansible\.com/"
+	<rule from="^http://ansible\.com/"
 		to="https://www.ansible.com/" />
 
+	<rule from="^http:"
+		to="https:" />
+
 </ruleset>
diff --git a/src/chrome/content/rules/Ansible.com.xml b/src/chrome/content/rules/Ansible.com.xml
index 4eef9e108325..de6c9779e03e 100644
--- a/src/chrome/content/rules/Ansible.com.xml
+++ b/src/chrome/content/rules/Ansible.com.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://ansible.com/ => https://ansible.com/: (28, 'Connection timed out after 10000 milliseconds')
-
 	For problematic rules, see Ansible.com-problematic.xml.
 
 
@@ -20,10 +16,12 @@ Fetch error: http://ansible.com/ => https://ansible.com/: (28, 'Connection timed
 
 	Nonfunctional subdomains:
 
-		- docs *
-		- releases *
+		- ^ ¹
+		- docs ²
+		- releases ²
 
-	* 503, valid cert
+	¹ times out
+	² 503, valid cert
 
 
 	www: works, akamai
@@ -45,10 +43,9 @@ Fetch error: http://ansible.com/ => https://ansible.com/: (28, 'Connection timed
 	² Secured by us
 
 -->
-<ruleset name="Ansible.com (partial)" default_off='failed ruleset test'>
+<ruleset name="Ansible.com (partial)">
 
-	<target host="ansible.com" />
-	<target host="*.ansible.com" />
+	<target host="galaxy.ansible.com" />
 
 
 	<securecookie host="^\.ansible\.com$" name="^__cfduid$" />
@@ -58,7 +55,7 @@ Fetch error: http://ansible.com/ => https://ansible.com/: (28, 'Connection timed
 	<securecookie host="^galaxy\.ansible\.com$" name=".+" />
 
 
-	<rule from="^http://(galaxy\.)?ansible\.com/"
-		to="https://$1ansible.com/" />
+	<rule from="^http:"
+		to="https:" />
 
 </ruleset>

From 24d37e3aed5937b42cf8a1fa362fee3f065afb76 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 21:00:08 +0000
Subject: [PATCH 15/58] [eHarmony] Remove ^ and www; add tests; reenable.

---
 src/chrome/content/rules/eHarmony.xml | 21 +++++++++++++--------
 1 file changed, 13 insertions(+), 8 deletions(-)

diff --git a/src/chrome/content/rules/eHarmony.xml b/src/chrome/content/rules/eHarmony.xml
index 902816ae4586..eacebbe49556 100644
--- a/src/chrome/content/rules/eHarmony.xml
+++ b/src/chrome/content/rules/eHarmony.xml
@@ -1,24 +1,29 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://eharmony.com/ => https://eharmony.com/: Too many redirects while fetching 'https://eharmony.com/'
 	There are international versions of eHarmony which utilize the areas tld. These rules do not cover them at this time.
+
+	https://eharmony.com/ redirects to http://www.eharmony.com/
 -->
-<ruleset name="eHarmony (partial)" default_off='failed ruleset test'>
+<ruleset name="eHarmony (partial)">
 
-	<target host="eharmony.com"/>
 	<target host="*.eharmony.com"/>
 		<!--	Done by Akamai and has certificate mismatch.	-->
 		<exclusion pattern="^http://static\.eharmony\.com/"/>
 		<!--	the following cannot handle SSL.		-->
 		<exclusion pattern="^http://(?:advice|photos)\.eharmony\.com/"/>
+		<!--	redirects to http://www.eharmony.com/	-->
+		<exclusion pattern="^http://www\.eharmony\.com/"/>
+
+	<test url="http://advice.eharmony.com/" />
+	<test url="http://photos.eharmony.com/" />
+	<test url="http://static.eharmony.com/" />
+	<test url="http://www.eharmony.com/" />
+
+	<test url="http://help-singles.eharmony.com/" />
+	<test url="http://m.eharmony.com/" />
 
 	<!--	encountered:	.eharmony.com $client.eharmony.com	-->
 	<securecookie host="^(?:.*\.)?eharmony\.com$" name=".*" />
 
-	<rule from="^http://eharmony\.com/"
-		to="https://eharmony.com/"/>
-
 	<!--	affiliates have unique subdomains	-->
 	<rule from="^http://([\w\-]+)\.eharmony\.com/"
 		to="https://$1.eharmony.com/"/>

From 46123a63efc4f25d2b2bfa9981f744f3292ce997 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 21:07:50 +0000
Subject: [PATCH 16/58] [Project Meshnet.org] Remove nonexistent subdomain,
 reenable

---
 src/chrome/content/rules/Project_Meshnet.xml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/src/chrome/content/rules/Project_Meshnet.xml b/src/chrome/content/rules/Project_Meshnet.xml
index 758ff900411c..dcdbe49b5552 100644
--- a/src/chrome/content/rules/Project_Meshnet.xml
+++ b/src/chrome/content/rules/Project_Meshnet.xml
@@ -1,17 +1,12 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://forums.projectmeshnet.org/ => https://forums.projectmeshnet.org/: (6, 'Could not resolve host: forums.projectmeshnet.org')
-
 	Nonfunctional subdomains:
 
 		- map
 
 -->
-<ruleset name="Project Meshnet.org (partial)" default_off='failed ruleset test'>
+<ruleset name="Project Meshnet.org (partial)">
 
 	<target host="projectmeshnet.org" />
-	<target host="forums.projectmeshnet.org" />
 	<target host="wiki.projectmeshnet.org" />
 	<target host="www.projectmeshnet.org" />
 

From 66bdd5b6d72c98df32930527d3ffbe23e1f80d1f Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 21:16:15 +0000
Subject: [PATCH 17/58] [XMission.com] Expired cert has been fixed; reenable

---
 src/chrome/content/rules/XMission.xml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/src/chrome/content/rules/XMission.xml b/src/chrome/content/rules/XMission.xml
index 783c4bbf9b29..24c5add2ce93 100644
--- a/src/chrome/content/rules/XMission.xml
+++ b/src/chrome/content/rules/XMission.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://livesupport.xmission.com/ => https://livesupport.xmission.com/: (60, 'SSL certificate problem: certificate has expired')
-
 	For problematic rules, see XMission.com-problematic.xml.
 
 
@@ -44,7 +40,7 @@ Fetch error: http://livesupport.xmission.com/ => https://livesupport.xmission.co
 		- wiki.xmission.com
 
 -->
-<ruleset name="XMission.com (partial)" default_off='failed ruleset test'>
+<ruleset name="XMission.com (partial)">
 
 	<target host="xmission.com" />
 	<!--target host="accounting.xmission.com" /-->

From e6275cbbec9bc7839c3228f1134b32937f16ca29 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 21:19:28 +0000
Subject: [PATCH 18/58] [XFCE.org] Remove old subdomain and reenable

---
 src/chrome/content/rules/XFCE.org.xml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/src/chrome/content/rules/XFCE.org.xml b/src/chrome/content/rules/XFCE.org.xml
index 8e41f5a113a3..d02f18fd67ff 100644
--- a/src/chrome/content/rules/XFCE.org.xml
+++ b/src/chrome/content/rules/XFCE.org.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://translations.xfce.org/ => https://translations.xfce.org/: (51, "SSL: no alternative certificate subject name matches target host name 'translations.xfce.org'")
-
 	See XFCE.org-self-signed.xml for problematic rules.
 
 
@@ -32,17 +28,15 @@ Fetch error: http://translations.xfce.org/ => https://translations.xfce.org/: (5
 
 		- bugzilla
 		- forum
-		- translations
 		- wiki
 
 -->
-<ruleset name="XFCE.org (partial)" default_off='failed ruleset test'>
+<ruleset name="XFCE.org (partial)">
 
 	<!--	Direct rewrites:
 				-->
 	<target host="bugzilla.xfce.org" />
 	<target host="forum.xfce.org" />
-	<target host="translations.xfce.org" />
 	<target host="wiki.xfce.org" />
 
 

From c3bb291d75a6f73832edd7621baeb50f610dc283 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 21:27:17 +0000
Subject: [PATCH 19/58] [Wildcard Corp.com] Remove assemblys.net; style;
 reenable

---
 .../content/rules/Wildcard_Corp.com.xml       | 28 ++++---------------
 1 file changed, 5 insertions(+), 23 deletions(-)

diff --git a/src/chrome/content/rules/Wildcard_Corp.com.xml b/src/chrome/content/rules/Wildcard_Corp.com.xml
index 3ddc277b6062..54cea5051e7e 100644
--- a/src/chrome/content/rules/Wildcard_Corp.com.xml
+++ b/src/chrome/content/rules/Wildcard_Corp.com.xml
@@ -1,46 +1,28 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://assemblys.net/ => https://assemblys.net/: (6, 'Could not resolve host: assemblys.net')
-
 	Other Wildcard Corp rulesets:
 
 		- Cdig.me.xml
 
 
-	Problematic domains:
-
-		- www.assemblys.net	(mismatched, CN: *.wildcardcorp.com)
-
-
 	Mixed content:
 
 		- css, on:
 
-			- assemblys.net from fonts.googleapis.com *
 			- www.wildcardcorp.com from fonts.googleapis.com *
 
 	* Secured by us
 
 -->
-<ruleset name="Wildcard Corp.com" default_off='failed ruleset test'>
+<ruleset name="Wildcard Corp.com">
 
-	<target host="assemblys.net" />
-	<target host="*.assemblys.net" />
 	<target host="wildcardcorp.com" />
-	<target host="*.wildcardcorp.com" />
-
+	<target host="www.wildcardcorp.com" />
 
-	<securecookie host="^\.(?:assemblys\.net|wildcardcorp\.com)$" name=".+" />
 
+	<securecookie host="^\.wildcardcorp\.com$" name=".+" />
 
-	<rule from="^http://(?:www\.)?assemblys\.net/"
-		to="https://assemblys.net/" />
 
-	<!--	^ redirects to www over http,
-		so copy that behavior:
-					-->
-	<rule from="^http://(?:www\.)?wildcardcorp\.com/"
-		to="https://www.wildcardcorp.com/" />
+	<rule from="^http:"
+		to="https:" />
 
 </ruleset>

From 1394f8937c57b1ab16038db0bf9637afd8a84cfa Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 21:47:47 +0000
Subject: [PATCH 20/58] [PDF.yt] Remove www because it times out (yeah),
 reenable.

---
 src/chrome/content/rules/PDF.yt.xml | 13 ++++++-------
 1 file changed, 6 insertions(+), 7 deletions(-)

diff --git a/src/chrome/content/rules/PDF.yt.xml b/src/chrome/content/rules/PDF.yt.xml
index 727725d4bf6b..61702a4cb569 100644
--- a/src/chrome/content/rules/PDF.yt.xml
+++ b/src/chrome/content/rules/PDF.yt.xml
@@ -1,13 +1,12 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://www.pdf.yt/ => https://www.pdf.yt/: (28, 'Connection timed out after 10000 milliseconds')
+	Nonfunctional subdomains:
+
+		- www	(times out)
 
 -->
-<ruleset name="PDF.yt" default_off='failed ruleset test'>
+<ruleset name="PDF.yt">
 
 	<target host="pdf.yt" />
-	<target host="www.pdf.yt" />
 
 
 	<!--	Not secured by server:
@@ -17,7 +16,7 @@ Fetch error: http://www.pdf.yt/ => https://www.pdf.yt/: (28, 'Connection timed o
 	<securecookie host="^pdf\.yt$" name=".+" />
 
 
-	<rule from="^http://(www\.)?pdf\.yt/"
-		to="https://$1pdf.yt/" />
+	<rule from="^http:"
+		to="https:" />
 
 </ruleset>

From 7e5d0c85ef7b828b7ce600e20f09d095676a2807 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 22:04:34 +0000
Subject: [PATCH 21/58] [Parameter Security.com] Fix and reenable

---
 .../content/rules/Parameter_Security.com.xml  | 22 ++++++++++---------
 1 file changed, 12 insertions(+), 10 deletions(-)

diff --git a/src/chrome/content/rules/Parameter_Security.com.xml b/src/chrome/content/rules/Parameter_Security.com.xml
index 5d8f631e8b03..1c75b2ec9a5a 100644
--- a/src/chrome/content/rules/Parameter_Security.com.xml
+++ b/src/chrome/content/rules/Parameter_Security.com.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Non-2xx HTTP code: http://parametersecurity.com/ (200) => https://parametersecurity.com/ (526)
-
 	Other Parameter Security rulesets:
 
 		- ShowMeCon.com.xml
@@ -10,15 +6,18 @@ Non-2xx HTTP code: http://parametersecurity.com/ (200) => https://parametersecur
 
 	Problematic subdomains:
 
-		- showmecon *
+		- ^ ¹
+		- showmecon ²
 
-	* Mismatched, CN: www.showmecon.com
+	¹ CloudFlare error (Invalid SSL certificate)
+	² Mismatched, CN: www.showmecon.com
 
 -->
-<ruleset name="Parameter Security.com" default_off='failed ruleset test'>
+<ruleset name="Parameter Security.com">
 
 	<target host="parametersecurity.com" />
-	<target host="*.parametersecurity.com" />
+	<target host="showmecon.parametersecurity.com" />
+	<target host="www.parametersecurity.com" />
 
 
 	<!--	Not secured by server:
@@ -28,10 +27,13 @@ Non-2xx HTTP code: http://parametersecurity.com/ (200) => https://parametersecur
 	<securecookie host="^(?:www)?\.parametersecurity\.com$" name=".+" />
 
 
-	<rule from="^http://(www\.)?parametersecurity\.com/"
-		to="https://$1parametersecurity.com/" />
+	<rule from="^http://parametersecurity\.com/"
+		to="https://www.parametersecurity.com/" />
 
 	<rule from="^http://showmecon\.parametersecurity\.com/"
 		to="https://showmecon.com/" />
 
+	<rule from="^http:"
+		to="https:" />
+
 </ruleset>

From 7b1462ef9f074c556553b5585cca6624e0f8f24f Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 22:15:28 +0000
Subject: [PATCH 22/58] [Pashm.com] Fix and reenable

---
 src/chrome/content/rules/Pashm.com.xml | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/src/chrome/content/rules/Pashm.com.xml b/src/chrome/content/rules/Pashm.com.xml
index e936e54f4165..7f1ea4d90816 100644
--- a/src/chrome/content/rules/Pashm.com.xml
+++ b/src/chrome/content/rules/Pashm.com.xml
@@ -1,15 +1,15 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://www.pashm.com/ => https://www.pashm.com/: Too many redirects while fetching 'https://www.pashm.com/'
-
 	Insecure cookies are set for these hosts:
 
 		- pashm.com
 		- www.pashm.com
 
+	Problematic subdomains:
+
+		- www (redirects to http)
+
 -->
-<ruleset name="Pashm.com" default_off='failed ruleset test'>
+<ruleset name="Pashm.com">
 
 	<!--	Direct rewrites:
 				-->
@@ -24,6 +24,9 @@ Fetch error: http://www.pashm.com/ => https://www.pashm.com/: Too many redirects
 	<securecookie host="^(?:www\.)?pashm\.com$" name=".+" />
 
 
+	<rule from="^http://www\.pashm\.com/"
+		to="https://pashm.com/" />
+
 	<rule from="^http:"
 		to="https:" />
 

From 3714dc1191bae83714b1ffcdb0c018b7522c32cb Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 22:51:56 +0000
Subject: [PATCH 23/58] [WTF is my IP.com] Reenable; the checker was IPv4-only

---
 src/chrome/content/rules/WTFismyIP.xml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/src/chrome/content/rules/WTFismyIP.xml b/src/chrome/content/rules/WTFismyIP.xml
index 20d6f5e25e75..0c1ea677027d 100644
--- a/src/chrome/content/rules/WTFismyIP.xml
+++ b/src/chrome/content/rules/WTFismyIP.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://ipv6.wtfismyip.com/ => https://ipv6.wtfismyip.com/: (7, '')
-
 	Fully covered hosts:
 
 		- (www.)?
@@ -10,7 +6,7 @@ Fetch error: http://ipv6.wtfismyip.com/ => https://ipv6.wtfismyip.com/: (7, '')
 		- ipv6
 
 -->
-<ruleset name="WTF is my IP.com" default_off='failed ruleset test'>
+<ruleset name="WTF is my IP.com">
 	<target host="wtfismyip.com" />
 	<target host="ipv4.wtfismyip.com" />
 	<target host="ipv6.wtfismyip.com" />

From b0d520527c55feb7d0ff24163043a281408efbaa Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 22:57:07 +0000
Subject: [PATCH 24/58] Employeeexpress.gov too, though the missing A record
 must be a mistake.

---
 src/chrome/content/rules/Employeeexpress.gov.xml | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/src/chrome/content/rules/Employeeexpress.gov.xml b/src/chrome/content/rules/Employeeexpress.gov.xml
index 656c4c50efc8..7f84b3e5cfc9 100644
--- a/src/chrome/content/rules/Employeeexpress.gov.xml
+++ b/src/chrome/content/rules/Employeeexpress.gov.xml
@@ -1,8 +1,4 @@
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://employeeexpress.gov/ => https://www.employeeexpress.gov/: (7, '')
--->
-<ruleset name="Employeeexpress.gov" default_off='failed ruleset test'>
+<ruleset name="Employeeexpress.gov">
 	<target host="employeeexpress.gov" />
 	<target host="www.employeeexpress.gov" />
 

From 5d2b153c7ffd2fde8d5126143425111fa2b28bf7 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 23:08:12 +0000
Subject: [PATCH 25/58] [Prosidy.im] Remove conference and reenable

---
 src/chrome/content/rules/Prosidy.im.xml | 8 +-------
 1 file changed, 1 insertion(+), 7 deletions(-)

diff --git a/src/chrome/content/rules/Prosidy.im.xml b/src/chrome/content/rules/Prosidy.im.xml
index f95f3546a750..c10276291356 100644
--- a/src/chrome/content/rules/Prosidy.im.xml
+++ b/src/chrome/content/rules/Prosidy.im.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://conference.prosody.im/ => https://conference.prosody.im/: (51, "SSL: no alternative certificate subject name matches target host name 'conference.prosody.im'")
-
 	Nonfunctional subdomains:
 
 		- blog	(shows hg)
@@ -16,16 +12,14 @@ Fetch error: http://conference.prosody.im/ => https://conference.prosody.im/: (5
 	Fully covered subdomains:
 
 		- (www.)	(www → ^)
-		- conference
 		- hg
 
 -->
-<ruleset name="Prosidy.im" default_off='failed ruleset test'>
+<ruleset name="Prosidy.im">
 
 	<!--	Direct rewrites:
 				-->
 	<target host="prosody.im" />
-	<target host="conference.prosody.im" />
 	<target host="hg.prosody.im" />
 
 	<!--	Complications:

From 46ef56e2d93ebb754b09084bd97ca5a843bbcd99 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 23:11:25 +0000
Subject: [PATCH 26/58] Rename Prosidy.im to Prosody.im (it was a typo)

---
 src/chrome/content/rules/{Prosidy.im.xml => Prosody.im.xml} | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename src/chrome/content/rules/{Prosidy.im.xml => Prosody.im.xml} (94%)

diff --git a/src/chrome/content/rules/Prosidy.im.xml b/src/chrome/content/rules/Prosody.im.xml
similarity index 94%
rename from src/chrome/content/rules/Prosidy.im.xml
rename to src/chrome/content/rules/Prosody.im.xml
index c10276291356..bb11188338f3 100644
--- a/src/chrome/content/rules/Prosidy.im.xml
+++ b/src/chrome/content/rules/Prosody.im.xml
@@ -15,7 +15,7 @@
 		- hg
 
 -->
-<ruleset name="Prosidy.im">
+<ruleset name="Prosody.im">
 
 	<!--	Direct rewrites:
 				-->

From 2a526d2cd7176eff080665bfcb6177e28e4f797d Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 23:36:55 +0000
Subject: [PATCH 27/58] [nodejs.org] Remove packages and reenable

---
 src/chrome/content/rules/Nodejs.org.xml | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/src/chrome/content/rules/Nodejs.org.xml b/src/chrome/content/rules/Nodejs.org.xml
index 6830c241a382..ec69912b797e 100644
--- a/src/chrome/content/rules/Nodejs.org.xml
+++ b/src/chrome/content/rules/Nodejs.org.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://packages.nodejs.org/ => https://packages.nodejs.org/: (51, "SSL: no alternative certificate subject name matches target host name 'packages.nodejs.org'")
-
 	For other Joyent coverage, see Joyent.xml.
 
 
@@ -32,12 +28,11 @@ Fetch error: http://packages.nodejs.org/ => https://packages.nodejs.org/: (51, "
 	* Secured by us
 
 -->
-<ruleset name="nodejs.org (partial)" default_off='failed ruleset test'>
+<ruleset name="nodejs.org (partial)">
 
 	<!--	Direct rewrites:
 				-->
 	<target host="nodejs.org" />
-	<target host="packages.nodejs.org" />
 
 	<!--	Complications:
 				-->

From 9370b4f34708e20287e1e9a951ab1b0059583ba0 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Fri, 19 Jun 2015 23:40:41 +0000
Subject: [PATCH 28/58] [Pubkey.is] Reenable; transient network issue? Also
 style.

---
 src/chrome/content/rules/Pubkey.is.xml | 11 ++---------
 1 file changed, 2 insertions(+), 9 deletions(-)

diff --git a/src/chrome/content/rules/Pubkey.is.xml b/src/chrome/content/rules/Pubkey.is.xml
index e9cb454d09c3..bf356cbfb860 100644
--- a/src/chrome/content/rules/Pubkey.is.xml
+++ b/src/chrome/content/rules/Pubkey.is.xml
@@ -1,15 +1,8 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://pubkey.is/ => https://pubkey.is/: (28, 'Connection timed out after 10000 milliseconds')
-Fetch error: http://www.pubkey.is/ => https://www.pubkey.is/: (28, 'Connection timed out after 10000 milliseconds')
-
--->
-<ruleset name="Pubkey.is" default_off='failed ruleset test'>
+<ruleset name="Pubkey.is">
   <target host="pubkey.is" />
   <target host="www.pubkey.is" />
 
   <securecookie host="^(?:www\.)?pubkey\.is$" name=".*" />
 
-  <rule from="^http://(www\.)?pubkey\.is/" to="https://$1pubkey.is/" />
+  <rule from="^http:" to="https:" />
 </ruleset>

From f0c5ca9d879eccbcfbd0e7343b870118ef6e1a08 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sat, 20 Jun 2015 00:14:01 +0000
Subject: [PATCH 29/58] [Qt] Fix, update, reenable.

qt-project.org is seemingly only left to produce error pages and redirects to qt.io.
---
 src/chrome/content/rules/Qt.xml | 51 +++++++++++++++++++--------------
 1 file changed, 30 insertions(+), 21 deletions(-)

diff --git a/src/chrome/content/rules/Qt.xml b/src/chrome/content/rules/Qt.xml
index fa3621469c8b..7bee02b35957 100644
--- a/src/chrome/content/rules/Qt.xml
+++ b/src/chrome/content/rules/Qt.xml
@@ -1,40 +1,49 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://qt-project.org/ => https://qt-project.org/: (60, 'SSL certificate problem: unable to get local issuer certificate')
-
 	For other Digia coverage, see Digia.xml.
 
 
-	Nontunctional subdomains:
+	Nonfunctional subdomains:
+
+		- ^ ¹
+		- lists ²
+		- planet ¹
+
+	¹ IPv6 connection refused; IPv4 1024-bit, MD5, self-signed, CN: server
+	² Dropped
 
-		- lists *
 
-	* Dropped
+	Problematic subdomains:
+
+		- bugreports *
+
+	* Expired
+
 
 -->
-<ruleset name="Qt" platform="mixedcontent" default_off='failed ruleset test'>
+<ruleset name="Qt">
 
 	<target host="qt-project.org" />
-	<target host="*.qt-project.org" />
+	<target host="bugreports.qt-project.org" />
+	<target host="codereview.qt-project.org" />
+	<target host="download.qt-project.org" />
+	<target host="planet.qt-project.org" />
+	<target host="releases.qt-project.org" />
+	<target host="www.qt-project.org" />
 
 
 	<securecookie host="^(?:.*\.)?qt-project\.org$" name=".*" />
 
 
-	<rule from="^http://releases\.qt-project\.org/"
-		to="https://qtproject.cachefly.net/" />
+	<rule from="^http://qt-project\.org/"
+		to="https://www.qt-project.org/" />
+
+	<rule from="^http://bugreports\.qt-project\.org/"
+		to="https://bugreports.qt.io/" />
 
-	<!--
-		Observed subdomains:
+	<rule from="^http://planet\.qt-project\.org/"
+		to="https://planet.qt.io/" />
 
-			- bugreports
-			- codereview
-			- planet
-			- www
-				-->
-  <exclusion pattern="lists\.qt-project\.org" />
-	<rule from="^http://(\w+\.)?qt-project\.org/"
-		to="https://$1qt-project.org/" />
+	<rule from="^http:"
+		to="https:" />
 
 </ruleset>

From a0e9c8f15d3b1f81fd95bf9be8c5120971d448e3 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sat, 20 Jun 2015 00:17:51 +0000
Subject: [PATCH 30/58] [Qt.io] Fix, reenable. Add planet.qt.io.

---
 src/chrome/content/rules/Qt.io.xml | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/src/chrome/content/rules/Qt.io.xml b/src/chrome/content/rules/Qt.io.xml
index 3c5e13e47899..54d25a621f7f 100644
--- a/src/chrome/content/rules/Qt.io.xml
+++ b/src/chrome/content/rules/Qt.io.xml
@@ -1,16 +1,21 @@
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://qt.io/ => https://qt.io/: (28, 'Connection timed out after 10000 milliseconds')
 	For other Digia coverage, see Digia.xml.
 
+	Nonfunctional subdomains:
+
+		- ^ (times out)
 -->
-<ruleset name="Qt.io" default_off='failed ruleset test'>
+<ruleset name="Qt.io">
 
 	<target host="qt.io" />
 	<target host="download.qt.io" />
 	<target host="bugreports.qt.io" />
+	<target host="planet.qt.io" />
 	<target host="www.qt.io" />
 
+	<rule from="^http://qt\.io/"
+		to="https://www.qt.io/" />
+
 	<rule from="^http:"
 		to="https:" />
 

From e88eba58bccca874ea37091114d6d07a6d8c2d96 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sat, 20 Jun 2015 00:59:30 +0000
Subject: [PATCH 31/58] [Qualaris.com] Fix, update, enable. No more mixed
 content (that I noticed).

It looks like they've redesigned the website. It moved from www to ^.

I added two more subdomains I noticed while poking around.

The <securecookie/> rule should probably be updated too, but I didn't check.
---
 .../content/rules/Qualaris.com-falsemixed.xml | 25 -------------
 src/chrome/content/rules/Qualaris.com.xml     | 37 ++++++-------------
 2 files changed, 12 insertions(+), 50 deletions(-)
 delete mode 100644 src/chrome/content/rules/Qualaris.com-falsemixed.xml

diff --git a/src/chrome/content/rules/Qualaris.com-falsemixed.xml b/src/chrome/content/rules/Qualaris.com-falsemixed.xml
deleted file mode 100644
index 56ec94b4ad69..000000000000
--- a/src/chrome/content/rules/Qualaris.com-falsemixed.xml
+++ /dev/null
@@ -1,25 +0,0 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Non-2xx HTTP code: http://qualaris.com/ (200) => https://www.qualaris.com/ (404)
-
-	For rules not causing false/broken MCB, see Qualaris.com.xml.
-
--->
-<ruleset name="Qualaris.com (false MCB)" platform="mixedcontent" default_off='failed ruleset test'>
-
-	<target host="qualaris.com" />
-	<target host="*.qualaris.com" />
-		<!--
-			Handled in Qualaris.com.xml:
-							-->
-		<!--exclusion pattern="^http://(www\.)?qualaris\.com/+(favicon\.ico|wp-content/|wp-includes/)" /-->
-
-
-	<securecookie host="^(?:www)?\.qualaris\.com$" name=".+" />
-
-
-	<rule from="^http://(?:www\.)?qualaris\.com/(?!favicon\.ico|wp-content/|wp-includes/)"
-		to="https://www.qualaris.com/" />
-
-</ruleset>
diff --git a/src/chrome/content/rules/Qualaris.com.xml b/src/chrome/content/rules/Qualaris.com.xml
index d44096cb65ee..a6fe3a49c22c 100644
--- a/src/chrome/content/rules/Qualaris.com.xml
+++ b/src/chrome/content/rules/Qualaris.com.xml
@@ -1,34 +1,21 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Non-2xx HTTP code: http://www.qualaris.com/ (200) => http://www.qualaris.com/ (404)
-
-	For rules causing false/broken MCB, see Qualaris.com-falsemixed.xml.
-
-
-	^: self-signed
-
-
-	Mixed content:
-
-		- css on www from www *
-
-		- Images on www from www *
-
-	* Secured by us
-
+	www: 404
 -->
-<ruleset name="Qualaris.com (partial)" default_off='failed ruleset test'>
+<ruleset name="Qualaris.com">
 
 	<target host="qualaris.com" />
+	<target host="app.qualaris.com" />
+	<target host="legacy.qualaris.com" />
 	<target host="www.qualaris.com" />
-		<!--
-			False/broken MCB:
-						-->
-		<!--exclusion pattern="^http://(www\.)?qualaris\.com/+(?!favicon\.ico|wp-content/|wp-includes/)" /-->
 
 
-	<rule from="^http://(?:www\.)?qualaris\.com/(?=favicon\.ico|wp-content/|wp-includes/)"
-		to="https://www.qualaris.com/" />
+	<securecookie host="^(?:www)?\.qualaris\.com$" name=".+" />
+
+
+	<rule from="^http://www\.qualaris\.com/"
+		to="https://qualaris.com/" />
+
+	<rule from="^http:"
+		to="https:" />
 
 </ruleset>

From 2f09b6b5db05736ceea89d05db09c37e2e13e4d5 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sat, 20 Jun 2015 01:13:16 +0000
Subject: [PATCH 32/58] [Quitter.no] Fix and reenable

---
 src/chrome/content/rules/Quitter.no.xml | 19 +++++++++++--------
 1 file changed, 11 insertions(+), 8 deletions(-)

diff --git a/src/chrome/content/rules/Quitter.no.xml b/src/chrome/content/rules/Quitter.no.xml
index 38f519dcd023..6cb684e92df1 100644
--- a/src/chrome/content/rules/Quitter.no.xml
+++ b/src/chrome/content/rules/Quitter.no.xml
@@ -1,15 +1,15 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://www.quitter.no/ => https://www.quitter.no/: (51, "SSL: no alternative certificate subject name matches target host name 'www.quitter.no'")
-
 	Insecure cookies are set for these hosts:
 
 		- quitter.no
-		- www.quitter.no
 
+	Problematic subdomains:
+
+		- www *
+
+	* Mismatches (CN=www.gnusocial.no), redirects (gnusocial.no)
 -->
-<ruleset name="Quitter.no" default_off='failed ruleset test'>
+<ruleset name="Quitter.no">
 
 	<!--	Direct rewrites:
 				-->
@@ -19,10 +19,13 @@ Fetch error: http://www.quitter.no/ => https://www.quitter.no/: (51, "SSL: no al
 
 	<!--	Not secured by server:
 					-->
-	<!--securecookie host="^(www\.)?quitter\.no$" name="^PHPSESSID$" /-->
+	<!--securecookie host="^quitter\.no$" name="^PHPSESSID$" /-->
+
+	<securecookie host="^quitter\.no$" name=".+" />
 
-	<securecookie host="^(?:www\.)?quitter\.no$" name=".+" />
 
+	<rule from="^http://www\.quitter\.no/"
+		to="https://quitter.no/" />
 
 	<rule from="^http:"
 		to="https:" />

From ae78eb3bba3527255afc128140ee17163b2d0f54 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sat, 20 Jun 2015 01:21:51 +0000
Subject: [PATCH 33/58] [NIST.gov] Fix "^" I left out of a pattern

---
 .../rules/National-Institute-of-Standards-and-Technology.xml    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/chrome/content/rules/National-Institute-of-Standards-and-Technology.xml b/src/chrome/content/rules/National-Institute-of-Standards-and-Technology.xml
index a88ee4127220..93f01b78b530 100644
--- a/src/chrome/content/rules/National-Institute-of-Standards-and-Technology.xml
+++ b/src/chrome/content/rules/National-Institute-of-Standards-and-Technology.xml
@@ -42,7 +42,7 @@
 	<securecookie host="^.*\.nist\.gov$" name=".*" />
 
 	<!-- https://web.nvd.nist.gov/ redirects to itself -->
-	<exclusion pattern="http://web\.nvd\.nist\.gov/$" />
+	<exclusion pattern="^http://web\.nvd\.nist\.gov/$" />
 
 	<test url="http://web.nvd.nist.gov/view/vuln/search" />
 

From af18f7ccb67da37fdf4c562f74ddc5f9c91cb663 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sat, 20 Jun 2015 01:51:20 +0000
Subject: [PATCH 34/58] [PlanetRomeo] Fix and reenable.

Regex gone wild!
---
 src/chrome/content/rules/PlanetRomeo.xml | 12 ++----------
 1 file changed, 2 insertions(+), 10 deletions(-)

diff --git a/src/chrome/content/rules/PlanetRomeo.xml b/src/chrome/content/rules/PlanetRomeo.xml
index bd45752a9a24..aa48fea14b61 100644
--- a/src/chrome/content/rules/PlanetRomeo.xml
+++ b/src/chrome/content/rules/PlanetRomeo.xml
@@ -1,16 +1,8 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://www.gayromeo.com/ => https://www.gayromeo.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.gayromeo.com'")
-Fetch error: http://gayromeo.com/ => https://www.gayromeo.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.gayromeo.com'")
-
--->
-<ruleset name="PlanetRomeo" default_off='failed ruleset test'>
+<ruleset name="PlanetRomeo">
   <target host="www.planetromeo.com" />
   <target host="planetromeo.com" />
   <target host="www.gayromeo.com" />
   <target host="gayromeo.com" />
 
-  <rule from="^http://(?:www\.)?planetromeo\.com/" to="https://www.planetromeo.com/"/>
-  <rule from="^http://(?:www\.)?gayromeo\.com/" to="https://www.gayromeo.com/"/>
+  <rule from="^http://(?:www\.)?(?:gay|planet)romeo\.com/" to="https://www.planetromeo.com/"/>
 </ruleset>

From f00545db6ab0575f16e231b345ff7858346b09b2 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sat, 20 Jun 2015 19:42:47 +0000
Subject: [PATCH 35/58] [Hivos.org] Fix and reenable

---
 src/chrome/content/rules/Hivos.org.xml | 15 ++++++++-------
 1 file changed, 8 insertions(+), 7 deletions(-)

diff --git a/src/chrome/content/rules/Hivos.org.xml b/src/chrome/content/rules/Hivos.org.xml
index f22c41042dc8..48960f551e83 100644
--- a/src/chrome/content/rules/Hivos.org.xml
+++ b/src/chrome/content/rules/Hivos.org.xml
@@ -1,18 +1,16 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Non-2xx HTTP code: http://m.hivos.org/ (200) => https://m.hivos.org/ (404)
-
 	For other Hivos coverage, see Hivos.nl.xml.
 
 	Problematic subdomains:
 
-		- (www.)openforchange.hivos.org ¹
+		- m.hivos.org ¹
+		- (www.)openforchange.hivos.org ²
 
-	¹ different content; mismatched, CN: digitaldefenders.org
+	¹ 404
+	² different content; mismatched, CN: digitaldefenders.org
 
 -->
-<ruleset name="Hivos.org" default_off='failed ruleset test'>
+<ruleset name="Hivos.org">
 
 	<!--	Direct rewrites:
 					-->
@@ -32,6 +30,9 @@ Non-2xx HTTP code: http://m.hivos.org/ (200) => https://m.hivos.org/ (404)
 	<target host="www.hivos.org" />
 
 
+	<rule from="^http://m\.hivos\.org/"
+		to="https://hivos.org/" />
+
 	<rule from="^http:"
 		to="https:" />
 

From a95da2fdd8d6818a2c7d940e08e00e17af26d199 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sun, 21 Jun 2015 02:12:10 +0000
Subject: [PATCH 36/58] [Haskell.org] Add git, remove darcs (expired), reenable

---
 src/chrome/content/rules/Haskell.org.xml | 18 ++++++++----------
 1 file changed, 8 insertions(+), 10 deletions(-)

diff --git a/src/chrome/content/rules/Haskell.org.xml b/src/chrome/content/rules/Haskell.org.xml
index f2da5abf19de..37ea31b1f7d5 100644
--- a/src/chrome/content/rules/Haskell.org.xml
+++ b/src/chrome/content/rules/Haskell.org.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://darcs.haskell.org/ => https://darcs.haskell.org/: (60, 'SSL certificate problem: certificate has expired')
-
 	Nonfunctional subdomains:
 
 		- code *
@@ -15,11 +11,13 @@ Fetch error: http://darcs.haskell.org/ => https://darcs.haskell.org/: (60, 'SSL
 
 	Problematic subdomains:
 
-		- status ¹
-		- www ²
+		- darcs ¹
+		- status ²
+		- www ³
 
-	¹ StatusPage.io
-	² Tor blocked by CloudFlare settings
+	¹ Expired 2014-10-15
+	² StatusPage.io
+	³ Tor blocked by CloudFlare settings
 
 
 	Fully covered hosts:
@@ -43,13 +41,13 @@ Fetch error: http://darcs.haskell.org/ => https://darcs.haskell.org/: (60, 'SSL
 		- .haskell.org
 
 -->
-<ruleset name="Haskell.org (partial)" default_off='failed ruleset test'>
+<ruleset name="Haskell.org (partial)">
 
 	<target host="haskell.org" />
 	<target host="blog.haskell.org" />
-	<target host="darcs.haskell.org" />
 	<target host="downloads.haskell.org" />
 	<target host="ghc.haskell.org" />
+	<target host="git.haskell.org" />
 	<target host="hackage.haskell.org" />
 	<target host="mail.haskell.org" />
 	<target host="monitor.haskell.org" />

From 00cbf51cc5fdb2453c9625458b7e077837484729 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sun, 21 Jun 2015 02:18:13 +0000
Subject: [PATCH 37/58] [hastexo.com] Fix, reenable

---
 src/chrome/content/rules/Hastexo.com.xml | 14 ++++----------
 1 file changed, 4 insertions(+), 10 deletions(-)

diff --git a/src/chrome/content/rules/Hastexo.com.xml b/src/chrome/content/rules/Hastexo.com.xml
index 31f96ceca717..646dea6c0063 100644
--- a/src/chrome/content/rules/Hastexo.com.xml
+++ b/src/chrome/content/rules/Hastexo.com.xml
@@ -1,19 +1,13 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://hastexo.com/ => https://hastexo.com/: Too many redirects while fetching 'https://hastexo.com/'
-
--->
-<ruleset name="hastexo.com" default_off='failed ruleset test'>
+<ruleset name="hastexo.com">
 
 	<target host="hastexo.com" />
-	<target host="*.hastexo.com" />
+	<target host="www.hastexo.com" />
 
 
 	<securecookie host="^(?:www)?\.hastexo\.com$" name=".+" />
 
 
 	<rule from="^http://(www\.)?hastexo\.com/"
-		to="https://$1hastexo.com/" />
+		to="https://www.hastexo.com/" />
 
-</ruleset>
\ No newline at end of file
+</ruleset>

From 8c6cf9ea01e447b6f5bf845ec80753db47491b86 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sun, 21 Jun 2015 02:32:37 +0000
Subject: [PATCH 38/58] [eHarmony] https://static.eharmony.com/ actually works
 now

---
 src/chrome/content/rules/eHarmony.xml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/src/chrome/content/rules/eHarmony.xml b/src/chrome/content/rules/eHarmony.xml
index eacebbe49556..25f6f91671d5 100644
--- a/src/chrome/content/rules/eHarmony.xml
+++ b/src/chrome/content/rules/eHarmony.xml
@@ -6,8 +6,6 @@
 <ruleset name="eHarmony (partial)">
 
 	<target host="*.eharmony.com"/>
-		<!--	Done by Akamai and has certificate mismatch.	-->
-		<exclusion pattern="^http://static\.eharmony\.com/"/>
 		<!--	the following cannot handle SSL.		-->
 		<exclusion pattern="^http://(?:advice|photos)\.eharmony\.com/"/>
 		<!--	redirects to http://www.eharmony.com/	-->
@@ -15,11 +13,11 @@
 
 	<test url="http://advice.eharmony.com/" />
 	<test url="http://photos.eharmony.com/" />
-	<test url="http://static.eharmony.com/" />
 	<test url="http://www.eharmony.com/" />
 
 	<test url="http://help-singles.eharmony.com/" />
 	<test url="http://m.eharmony.com/" />
+	<test url="http://static.eharmony.com/" />
 
 	<!--	encountered:	.eharmony.com $client.eharmony.com	-->
 	<securecookie host="^(?:.*\.)?eharmony\.com$" name=".*" />

From 2e6c7f9fbb9487ed25f0ca4ca7c734cd3dd5b452 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sun, 21 Jun 2015 02:43:33 +0000
Subject: [PATCH 39/58] [Grupfoni] Remove subdomain, style, reenable

---
 src/chrome/content/rules/Grupfoni.xml | 18 +++++-------------
 1 file changed, 5 insertions(+), 13 deletions(-)

diff --git a/src/chrome/content/rules/Grupfoni.xml b/src/chrome/content/rules/Grupfoni.xml
index 64f2159f9e21..76bdec82a699 100644
--- a/src/chrome/content/rules/Grupfoni.xml
+++ b/src/chrome/content/rules/Grupfoni.xml
@@ -1,16 +1,8 @@
+<ruleset name="Grupfoni">
+  <target host="www.grupfoni.com" />
+  <target host="grupfoni.com" />
 
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://images.grupfoni.com/ => https://images.grupfoni.com/: (60, 'SSL certificate problem: certificate has expired')
+  <securecookie host="^(?:.*\.)?grupfoni\.com$" name=".*" />
 
--->
-<ruleset name="Grupfoni" default_off='failed ruleset test'>
-  <target host="www.grupfoni.com" />
-  <target host="grupfoni.com" />
-  <target host="images.grupfoni.com" />
-
-  <securecookie host="^(?:.*\.)?grupfoni\.com$" name=".*" />
-
-  <rule from="^http://images\.grupfoni\.com/" to="https://images.grupfoni.com/" />
-  <rule from="^http://(?:www\.)?grupfoni\.com/" to="https://www.grupfoni.com/" />
+  <rule from="^http:" to="https:" />
 </ruleset>

From 84df1dab91afd011717237a0d1c1917c13e20549 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sun, 21 Jun 2015 02:47:43 +0000
Subject: [PATCH 40/58] [Greenpeace Germany] Fix, reenable

---
 src/chrome/content/rules/Greenpeace.de.xml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/chrome/content/rules/Greenpeace.de.xml b/src/chrome/content/rules/Greenpeace.de.xml
index fbf15eec7bde..6fc31ef88071 100644
--- a/src/chrome/content/rules/Greenpeace.de.xml
+++ b/src/chrome/content/rules/Greenpeace.de.xml
@@ -1,14 +1,11 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://greenpeace.de/ => https://greenpeace.de/: (51, "SSL: no alternative certificate subject name matches target host name 'greenpeace.de'")
-
 	Problematic domains:
 		- (www.)?umweltstiftung-greenpeace.de
+		- greenpeace.de
 		- www.*.greenpeace.de
 		- gruppen.greenpeace.de
 -->
-<ruleset name="Greenpeace Germany" default_off='failed ruleset test'>
+<ruleset name="Greenpeace Germany">
 	<target host="greenpeace.de" />
 	<target host="www.greenpeace.de" />
 	<target host="kids.greenpeace.de" />
@@ -22,6 +19,9 @@ Fetch error: http://greenpeace.de/ => https://greenpeace.de/: (51, "SSL: no alte
 	<securecookie host="\.?www\.greenpeace-energy\.de$" name=".*" />
 	<securecookie host="^(.*\.)?greenpeace-magazin\.de$" name=".*" />
 
+	<rule from="^http://greenpeace\.de/"
+		to="https://www.greenpeace.de/" />
+
 	<rule from="^http:"
 		to="https:" />
 </ruleset>

From c42d9f8b89de596d00c237688d59585f20f1809c Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sun, 21 Jun 2015 02:51:13 +0000
Subject: [PATCH 41/58] [Gotland Ring.com] Fix, reenable

---
 src/chrome/content/rules/Gotland_Ring.com.xml | 11 ++++-------
 1 file changed, 4 insertions(+), 7 deletions(-)

diff --git a/src/chrome/content/rules/Gotland_Ring.com.xml b/src/chrome/content/rules/Gotland_Ring.com.xml
index 3dfbace8d72d..8d8f22e4724a 100644
--- a/src/chrome/content/rules/Gotland_Ring.com.xml
+++ b/src/chrome/content/rules/Gotland_Ring.com.xml
@@ -1,10 +1,4 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://www.gotlandring.com/ => https://www.gotlandring.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.gotlandring.com'")
-
--->
-<ruleset name="Gotland Ring.com" default_off='failed ruleset test'>
+<ruleset name="Gotland Ring.com">
 
 	<!--	Direct rewrites:
 				-->
@@ -17,6 +11,9 @@ Fetch error: http://www.gotlandring.com/ => https://www.gotlandring.com/: (51, "
 	<securecookie host="^\.gotlandring\.com$" name=".+" />
 
 
+	<rule from="^http://www\.gotlandring\.com/"
+		to="https://gotlandring.com/" />
+
 	<rule from="^http:"
 		to="https:" />
 

From fbe0d2b8f44a31287560a19c760787ed603834f5 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sun, 21 Jun 2015 02:54:02 +0000
Subject: [PATCH 42/58] [Google App Engine] Remove ^, style, reenable

---
 src/chrome/content/rules/Google_App_Engine.xml | 14 +++++---------
 1 file changed, 5 insertions(+), 9 deletions(-)

diff --git a/src/chrome/content/rules/Google_App_Engine.xml b/src/chrome/content/rules/Google_App_Engine.xml
index 694c485d02d3..244dae2980c6 100644
--- a/src/chrome/content/rules/Google_App_Engine.xml
+++ b/src/chrome/content/rules/Google_App_Engine.xml
@@ -1,14 +1,10 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Non-2xx HTTP code: http://appspot.com/ (200) => https://appspot.com/ (404)
-
 	For other Google coverage, see GoogleServices.xml.
 
+	https://appspot.com/ returns 404
 -->
-<ruleset name="Google App Engine" default_off='failed ruleset test'>
+<ruleset name="Google App Engine">
 
-	<target host="appspot.com" />
 	<target host="*.appspot.com" />
 		<!--
 			Redirects to http for some reason.
@@ -19,7 +15,7 @@ Non-2xx HTTP code: http://appspot.com/ (200) => https://appspot.com/ (404)
 	<securecookie host="^.+\.appspot\.com$" name=".+" />
 
 
-	<rule from="^http://([^@:\./]+\.)?appspot\.com/"
-		 to="https://$1appspot.com/" />
+	<rule from="^http:"
+		 to="https:" />
 
-</ruleset>
\ No newline at end of file
+</ruleset>

From 10028c777ae3a28a2ac815caa61bd89cb71c6292 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sun, 21 Jun 2015 03:01:05 +0000
Subject: [PATCH 43/58] [Google App Engine] Add tests, exclude www.

Sorry, committed before I thought.

I chose http://hstspreload.appspot.com/ because it's in my browser history and operated (semi-?)officially.
---
 src/chrome/content/rules/Google_App_Engine.xml | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/chrome/content/rules/Google_App_Engine.xml b/src/chrome/content/rules/Google_App_Engine.xml
index 244dae2980c6..6d3c179e6ac5 100644
--- a/src/chrome/content/rules/Google_App_Engine.xml
+++ b/src/chrome/content/rules/Google_App_Engine.xml
@@ -7,10 +7,14 @@
 
 	<target host="*.appspot.com" />
 		<!--
-			Redirects to http for some reason.
+			Redirect to http for some reason.
 								-->
 		<exclusion pattern="^http://photomunchers\.appspot\.com/" />
+		<exclusion pattern="^http://www\.appspot\.com/" />
 
+	<test url="http://hstspreload.appspot.com/" />
+	<test url="http://photomunchers.appspot.com/" />
+	<test url="http://www.appspot.com/" />
 
 	<securecookie host="^.+\.appspot\.com$" name=".+" />
 

From f52699e3054d3fd5456b0030e6e6ebaed4c62af4 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sun, 21 Jun 2015 06:44:16 +0000
Subject: [PATCH 44/58] [Infogroup] Fix(?), reenable.

ca.infousa.com works for me.

Disable secured.infousa.com.
---
 src/chrome/content/rules/Infogroup.xml | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/src/chrome/content/rules/Infogroup.xml b/src/chrome/content/rules/Infogroup.xml
index 82664ca43bcb..b2558baf8b18 100644
--- a/src/chrome/content/rules/Infogroup.xml
+++ b/src/chrome/content/rules/Infogroup.xml
@@ -1,14 +1,11 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://ca.infousa.com/ => https://ca.infousa.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
-Fetch error: http://secured.infousa.com/ => https://secured.infousa.com/: (35, 'Unknown SSL protocol error in connection to secured.infousa.com:443 ')
-
 	Nonfunctional domains:
 
 		- (www.)infogroup.com
-		- list.infousa.com	(cert: secured.infousa.com; shows that domain)
+		- list.infousa.com *
+		- secured.infousa.com *
 
+	* Connection reset by peer
 
 	Problematic hosts:
 
@@ -34,7 +31,7 @@ Fetch error: http://secured.infousa.com/ => https://secured.infousa.com/: (35, '
 		- .link.p0.com
 
 -->
-<ruleset name="Infogroup (partial)" default_off='failed ruleset test'>
+<ruleset name="Infogroup (partial)">
 
 	<!--	Direct rewrites:
 				-->
@@ -43,7 +40,6 @@ Fetch error: http://secured.infousa.com/ => https://secured.infousa.com/: (35, '
 	<target host="ca.infousa.com" />
 	<target host="leads.infousa.com" />
 	<target host="publicfiling.infousa.com" />
-	<target host="secured.infousa.com" />
 	<target host="shared.sub.infousa.com" />
 	<target host="www.infousa.com" />
 

From 6c7510ca48b4ae7f9d11e35baaec0115d0d0a6aa Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sun, 21 Jun 2015 07:08:44 +0000
Subject: [PATCH 45/58] [Informa Healthcare] Fix, reenable, tests

---
 .../content/rules/Informa_Healthcare.xml      | 37 ++++++++++++++-----
 1 file changed, 27 insertions(+), 10 deletions(-)

diff --git a/src/chrome/content/rules/Informa_Healthcare.xml b/src/chrome/content/rules/Informa_Healthcare.xml
index 4ecd937e64ab..69e60388e888 100644
--- a/src/chrome/content/rules/Informa_Healthcare.xml
+++ b/src/chrome/content/rules/Informa_Healthcare.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://informahealthcarestore.com/ => https://informahealthcarestore.com/: (51, "SSL: no alternative certificate subject name matches target host name 'informahealthcarestore.com'")
-
 	For problematic rules, see Informa_Healthcare-problematic.xml.
 
 
@@ -16,11 +12,16 @@ Fetch error: http://informahealthcarestore.com/ => https://informahealthcarestor
 
 		- informahealthcare.com subdomains:
 
-			- comms *
-			- contact *
+			- comms ¹
+			- contact ¹
 			- www		(cert only matches ^informahealthcare.com)
 
-	* Works, mismatched, CN: *.gridserver.com
+		- informahealthcarestore.com subdomains:
+
+			- ^ ²
+
+	¹ Works, mismatched, CN: *.gridserver.com
+	² Works, mismatched, CN: ssl2528.cloudflare.com
 
 
 	Partially covered domains:
@@ -28,12 +29,28 @@ Fetch error: http://informahealthcarestore.com/ => https://informahealthcarestor
 		- (www.)informahealthcare.com		(most pages redirect to http)
 
 -->
-<ruleset name="Informa Healthcare (partial)" default_off='failed ruleset test'>
+<ruleset name="Informa Healthcare (partial)">
 
 	<target host="informahealthcare.com" />
 	<target host="www.informahealthcare.com" />
 	<target host="informahealthcarestore.com" />
-	<target host="*.informahealthcarestore.com" />
+	<target host="www.informahealthcarestore.com" />
+
+
+	<!-- Coverage hack -->
+	<exclusion pattern="^http://(?:www\.)?informahealthcare\.com/$" />
+
+
+	<test url="http://informahealthcare.com/" />
+	<test url="http://informahealthcare.com/action/registration" />
+	<test url="http://informahealthcare.com/favicon.ico" />
+	<test url="http://informahealthcare.com/sda/1801/informa-logo.png" />
+	<test url="http://informahealthcare.com/templates/jsp/style.css" />
+	<test url="http://www.informahealthcare.com/" />
+	<test url="http://www.informahealthcare.com/action/registration" />
+	<test url="http://www.informahealthcare.com/favicon.ico" />
+	<test url="http://www.informahealthcare.com/sda/1801/informa-logo.png" />
+	<test url="http://www.informahealthcare.com/templates/jsp/style.css" />
 
 
 	<securecookie host="^\.(?:www\.)?informahealthcarestore\.com$" name=".+" />
@@ -43,6 +60,6 @@ Fetch error: http://informahealthcarestore.com/ => https://informahealthcarestor
 		to="https://informahealthcare.com/$1" />
 
 	<rule from="^http://(www\.)?informahealthcarestore\.com/"
-		to="https://$1informahealthcarestore.com/" />
+		to="https://www.informahealthcarestore.com/" />
 
 </ruleset>

From 745163705d9c8bb2a53e56b674adb73abd76b177 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sun, 21 Jun 2015 07:18:20 +0000
Subject: [PATCH 46/58] [Integrity.pt] Reenable; transient issue? Update style.

---
 src/chrome/content/rules/Integrity.pt.xml | 13 +++++--------
 1 file changed, 5 insertions(+), 8 deletions(-)

diff --git a/src/chrome/content/rules/Integrity.pt.xml b/src/chrome/content/rules/Integrity.pt.xml
index e4869d4524b5..6ee7e9812d08 100644
--- a/src/chrome/content/rules/Integrity.pt.xml
+++ b/src/chrome/content/rules/Integrity.pt.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://integrity.pt/ => https://integrity.pt/: (28, 'Operation timed out after 15002 milliseconds with 0 bytes received')
-
 	NB: Tor users cannot view* this website due to CloudFlare settings.
 
 	See:
@@ -18,16 +14,17 @@ Fetch error: http://integrity.pt/ => https://integrity.pt/: (28, 'Operation time
 		- https://panopticlick.eff.org
 
 -->
-<ruleset name="Integrity.pt" default_off='failed ruleset test'>
+<ruleset name="Integrity.pt">
 
 	<target host="integrity.pt" />
-	<target host="*.integrity.pt" />
+	<target host="labs.integrity.pt" />
+	<target host="www.integrity.pt" />
 
 
 	<securecookie host="^\.integrity\.pt$" name=".+" />
 
 
-	<rule from="^http://(labs\.|www\.)?integrity\.pt/"
-		to="https://$1integrity.pt/" />
+	<rule from="^http:"
+		to="https:" />
 
 </ruleset>

From 08558585e408b766f5f3a5cbb4ccfc7a8ede11c3 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Sun, 21 Jun 2015 07:34:53 +0000
Subject: [PATCH 47/58] [Interactive Media Awards] Reenable. Expired cert has
 been updated.

I don't think it needs to force www, but maybe there's a reason for it.
---
 src/chrome/content/rules/Interactive-Media-Awards.xml | 9 +--------
 1 file changed, 1 insertion(+), 8 deletions(-)

diff --git a/src/chrome/content/rules/Interactive-Media-Awards.xml b/src/chrome/content/rules/Interactive-Media-Awards.xml
index f6843c52e74c..51296d9ce4e1 100644
--- a/src/chrome/content/rules/Interactive-Media-Awards.xml
+++ b/src/chrome/content/rules/Interactive-Media-Awards.xml
@@ -1,11 +1,4 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://interactivemediaawards.com/ => https://www.interactivemediaawards.com/: (60, 'SSL certificate problem: certificate has expired')
-Fetch error: http://www.interactivemediaawards.com/ => https://www.interactivemediaawards.com/: (60, 'SSL certificate problem: certificate has expired')
-
--->
-<ruleset name="Interactive Media Awards" default_off='failed ruleset test'>
+<ruleset name="Interactive Media Awards">
 
 	<target host="interactivemediaawards.com"/>
 	<target host="www.interactivemediaawards.com"/>

From f414e5671ea2f3207987d4a49813d2a7d1540090 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Mon, 22 Jun 2015 22:19:33 +0000
Subject: [PATCH 48/58] [Cake Central.com] Fix, reenable

---
 src/chrome/content/rules/Cake_Central.com.xml | 12 ++++--------
 1 file changed, 4 insertions(+), 8 deletions(-)

diff --git a/src/chrome/content/rules/Cake_Central.com.xml b/src/chrome/content/rules/Cake_Central.com.xml
index 1bbbcdc351d5..ef5a9e1251dc 100644
--- a/src/chrome/content/rules/Cake_Central.com.xml
+++ b/src/chrome/content/rules/Cake_Central.com.xml
@@ -1,24 +1,20 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://cdn.cakecentral.com/ => https://d2r287735ijf1o.cloudfront.net/: (6, 'Could not resolve host: d2r287735ijf1o.cloudfront.net')
-
 	CDN buckets:
 
-		- d2r287735ijf1o.cloudfront.net
+		- cdn.cakecentral.com.s3.amazonaws.com
 
 			- cdn
 
 
-	(www.): redirects to http, valid cert
+	(www.): connection refused
 
 -->
-<ruleset name="Cake Central.com (partial)" default_off='failed ruleset test'>
+<ruleset name="Cake Central.com (partial)">
 
 	<target host="cdn.cakecentral.com" />
 
 
 	<rule from="^http://cdn\.cakecentral\.com/"
-		to="https://d2r287735ijf1o.cloudfront.net/" />
+		to="https://s3.amazonaws.com/cdn.cakecentral.com/" />
 
 </ruleset>

From db2cc9d35702d24172bc4123009820dc97192712 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Mon, 22 Jun 2015 23:12:41 +0000
Subject: [PATCH 49/58] [Ansible.com] releases works now.

docs does too, but there's a little mixed content...
---
 src/chrome/content/rules/Ansible.com.xml | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/chrome/content/rules/Ansible.com.xml b/src/chrome/content/rules/Ansible.com.xml
index de6c9779e03e..d4de46e435f8 100644
--- a/src/chrome/content/rules/Ansible.com.xml
+++ b/src/chrome/content/rules/Ansible.com.xml
@@ -16,12 +16,9 @@
 
 	Nonfunctional subdomains:
 
-		- ^ ¹
-		- docs ²
-		- releases ²
+		- ^ *
 
-	¹ times out
-	² 503, valid cert
+	* times out
 
 
 	www: works, akamai
@@ -36,6 +33,7 @@
 
 		- Images, on:
 
+			- docs from www
 			- www from $self ¹
 			- www from cdn2.hubspot.net ²
 
@@ -45,7 +43,9 @@
 -->
 <ruleset name="Ansible.com (partial)">
 
+	<target host="docs.ansible.com" />
 	<target host="galaxy.ansible.com" />
+	<target host="releases.ansible.com" />
 
 
 	<securecookie host="^\.ansible\.com$" name="^__cfduid$" />

From 3df686e270ae18f462e5ba09126e2aa78b5660f1 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Wed, 24 Jun 2015 01:34:13 +0000
Subject: [PATCH 50/58] [Google App Engine] Fix whitespace, not that it matters

---
 src/chrome/content/rules/Google_App_Engine.xml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/chrome/content/rules/Google_App_Engine.xml b/src/chrome/content/rules/Google_App_Engine.xml
index dea190fa5187..83c7d7afacf3 100644
--- a/src/chrome/content/rules/Google_App_Engine.xml
+++ b/src/chrome/content/rules/Google_App_Engine.xml
@@ -26,6 +26,7 @@
 
 	<test url="http://hstspreload.appspot.com/" />
 
+
 	<securecookie host="^.+\.appspot\.com$" name=".+" />
 
 

From 081c601c80f9ea430c7b864e08950031e623207b Mon Sep 17 00:00:00 2001
From: Jacob Hoffman-Andrews <github@hoffman-andrews.com>
Date: Wed, 24 Jun 2015 14:40:08 -0700
Subject: [PATCH 51/58] Re-enable Wikimedia.

---
 src/chrome/content/rules/Wikimedia.xml | 5 +----
 1 file changed, 1 insertion(+), 4 deletions(-)

diff --git a/src/chrome/content/rules/Wikimedia.xml b/src/chrome/content/rules/Wikimedia.xml
index e90c7f3e7cac..50abc76801c9 100644
--- a/src/chrome/content/rules/Wikimedia.xml
+++ b/src/chrome/content/rules/Wikimedia.xml
@@ -1,8 +1,5 @@
-
 <!--
 Disabled by https-everywhere-checker because:
-Fetch error: http://icinga.wmflabs.org/ => https://icinga.wmflabs.org/: (6, 'Could not resolve host: icinga.wmflabs.org')
-Fetch error: http://ganglia.wmflabs.org/ => https://ganglia.wmflabs.org/: (6, 'Could not resolve host: ganglia.wmflabs.org')
 
 	Wikipedia and other Wikimedia Foundation wikis previously had no real HTTPS support, and
 	URLs had to be rewritten to https://secure.wikimedia.org/$wikitype/$language/ . This is no
@@ -36,7 +33,7 @@ Fetch error: http://ganglia.wmflabs.org/ => https://ganglia.wmflabs.org/: (6, 'C
 	* Secured by us
 
 -->
-<ruleset name="Wikimedia" default_off='failed ruleset test'>
+<ruleset name="Wikimedia">
 
 	<target host="enwp.org" />
 	<target host="frwp.org" />

From cb5765c9ac52cd3653209f60bdb0797d7a4819b7 Mon Sep 17 00:00:00 2001
From: Matt Nordhoff <mnordhoff@mattnordhoff.com>
Date: Thu, 25 Jun 2015 05:55:38 +0000
Subject: [PATCH 52/58] [FBI.gov] Add www again

---
 .../content/rules/Federal-Bureau-of-Investigation.xml     | 8 ++------
 1 file changed, 2 insertions(+), 6 deletions(-)

diff --git a/src/chrome/content/rules/Federal-Bureau-of-Investigation.xml b/src/chrome/content/rules/Federal-Bureau-of-Investigation.xml
index 47edc99d01f3..f11c32582b5b 100644
--- a/src/chrome/content/rules/Federal-Bureau-of-Investigation.xml
+++ b/src/chrome/content/rules/Federal-Bureau-of-Investigation.xml
@@ -9,7 +9,7 @@
 		- .fbi.gov
 
 -->
-<ruleset name="FBI.gov (partial)">
+<ruleset name="FBI.gov">
 
 	<!--	Direct rewrites:
 				-->
@@ -17,16 +17,12 @@
 	<target host="forms.fbi.gov" />
 	<target host="tips.fbi.gov" />
 	<target host="vault.fbi.gov" />
-	<!--target host="www.fbi.gov" /-->
+	<target host="www.fbi.gov" />
 
 	<!--	Complications:
 				-->
 	<target host="fbi.gov" />
 
-		<!--	Redirects to http:
-					-->
-		<!--exclusion pattern="^http://www\.fbi\.gov/$" /-->
-
 
 	<!--	CloudFlare cookies:
 					-->

From 2225705e8f9914aab9d5bff33c32b91a9bc07da1 Mon Sep 17 00:00:00 2001
From: Jacob Hoffman-Andrews <github@hoffman-andrews.com>
Date: Thu, 25 Jun 2015 18:10:41 -0700
Subject: [PATCH 53/58] Re-enable Adobe Alibaba AmazonAWS and Amnesty

---
 src/chrome/content/rules/Adobe.xml                 |  7 +------
 src/chrome/content/rules/Alibaba.xml               |  9 ++-------
 src/chrome/content/rules/AmazonAWS.xml             | 13 +++++--------
 src/chrome/content/rules/Amnesty-International.xml |  7 ++-----
 4 files changed, 10 insertions(+), 26 deletions(-)

diff --git a/src/chrome/content/rules/Adobe.xml b/src/chrome/content/rules/Adobe.xml
index 05d539caca76..38e24251f840 100644
--- a/src/chrome/content/rules/Adobe.xml
+++ b/src/chrome/content/rules/Adobe.xml
@@ -1,8 +1,5 @@
 
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://aihdownload.adobe.com/ => https://aihdownload.adobe.com/: (6, 'Could not resolve host: aihdownload.adobe.com')
-
 	For problematic rules, see Adobe-mismatches.xml.
 
 
@@ -99,7 +96,6 @@ Fetch error: http://aihdownload.adobe.com/ => https://aihdownload.adobe.com/: (6
 	Fully covered subdomains:
 
 		- (www.)
-		- aihdownload
 		- demand.assets
 		- entitlement.auth
 		- sp.auth
@@ -191,10 +187,9 @@ Fetch error: http://aihdownload.adobe.com/ => https://aihdownload.adobe.com/: (6
 	* Secured by us
 
 -->
-<ruleset name="Adobe.com" default_off='failed ruleset test'>
+<ruleset name="Adobe.com">
 
 	<target host="adobe.com" />
-	<target host="aihdownload.adobe.com" />
 	<target host="demand.assets.adobe.com" />
 	<target host="entitlement.auth.adobe.com" />
 	<target host="sp.auth.adobe.com" />
diff --git a/src/chrome/content/rules/Alibaba.xml b/src/chrome/content/rules/Alibaba.xml
index 6110ee1c00f6..c9ae6626ee64 100644
--- a/src/chrome/content/rules/Alibaba.xml
+++ b/src/chrome/content/rules/Alibaba.xml
@@ -1,7 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://escrow.alibaba.com/ => https://escrow.alibaba.com/: (28, 'Connection timed out after 10000 milliseconds')
 
 	Other Alibaba rulesets:
 
@@ -78,19 +75,17 @@ Fetch error: http://escrow.alibaba.com/ => https://escrow.alibaba.com/: (28, 'Co
 	Fully covered subdomains:
 
 		- 102
-		- escrow
 		- job
 		- login
 		- style		(→ stylessl)
 		- stylessl
 
 -->
-<ruleset name="Alibaba.com (partial)" default_off='failed ruleset test'>
+<ruleset name="Alibaba.com (partial)">
 
 	<!--	Direct rewrites:
 				-->
 	<target host="102.alibaba.com" />
-	<target host="escrow.alibaba.com" />
 	<target host="job.alibaba.com" />
 	<target host="login.alibaba.com" />
 	<target host="stylessl.alibaba.com" />
@@ -100,7 +95,7 @@ Fetch error: http://escrow.alibaba.com/ => https://escrow.alibaba.com/: (28, 'Co
 	<target host="style.alibaba.com" />
 
 
-	<securecookie host="^(?:102|escrow|job)\.alibaba\.com$" name=".+" />
+	<securecookie host="^(?:102|job)\.alibaba\.com$" name=".+" />
 
 
 	<rule from="^http://style\.alibaba\.com/"
diff --git a/src/chrome/content/rules/AmazonAWS.xml b/src/chrome/content/rules/AmazonAWS.xml
index 5a4a6ef4343b..0b792004e513 100644
--- a/src/chrome/content/rules/AmazonAWS.xml
+++ b/src/chrome/content/rules/AmazonAWS.xml
@@ -1,12 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Non-2xx HTTP code: http://ec2.images-amazon.com/ (200) => https://images-na.ssl-images-amazon.com/ (403)
-
-	Note: This rule generates incorrect "Cycle detected" errors
-	from https-everywhere-checker, because forums.aws.amazon.com
-	will go into a redirect loop if a client does not handle
-	cookies. https://github.com/EFForg/https-everywhere/issues/1128
 	For rules that break image zoom, see AmazonAWS-breakzoom.xml.
 
 	For other Amazon coverage, see Amazon.xml.
@@ -130,6 +122,11 @@ Non-2xx HTTP code: http://ec2.images-amazon.com/ (200) => https://images-na.ssl-
 							-->
 		<exclusion pattern="^http://s3\.amazonaws\.com/pb_(sfx_)?previews/" />
 
+		<!-- Implicit test URL for this host gets 404 when rewritten, but resources
+				 other than / work. -->
+		<exclusion pattern="^http://ec\.images-amazon\.com/$" />
+		<test url="http://ec.images-amazon.com/" />
+
 		<!--
 			https://trac.torproject.org/projects/tor/ticket/7857
 
diff --git a/src/chrome/content/rules/Amnesty-International.xml b/src/chrome/content/rules/Amnesty-International.xml
index 9deda55a2687..db4c230a4b19 100644
--- a/src/chrome/content/rules/Amnesty-International.xml
+++ b/src/chrome/content/rules/Amnesty-International.xml
@@ -1,7 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://files.amnesty.org/ => https://files.amnesty.org/: (7, 'Failed to connect to files.amnesty.org port 443: Connection refused')
 
 	Other Amnesty International rulesets:
 
@@ -19,6 +16,7 @@ Fetch error: http://files.amnesty.org/ => https://files.amnesty.org/: (7, 'Faile
 	Nonfunctional hosts in *amnesty.org:
 
 		- web	(http reply)
+		- files (connections refused on 443)
 
 
 	Fully covered hosts in *amnesty.org:
@@ -37,14 +35,13 @@ Fetch error: http://files.amnesty.org/ => https://files.amnesty.org/: (7, 'Faile
 		- .www.amnesty.org
 
 -->
-<ruleset name="Amnesty.org (partial)" default_off='failed ruleset test'>
+<ruleset name="Amnesty.org (partial)">
 
 	<!--	Direct rewrites:
 				-->
 	<target host="amnesty.org" />
 	<target host="action.amnesty.org" />
 	<target host="adam.amnesty.org" />
-	<target host="files.amnesty.org" />
 	<target host="livewire.amnesty.org" />
 	<target host="www.amnesty.org" />
 

From e7deb0dd100160f03ac3b2a842cc119f55560f1d Mon Sep 17 00:00:00 2001
From: Jacob Hoffman-Andrews <github@hoffman-andrews.com>
Date: Thu, 25 Jun 2015 19:08:37 -0700
Subject: [PATCH 54/58] Update several rules disabled by checker.

---
 src/chrome/content/rules/AmericanExpress.xml  |  5 --
 src/chrome/content/rules/Costco.xml           |  9 +---
 src/chrome/content/rules/E-food.gr.xml        | 11 +---
 src/chrome/content/rules/Friendfeed.xml       | 51 -------------------
 .../content/rules/Geek_Tech_Labs.com.xml      | 14 +++--
 src/chrome/content/rules/Gentoo.xml           |  2 +-
 src/chrome/content/rules/HubSpot.xml          |  6 +--
 src/chrome/content/rules/KDE.xml              | 10 +---
 src/chrome/content/rules/Lenovo.xml           | 13 +----
 src/chrome/content/rules/LinkedIn.xml         |  9 +---
 src/chrome/content/rules/MIT.xml              | 19 +------
 src/chrome/content/rules/Mercy_Ships.xml      | 15 ++----
 src/chrome/content/rules/Oracle.xml           | 29 +----------
 src/chrome/content/rules/QQ.xml               | 10 +---
 src/chrome/content/rules/Rambler.xml          | 17 +------
 src/chrome/content/rules/Secureserver.net.xml |  7 +--
 src/chrome/content/rules/SlideShare.xml       |  8 +--
 src/chrome/content/rules/SnapEngage.xml       | 10 +---
 src/chrome/content/rules/Twimg.com.xml        | 21 +-------
 src/chrome/content/rules/Twitter.xml          | 10 +---
 src/chrome/content/rules/UOL.xml              | 12 +----
 src/chrome/content/rules/Vice.xml             | 14 +----
 .../content/rules/Virtual_News_Center.xml     |  3 +-
 src/chrome/content/rules/Xbox.xml             | 13 +----
 src/chrome/content/rules/Yahoo_Japan.xml      | 21 +-------
 src/chrome/content/rules/Yandex.ua.xml        | 18 ++-----
 src/chrome/content/rules/Zoho.jp.xml          | 11 +---
 27 files changed, 38 insertions(+), 330 deletions(-)
 delete mode 100644 src/chrome/content/rules/Friendfeed.xml

diff --git a/src/chrome/content/rules/AmericanExpress.xml b/src/chrome/content/rules/AmericanExpress.xml
index b0f3849db0d6..970f943d49ae 100644
--- a/src/chrome/content/rules/AmericanExpress.xml
+++ b/src/chrome/content/rules/AmericanExpress.xml
@@ -1,7 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Non-2xx HTTP code: http://axptravel.americanexpress.com/ (200) => https://axptravel.americanexpress.com/ (404)
 
 	Other American Express rulesets:
 
@@ -36,7 +33,6 @@ Non-2xx HTTP code: http://axptravel.americanexpress.com/ (200) => https://axptra
 	Fully covered hosts in *americanexpress.com:
 
 		- (www.)?
-		- axptravel
 		- business
 		- careers
 		- secure.cmax
@@ -95,7 +91,6 @@ Non-2xx HTTP code: http://axptravel.americanexpress.com/ (200) => https://axptra
 				-->
   <target host="www.americanexpress.com" />
   <target host="americanexpress.com" />
-	<target host="axptravel.americanexpress.com" />
 	<target host="business.americanexpress.com" />
 	<target host="careers.americanexpress.com" />
 	<target host="secure.cmax.americanexpress.com" />
diff --git a/src/chrome/content/rules/Costco.xml b/src/chrome/content/rules/Costco.xml
index e5dec64cdee1..bc6e301ac3b9 100644
--- a/src/chrome/content/rules/Costco.xml
+++ b/src/chrome/content/rules/Costco.xml
@@ -1,9 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://shop.costco.com/ => https://shop.costco.com/: (51, "SSL: no alternative certificate subject name matches target host name 'shop.costco.com'")
-Fetch error: http://www2.costco.com/ => https://www2.costco.com/: (56, 'SSL read: error:00000000:lib(0):func(0):reason(0), errno 104')
-
 	Other Costco rulesets:
 
 		- Costco-static.com.xml
@@ -30,14 +25,12 @@ Fetch error: http://www2.costco.com/ => https://www2.costco.com/: (56, 'SSL read
 		- www2.costco.com
 
 -->
-<ruleset name="Costco.com (partial)" default_off='failed ruleset test'>
+<ruleset name="Costco.com (partial)">
 
 	<!--	Direct rewrites:
 				-->
 	<target host="customerservice.costco.com" />
-	<target host="shop.costco.com" />
 	<target host="www.costco.com" />
-	<target host="www2.costco.com" />
 
 	<!--	Complications:
 				-->
diff --git a/src/chrome/content/rules/E-food.gr.xml b/src/chrome/content/rules/E-food.gr.xml
index 3656a24e4dd3..5e05f5000b46 100644
--- a/src/chrome/content/rules/E-food.gr.xml
+++ b/src/chrome/content/rules/E-food.gr.xml
@@ -1,15 +1,8 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://e-food.gr/ => https://e-food.gr/: (60, 'SSL certificate problem: certificate has expired')
- This ruleset is experimental. If you experience problems please
-	 open an issue at https://github.com/kargig/https-everywhere -->
-
-<ruleset name="e-food.gr" default_off='failed ruleset test'>
+<ruleset name="e-food.gr">
   <target host="e-food.gr" />
   <target host="www.e-food.gr" />
 
 	<securecookie host="^(?:www\.)?e-food\.gr$" name=".*"/>
 
-  <rule from="^http://(www\.)?e-food\.gr/" to="https://$1e-food.gr/"/>
+  <rule from="^http:" to="https:"/>
 </ruleset>
diff --git a/src/chrome/content/rules/Friendfeed.xml b/src/chrome/content/rules/Friendfeed.xml
deleted file mode 100644
index 9c44e34f845a..000000000000
--- a/src/chrome/content/rules/Friendfeed.xml
+++ /dev/null
@@ -1,51 +0,0 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://friendfeed.com/ => https://friendfeed.com/: (51, "SSL: no alternative certificate subject name matches target host name 'friendfeed.com'")
-Fetch error: http://friendfeed-media.com/ => https://friendfeed.com/: (51, "SSL: no alternative certificate subject name matches target host name 'friendfeed.com'")
-
-	CDN buckets:
-
-		- s3.amazonaws.com/friendfeed-media/
-
-		- dp8iegxu665q2.cloudfront.net
-
-			- m.friendfeed-media.com
-
-
-	Nonfunctional:
-
-		- blog.friendfeed.com	(times out)
-
-
-	Mixed content:
-
-		- Image on friendfeed.com from m.friendfeed-media.com *
-
-	* Secured by us
-
--->
-<ruleset name="Friendfeed" default_off='failed ruleset test'>
-
-	<target host="friendfeed.com" />
-	<target host="*.friendfeed.com" />
-	<target host="friendfeed-media.com" />
-	<target host="m.friendfeed-media.com" />
-
-
-	<securecookie host="^\.friendfeed\.com$" name="^AT$" />
-	<securecookie host="^friendfeed-media\.com$" name=".*" />
-
-
-	<!--	www.friendfeed-media redirects as so.	-->
-	<rule from="^http://(?:www\.)?friendfeed(?:-media)?\.com/"
-		to="https://friendfeed.com/" />
-
-	<rule from="^http://blog\.friendfeed\.com/favicon\.ico"
-		to="https://www.blogger.com/favicon.ico" />
-
-	<!--	!m redirects to m.	-->
-	<rule from="^http://(?:m\.)?friendfeed-media\.com/"
-		to="https://dp8iegxu665q2.cloudfront.net/" />
-
-</ruleset>
diff --git a/src/chrome/content/rules/Geek_Tech_Labs.com.xml b/src/chrome/content/rules/Geek_Tech_Labs.com.xml
index b91977599b38..ca2c3fcc1c45 100644
--- a/src/chrome/content/rules/Geek_Tech_Labs.com.xml
+++ b/src/chrome/content/rules/Geek_Tech_Labs.com.xml
@@ -1,7 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://geektechlabs.com/ => https://www.geektechlabs.com/: (60, 'SSL certificate problem: unable to get local issuer certificate')
 
 	Problematic subdomains:
 
@@ -29,16 +26,17 @@ Fetch error: http://geektechlabs.com/ => https://www.geektechlabs.com/: (60, 'SS
 	*** Rule not on by default, doesn't trip MCB
 
 -->
-<ruleset name="Geek Tech Labs.com" default_off='failed ruleset test'>
+<ruleset name="Geek Tech Labs.com">
 
 	<target host="geektechlabs.com" />
-	<target host="*.geektechlabs.com" />
+	<target host="www.geektechlabs.com" />
+	<target host="mysql.geektechlabs.com" />
 
 
-	<rule from="^http://(?:www\.)?geektechlabs\.com/"
+	<rule from="^http://geektechlabs\.com/"
 		to="https://www.geektechlabs.com/" />
 
-	<rule from="^http://mysql\.geektechlabs\.com/"
-		to="https://mysql.geektechlabs.com/" />
+	<rule from="^http:"
+		to="https:" />
 
 </ruleset>
diff --git a/src/chrome/content/rules/Gentoo.xml b/src/chrome/content/rules/Gentoo.xml
index d1f7275b0189..a874c1b07988 100644
--- a/src/chrome/content/rules/Gentoo.xml
+++ b/src/chrome/content/rules/Gentoo.xml
@@ -70,7 +70,7 @@
 	* Secured by us
 
 -->
-<ruleset name="Gentoo.org (partial)" default_off='failed ruleset test'>
+<ruleset name="Gentoo.org (partial)">
 
 	<target host="gentoo.org" />
 	<target host="*.gentoo.org" />
diff --git a/src/chrome/content/rules/HubSpot.xml b/src/chrome/content/rules/HubSpot.xml
index a4f407bbe99b..b5ec1e79affb 100644
--- a/src/chrome/content/rules/HubSpot.xml
+++ b/src/chrome/content/rules/HubSpot.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://cdn2.hubspot.com/ => https://cdn2.hubspot.com/: (60, 'SSL certificate problem: certificate has expired')
-
 	Other HubSpot rulesets:
 
 		- HS-analytics.net.xml
@@ -100,7 +96,7 @@ Fetch error: http://cdn2.hubspot.com/ => https://cdn2.hubspot.com/: (60, 'SSL ce
 			- academy, developers from cdn[12].hubspot.com
 
 -->
-<ruleset name="HubSpot.com" default_off='failed ruleset test'>
+<ruleset name="HubSpot.com">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/KDE.xml b/src/chrome/content/rules/KDE.xml
index d4acab4b8998..cfb9af972f63 100644
--- a/src/chrome/content/rules/KDE.xml
+++ b/src/chrome/content/rules/KDE.xml
@@ -1,10 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Non-2xx HTTP code: http://files.kde.org/edu/logo/KDEdu%20versiones.svg.metalink (200) => https://files.kde.org/edu/logo/KDEdu%20versiones.svg.metalink (404)
-Fetch error: http://admin.bugs.kde.org/ => https://admin.bugs.kde.org/: (6, 'Could not resolve host: admin.bugs.kde.org')
-Fetch error: http://sandbox.bugs.kde.org/ => https://sandbox.bugs.kde.org/: (6, 'Could not resolve host: sandbox.bugs.kde.org')
-
 	Other KDE rulesets:
 
 		- Calligra.org.xml
@@ -112,7 +106,7 @@ Fetch error: http://sandbox.bugs.kde.org/ => https://sandbox.bugs.kde.org/: (6,
 		- sysadmin.kde.org
 
 -->
-<ruleset name="KDE.org (partial)" default_off='failed ruleset test'>
+<ruleset name="KDE.org (partial)">
 
 	<!--	Direct rewrites:
 				-->
@@ -128,8 +122,6 @@ Fetch error: http://sandbox.bugs.kde.org/ => https://sandbox.bugs.kde.org/: (6,
 	<target host="amarok.kde.org" />
 	<target host="blogs.kde.org" />
 	<target host="bugs.kde.org" />
-	<target host="admin.bugs.kde.org" />
-	<target host="sandbox.bugs.kde.org" />
 	<target host="build.kde.org" />
 	<target host="cdn.kde.org" />
 	<target host="community.kde.org" />
diff --git a/src/chrome/content/rules/Lenovo.xml b/src/chrome/content/rules/Lenovo.xml
index f10edc418f1b..f9dca6870ee0 100644
--- a/src/chrome/content/rules/Lenovo.xml
+++ b/src/chrome/content/rules/Lenovo.xml
@@ -1,15 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://consumersupport.lenovo.com => https://consumersupport.lenovo.com: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
-Fetch error: http://news.lenovo.com => https://news.lenovo.com: (51, "SSL: no alternative certificate subject name matches target host name 'news.lenovo.com'")
-Fetch error: http://www.partnerinfo.lenovo.com => https://www.partnerinfo.lenovo.com: (7, 'Failed to connect to www.partnerinfo.lenovo.com port 443: Connection refused')
-Fetch error: http://social.lenovo.com => https://social.lenovo.com: (28, 'Connection timed out after 10000 milliseconds')
-Fetch error: http://lenovo.com/friendsandfamily => https://shop.lenovo.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=lenovofamily&ConfigContext=StdAffinityPortal: Too many redirects while fetching 'https://shop.lenovo.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=lenovofamily&ConfigContext=StdAffinityPortal'
-Fetch error: http://lenovo.com/friendsandfamily/ => https://shop.lenovo.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=lenovofamily&ConfigContext=StdAffinityPortal: Too many redirects while fetching 'https://shop.lenovo.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=lenovofamily&ConfigContext=StdAffinityPortal'
-Fetch error: http://www.lenovo.com/friendsandfamily/ => https://shop.lenovo.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=lenovofamily&ConfigContext=StdAffinityPortal: Too many redirects while fetching 'https://shop.lenovo.com/SEUILibrary/controller/Lenovo:EnterStdAffinity?affinity=lenovofamily&ConfigContext=StdAffinityPortal'
-Fetch error: http://support.lenovo.com/ => https://support.lenovo.com/: Too many redirects while fetching 'https://support.lenovo.com/'
-
 	Other Lenovo rulesets:
 
 		- Lenovo_Orders.com.xml
@@ -112,7 +101,7 @@ Fetch error: http://support.lenovo.com/ => https://support.lenovo.com/: Too many
 		- Bug on forums from lenovoblogs.112.2o7.net
 
 -->
-<ruleset name="Lenovo (partial)" default_off='failed ruleset test'>
+<ruleset name="Lenovo (partial)">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/LinkedIn.xml b/src/chrome/content/rules/LinkedIn.xml
index fa7c5652a02c..2d7165ac41b3 100644
--- a/src/chrome/content/rules/LinkedIn.xml
+++ b/src/chrome/content/rules/LinkedIn.xml
@@ -1,10 +1,3 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://marketing.linkedin.com/ => https://marketing.linkedin.com/: Too many redirects while fetching 'https://marketing.linkedin.com/'
-
--->
-
 <!--
 	NB: massively important => backport this
 
@@ -229,7 +222,7 @@ Fetch error: http://marketing.linkedin.com/ => https://marketing.linkedin.com/:
 		- Bug on business from www.pubads.g.doubleclick.net
 
 -->
-<ruleset name="LinkedIn.com (partial)" default_off='failed ruleset test'>
+<ruleset name="LinkedIn.com (partial)">
 
 	<target host="linkedin.com" />
 	<target host="*.linkedin.com" />
diff --git a/src/chrome/content/rules/MIT.xml b/src/chrome/content/rules/MIT.xml
index 5f0ed02a289b..fe02c6905da7 100644
--- a/src/chrome/content/rules/MIT.xml
+++ b/src/chrome/content/rules/MIT.xml
@@ -1,14 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Non-2xx HTTP code: http://mit.edu/ (200) => https://mit.edu/ (401)
-Fetch error: http://calendars.mit.edu/ => https://calendars.mit.edu/: Too many redirects while fetching 'https://calendars.mit.edu/'
-Non-2xx HTTP code: http://people.csail.mit.edu/ (200) => https://people.csail.mit.edu/ (403)
-Fetch error: http://entrepreneurship.mit.edu/ => https://entrepreneurship.mit.edu/: Too many redirects while fetching 'https://entrepreneurship.mit.edu/'
-Fetch error: http://linerva.mit.edu/ => https://linerva.mit.edu/: (28, 'Connection timed out after 10001 milliseconds')
-Fetch error: http://mail.mit.edu/ => https://mail.mit.edu/: (6, 'Could not resolve host: mail.mit.edu')
-Fetch error: http://webmail.mit.edu/ => https://webmail.mit.edu/: (60, 'SSL certificate problem: unable to get local issuer certificate')
-
 	Most of this ruleset is commented out, because large parts fail automated tests.
 	Reasons for failing are described below.
 	Feel free to reenable functional subdomains.
@@ -257,23 +247,20 @@ Fetch error: http://webmail.mit.edu/ => https://webmail.mit.edu/: (60, 'SSL cert
 	³ Rule disabled by default <= expired & self-signed
 
 -->
-<ruleset name="MIT.edu (partial)" default_off='failed ruleset test'>
+<ruleset name="MIT.edu (partial)">
 
 	<!--	Direct rewrites:
 				-->
-	<target host="mit.edu" />
 	<target host="alum.mit.edu" />
 	<target host="alumsso.mit.edu" />
 	<target host="athena10.mit.edu" />
 	<target host="blossoms.mit.edu" />
 	<target host="ca.mit.edu" />
-	<target host="calendars.mit.edu" />
 	<target host="chemefacsrch.mit.edu" />
 
 	<target host="calendar.csail.mit.edu" />
 	<target host="cap.csail.mit.edu" />
 	<target host="groups.csail.mit.edu" />
-	<target host="people.csail.mit.edu" />
 	<target host="projects.csail.mit.edu" />
 	<target host="www.csail.mit.edu" />
 
@@ -286,7 +273,6 @@ Fetch error: http://webmail.mit.edu/ => https://webmail.mit.edu/: (60, 'SSL cert
 
 	<target host="engineering.mit.edu" />
 	<target host="esd.mit.edu" />
-	<target host="entrepreneurship.mit.edu" />
 	<target host="cms.executive.mit.edu" />
 	<target host="oeit-tsa.mit.edu" />
 	<target host="future.mit.edu" />
@@ -302,13 +288,10 @@ Fetch error: http://webmail.mit.edu/ => https://webmail.mit.edu/: (60, 'SSL cert
 	<target host="library.mit.edu" />
 	<target host="lids.mit.edu" />
 	<target host="linc.mit.edu" />
-	<target host="linerva.mit.edu" />
 
 	<target host="llwebprod2.ll.mit.edu" />
 	<target host="www.ll.mit.edu" />
 
-	<target host="mail.mit.edu" />
-
 	<target host="immersion.media.mit.edu" />
 	<target host="www.media.mit.edu" />
 
diff --git a/src/chrome/content/rules/Mercy_Ships.xml b/src/chrome/content/rules/Mercy_Ships.xml
index 29e0bedcaa8f..d5095958c1f3 100644
--- a/src/chrome/content/rules/Mercy_Ships.xml
+++ b/src/chrome/content/rules/Mercy_Ships.xml
@@ -1,14 +1,8 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://mercyships.org/ => https://mercyships.org/: Too many redirects while fetching 'https://mercyships.org/'
-
--->
-<ruleset name="Mercy Ships (partial)" default_off='failed ruleset test'>
+<ruleset name="Mercy Ships (partial)">
 
 	<target host="www.mercyships.org.s3.amazonaws.com" />
 	<target host="mercyships.org" />
-	<target host="*.mercyships.org" />
+	<target host="www.mercyships.org" />
 
 
 	<securecookie host="^(?:w*\.)?mercyships\.org$" name=".+" />
@@ -16,8 +10,9 @@ Fetch error: http://mercyships.org/ => https://mercyships.org/: Too many redirec
 
 	<rule from="^http://www\.mercyships\.org\.s3-us-west-1\.amazonaws\.com/"
 		to="https://s3-us-west-1.amazonaws.com/www.mercyships.org/" />
+	<test url="http://www.mercyships.org.s3-us-west-1.amazonaws.com/" />
 
-	<rule from="^http://(www\.)?mercyships\.org/"
-		to="https://$1mercyships.org/" />
+	<rule from="^http:"
+		to="https:" />
 
 </ruleset>
diff --git a/src/chrome/content/rules/Oracle.xml b/src/chrome/content/rules/Oracle.xml
index 387c3f30b593..540993dd2819 100644
--- a/src/chrome/content/rules/Oracle.xml
+++ b/src/chrome/content/rules/Oracle.xml
@@ -1,15 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://competencycentre.oracle.com/ => https://competencycentre.oracle.com/: (6, 'Could not resolve host: competencycentre.oracle.com')
-Fetch error: http://prc-fusioncrm.oracle.com/ => https://prc-fusioncrm.oracle.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
-Fetch error: http://prj-fusioncrm.oracle.com/ => https://prj-fusioncrm.oracle.com/: (28, 'Operation timed out after 15001 milliseconds with 0 bytes received')
-Fetch error: http://itsp.oracle.com/ => https://itsp.oracle.com/: (6, 'Could not resolve host: itsp.oracle.com')
-Fetch error: http://itsp-stage.oracle.com/ => https://itsp-stage.oracle.com/: (6, 'Could not resolve host: itsp-stage.oracle.com')
-Fetch error: http://otn.oracle.com/ => https://otn.oracle.com/: (51, "SSL: no alternative certificate subject name matches target host name 'otn.oracle.com'")
-Fetch error: http://partners.oracle.com/ => https://partners.oracle.com/: (51, "SSL: no alternative certificate subject name matches target host name 'partners.oracle.com'")
-Fetch error: http://public-yum.oracle.com/ => https://public-yum.oracle.com/: (51, "SSL: no alternative certificate subject name matches target host name 'public-yum.oracle.com'")
-
 	See Oracle-mismatches.xml for problematic rules.
 
 
@@ -135,7 +124,6 @@ Fetch error: http://public-yum.oracle.com/ => https://public-yum.oracle.com/: (5
 
 			- communities
 			- community
-			- competencycentre
 			- conference
 			- crm-fusioncrm
 			- crmondemand		(→ www)
@@ -176,8 +164,6 @@ Fetch error: http://public-yum.oracle.com/ => https://public-yum.oracle.com/: (5
 			- ilearning
 			- ilearningcontent
 			- irecruitment
-			- itsp
-			- itsp-stage
 			- linux
 			- login
 			- login-stage
@@ -188,13 +174,8 @@ Fetch error: http://public-yum.oracle.com/ => https://public-yum.oracle.com/: (5
 			- myprofile-mktas
 			- oai
 			- oss
-			- otn
-			- partners
 			- plmap
-			- prc-fusioncrm
-			- prj-fusioncrm
 			- profile
-			- public-yum
 			- scm-fusioncrm
 			- search
 			- shop
@@ -282,7 +263,7 @@ Fetch error: http://public-yum.oracle.com/ => https://public-yum.oracle.com/: (5
 	² Unsecurable, doesn't trip MCB
 
 -->
-<ruleset name="Oracle (partial)" default_off='failed ruleset test'>
+<ruleset name="Oracle (partial)">
 
 	<!--	Direct rewrites:
 					-->
@@ -305,7 +286,6 @@ Fetch error: http://public-yum.oracle.com/ => https://public-yum.oracle.com/: (5
 
 	<target host="communities.oracle.com" />
 	<target host="community.oracle.com" />
-	<target host="competencycentre.oracle.com" />
 	<target host="conference.oracle.com" />
 	<target host="digitalmedia.oracle.com" />
 	<target host="dne.oracle.com" />
@@ -333,8 +313,6 @@ Fetch error: http://public-yum.oracle.com/ => https://public-yum.oracle.com/: (5
 	<target host="fin-fusioncrm.oracle.com" />
 	<target host="hcm-fusioncrm.oracle.com" />
 	<target host="ic-fusioncrm.oracle.com" />
-	<target host="prc-fusioncrm.oracle.com" />
-	<target host="prj-fusioncrm.oracle.com" />
 	<target host="scm-fusioncrm.oracle.com" />
 
 	<target host="fusionhelp.oracle.com" />
@@ -345,8 +323,6 @@ Fetch error: http://public-yum.oracle.com/ => https://public-yum.oracle.com/: (5
 	<target host="ilearning.oracle.com" />
 	<target host="ilearningcontent.oracle.com" />
 	<target host="irecruitment.oracle.com" />
-	<target host="itsp.oracle.com" />
-	<target host="itsp-stage.oracle.com" />
 	<target host="linux.oracle.com" />
 	<target host="login.oracle.com" />
 	<target host="login-stage.oracle.com" />
@@ -357,11 +333,8 @@ Fetch error: http://public-yum.oracle.com/ => https://public-yum.oracle.com/: (5
 	<target host="myprofile-mktas.oracle.com" />
 	<target host="oai.oracle.com" />
 	<target host="oss.oracle.com" />
-	<target host="otn.oracle.com" />
-	<target host="partners.oracle.com" />
 	<target host="plmap.oracle.com" />
 	<target host="profile.oracle.com" />
-	<target host="public-yum.oracle.com" />
 	<target host="search.oracle.com" />
 	<target host="shop.oracle.com" />
 	<target host="solutions.oracle.com" />
diff --git a/src/chrome/content/rules/QQ.xml b/src/chrome/content/rules/QQ.xml
index 38d9fdeb6eb3..913009d9182e 100644
--- a/src/chrome/content/rules/QQ.xml
+++ b/src/chrome/content/rules/QQ.xml
@@ -1,9 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://ptlogin2.mail.qq.com/ => https://ptlogin2.mail.qq.com/: (28, 'Connection timed out after 10001 milliseconds')
-Non-2xx HTTP code: http://ws.mail.qq.com/ (200) => https://ws.mail.qq.com/ (502)
-
 	CDN buckets:
 
 		- qzone.qq.com.edgesuite.net
@@ -48,7 +43,6 @@ Non-2xx HTTP code: http://ws.mail.qq.com/ (200) => https://ws.mail.qq.com/ (502)
 
 			- ^
 			- en
-			- ptlogin2
 			- res
 			- rl
 			- wp
@@ -67,7 +61,7 @@ Non-2xx HTTP code: http://ws.mail.qq.com/ (200) => https://ws.mail.qq.com/ (502)
 		- res.wx
 
 -->
-<ruleset name="QQ.com (partial)" default_off='failed ruleset test'>
+<ruleset name="QQ.com (partial)">
 
 	<!--	Direct rewrites:
 				-->
@@ -78,9 +72,7 @@ Non-2xx HTTP code: http://ws.mail.qq.com/ (200) => https://ws.mail.qq.com/ (502)
 	<target host="en.mail.qq.com" />
 	<target host="res.mail.qq.com" />
 	<target host="rl.mail.qq.com" />
-	<target host="ptlogin2.mail.qq.com" />
 	<target host="wp.mail.qq.com" />
-	<target host="ws.mail.qq.com" />
 
 	<target host="api.weixin.qq.com" />
 	<target host="login.weixin.qq.com" />
diff --git a/src/chrome/content/rules/Rambler.xml b/src/chrome/content/rules/Rambler.xml
index 6d82eed85a2b..0a19ed01d2af 100644
--- a/src/chrome/content/rules/Rambler.xml
+++ b/src/chrome/content/rules/Rambler.xml
@@ -1,12 +1,3 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://cnt.rambler.ru/ => https://cnt.rambler.ru/: (18, 'transfer closed with 100 bytes remaining to read')
-Fetch error: http://counter.rambler.ru/ => https://counter.rambler.ru/: (18, 'transfer closed with 100 bytes remaining to read')
-Fetch error: http://scounter.rambler.ru/ => https://scounter.rambler.ru/: (18, 'transfer closed with 100 bytes remaining to read')
-
--->
-
 <!--
 	Other Rambler rulesets:
 
@@ -54,14 +45,11 @@ Fetch error: http://scounter.rambler.ru/ => https://scounter.rambler.ru/: (18, '
 	Fully covered subdomains:
 
 		- assist
-		- cnt
-		- counter *
 		- id
 		- images
 		- m.kassa
 		- mail
 		- mail-pda
-		- scounter *
 		- soft
 		- sync
 		- update
@@ -74,11 +62,9 @@ Fetch error: http://scounter.rambler.ru/ => https://scounter.rambler.ru/: (18, '
 		- .rambler.ru
 
 -->
-<ruleset name="Rambler.ru (partial)" default_off='failed ruleset test'>
+<ruleset name="Rambler.ru (partial)">
 
 	<target host="assist.rambler.ru" />
-	<target host="cnt.rambler.ru" />
-	<target host="counter.rambler.ru" />
 	<!--target host="i.rambler.ru" /-->
 	<target host="id.rambler.ru" />
 	<target host="images.rambler.ru" />
@@ -87,7 +73,6 @@ Fetch error: http://scounter.rambler.ru/ => https://scounter.rambler.ru/: (18, '
 	<target host="widget.kassa.rambler.ru" />
 	<target host="mail.rambler.ru" />
 	<target host="mail-pda.rambler.ru" />
-	<target host="scounter.rambler.ru" />
 	<target host="soft.rambler.ru" />
 	<target host="sync.rambler.ru" />
 	<target host="update.rambler.ru" />
diff --git a/src/chrome/content/rules/Secureserver.net.xml b/src/chrome/content/rules/Secureserver.net.xml
index 02259ad0f171..3512cfbd0beb 100644
--- a/src/chrome/content/rules/Secureserver.net.xml
+++ b/src/chrome/content/rules/Secureserver.net.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://cloud.secureserver.net/ => https://cloud.secureserver.net/: (28, 'Connection timed out after 10001 milliseconds')
-
 	Fully covered hosts in *secureserver.net:
 
 		- cloud
@@ -19,11 +15,10 @@ Fetch error: http://cloud.secureserver.net/ => https://cloud.secureserver.net/:
 		- www
 
 -->
-<ruleset name="Secureserver.net (partial)" default_off='failed ruleset test'>
+<ruleset name="Secureserver.net (partial)">
 
 	<!--	Direct rewrites:
 				-->
-	<target host="cloud.secureserver.net" />
 	<target host="email.secureserver.net" />
 	<target host="hostingmanager.secureserver.net" />
 	<target host="hxcc.secureserver.net" />
diff --git a/src/chrome/content/rules/SlideShare.xml b/src/chrome/content/rules/SlideShare.xml
index 90202f2d8f85..8fa72f03675e 100644
--- a/src/chrome/content/rules/SlideShare.xml
+++ b/src/chrome/content/rules/SlideShare.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://premium.slideshare.net/ => https://premium.slideshare.net/: (51, "SSL: no alternative certificate subject name matches target host name 'premium.slideshare.net'")
-
 	For other LinkedIn coverage, see LinkedIn.xml.
 
 
@@ -34,7 +30,6 @@ Fetch error: http://premium.slideshare.net/ => https://premium.slideshare.net/:
 
 		- ^
 		- blog
-		- premium
 		- stats
 
 
@@ -43,13 +38,12 @@ Fetch error: http://premium.slideshare.net/ => https://premium.slideshare.net/:
 		- apiexplorer.slideshare.net
 
 -->
-<ruleset name="SlideShare.net (partial)" default_off='failed ruleset test'>
+<ruleset name="SlideShare.net (partial)">
 
 	<!--	Direct rewrites:
 				-->
 	<target host="slideshare.net" />
 	<target host="blog.slideshare.net" />
-	<target host="premium.slideshare.net" />
 	<target host="stats.slideshare.net" />
 	<target host="www.slideshare.net" />
 
diff --git a/src/chrome/content/rules/SnapEngage.xml b/src/chrome/content/rules/SnapEngage.xml
index be91c1b6984a..18dd68a1adb2 100644
--- a/src/chrome/content/rules/SnapEngage.xml
+++ b/src/chrome/content/rules/SnapEngage.xml
@@ -1,12 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Non-2xx HTTP code: http://snapengage-1.wpengine.netdna-cdn.com/ (200) => https://snapengage-1.wpengine.com/ (404)
-Non-2xx HTTP code: http://snapengage-3.wpengine.netdna-cdn.com/ (200) => https://snapengage-3.wpengine.com/ (404)
-Non-2xx HTTP code: http://snapengage-4.wpengine.netdna-cdn.com/ (200) => https://snapengage-4.wpengine.com/ (404)
-Non-2xx HTTP code: http://snapengage-5.wpengine.netdna-cdn.com/ (200) => https://snapengage-5.wpengine.com/ (404)
-Non-2xx HTTP code: http://snapengage-8.wpengine.netdna-cdn.com/ (200) => https://snapengage-8.wpengine.com/ (404)
-
 	For rules causing false MCB, see SnapEngage.com-falsemixed.xml.
 
 
@@ -85,7 +77,7 @@ Non-2xx HTTP code: http://snapengage-8.wpengine.netdna-cdn.com/ (200) => https:/
 		- SnapABugVisit
 
 -->
-<ruleset name="SnapEngage (partial)" default_off='failed ruleset test'>
+<ruleset name="SnapEngage (partial)">
 
 	<target host="snapengage-1.wpengine.netdna-cdn.com" />
 	<target host="snapengage-3.wpengine.netdna-cdn.com" />
diff --git a/src/chrome/content/rules/Twimg.com.xml b/src/chrome/content/rules/Twimg.com.xml
index b6472679031e..980e764e37cf 100644
--- a/src/chrome/content/rules/Twimg.com.xml
+++ b/src/chrome/content/rules/Twimg.com.xml
@@ -1,12 +1,3 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://a6.twimg.com/ => https://a6.twimg.com/: (7, 'Failed to connect to a6.twimg.com port 443: Network is unreachable')
-Fetch error: http://a8.twimg.com/ => https://a8.twimg.com/: (6, 'Could not resolve host: a8.twimg.com')
-Fetch error: http://a9.twimg.com/ => https://a9.twimg.com/: (6, 'Could not resolve host: a9.twimg.com')
-
--->
-
 <!--
 	For other Twitter coverage, see Twitter.xml.
 
@@ -29,7 +20,6 @@ Fetch error: http://a9.twimg.com/ => https://a9.twimg.com/: (6, 'Could not resol
 
 	Fully covered hosts:
 
-		- a[0-689]
 		- abs
 		- amp
 		- dnt
@@ -66,19 +56,10 @@ Fetch error: http://a9.twimg.com/ => https://a9.twimg.com/: (6, 'Could not resol
 		- vmtc.twimg.com
 
 -->
-<ruleset name="Twimg.com" default_off='failed ruleset test'>
+<ruleset name="Twimg.com">
 
 	<!--	Direct rewrites:
 					-->
-	<target host="a0.twimg.com" />
-	<target host="a1.twimg.com" />
-	<target host="a2.twimg.com" />
-	<target host="a3.twimg.com" />
-	<target host="a4.twimg.com" />
-	<target host="a5.twimg.com" />
-	<target host="a6.twimg.com" />
-	<target host="a8.twimg.com" />
-	<target host="a9.twimg.com" />
 	<target host="abs.twimg.com" />
 	<target host="amp.twimg.com" />
 	<target host="dnt.twimg.com" />
diff --git a/src/chrome/content/rules/Twitter.xml b/src/chrome/content/rules/Twitter.xml
index f56647969171..260bdd438f33 100644
--- a/src/chrome/content/rules/Twitter.xml
+++ b/src/chrome/content/rules/Twitter.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://preview.cdn.twitter.com/ => https://preview.cdn.twitter.com/: (6, 'Could not resolve host: preview.cdn.twitter.com')
-Fetch error: http://preview-stage.cdn.twitter.com/ => https://preview-stage.cdn.twitter.com/: (28, 'Resolving timed out after 10519 milliseconds')
 
 	NB: If a host ceases to exist, just remove the respective test.
 
@@ -56,7 +52,6 @@ Fetch error: http://preview-stage.cdn.twitter.com/ => https://preview-stage.cdn.
 		- blog
 		- business
 		- cards-dev
-		- preview.cdn
 		- dev
 		- engineering
 		- firefox
@@ -85,7 +80,6 @@ Fetch error: http://preview-stage.cdn.twitter.com/ => https://preview-stage.cdn.
 	These altnames don't exist:
 
 		- cdn-dev.api.twitter.com
-		- preview.cdn.twitter.com
 		- syndication-o.twitter.com
 
 
@@ -103,7 +97,7 @@ Fetch error: http://preview-stage.cdn.twitter.com/ => https://preview-stage.cdn.
 		- Image on status from 38.media.tumblr.com
 
 -->
-<ruleset name="Twitter.com" default_off='failed ruleset test'>
+<ruleset name="Twitter.com">
 
 	<!--	Direct rewrites:
 					-->
@@ -125,8 +119,6 @@ Fetch error: http://preview-stage.cdn.twitter.com/ => https://preview-stage.cdn.
 		<test url="http://urls.api.twitter.com/" />
 		<test url="http://urls-real.api.twitter.com/" />
 		<test url="http://business.twitter.com/" />
-		<test url="http://preview.cdn.twitter.com/" />
-		<test url="http://preview-stage.cdn.twitter.com/" />
 		<test url="http://dev.twitter.com/" />
 		<test url="http://engineering.twitter.com/" />
 		<test url="http://firefox.twitter.com/" />
diff --git a/src/chrome/content/rules/UOL.xml b/src/chrome/content/rules/UOL.xml
index afe0e697b8f1..1c5c623d9da5 100644
--- a/src/chrome/content/rules/UOL.xml
+++ b/src/chrome/content/rules/UOL.xml
@@ -1,11 +1,3 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://tracker.shopping.uol.com.br/ => https://tracker.shopping.uol.com.br/: (6, 'Could not resolve host: tracker.shopping.uol.com.br')
-Non-2xx HTTP code: http://tts.uol.com.br/ (200) => https://tts.uol.com.br/ (500)
-
--->
-
 <!--
 	For rules causing MCB, see UOL.com.br-falsemixed.xml.
 
@@ -101,7 +93,6 @@ Non-2xx HTTP code: http://tts.uol.com.br/ (200) => https://tts.uol.com.br/ (500)
 		- warframe.partner
 		- clicklogger.rm
 		- sac
-		- tracker.shopping
 		- simg
 		- p.simg
 		- user.img.todaoferta
@@ -145,7 +136,7 @@ Non-2xx HTTP code: http://tts.uol.com.br/ (200) => https://tts.uol.com.br/ (500)
 		- Ads on todaoferta from www.googleadservices.com
 
 -->
-<ruleset name="UOL.com.br (partial)" default_off='failed ruleset test'>
+<ruleset name="UOL.com.br (partial)">
 
 	<!--	Direct rewrites:
 					-->
@@ -166,7 +157,6 @@ Non-2xx HTTP code: http://tts.uol.com.br/ (200) => https://tts.uol.com.br/ (500)
 	<target host="warframe.partner.uol.com.br" />
 	<target host="clicklogger.rm.uol.com.br" />
 	<target host="sac.uol.com.br" />
-	<target host="tracker.shopping.uol.com.br" />
 	<target host="simg.uol.com.br" />
 	<target host="p.simg.uol.com.br" />
 	<!--target host="todaoferta.uol.com.br" /-->
diff --git a/src/chrome/content/rules/Vice.xml b/src/chrome/content/rules/Vice.xml
index aebd900bd4d1..7d4ee4477e59 100644
--- a/src/chrome/content/rules/Vice.xml
+++ b/src/chrome/content/rules/Vice.xml
@@ -1,7 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://assets-i-d.vice.com/ => https://d1wzhalc7g55g3.cloudfront.net/: (6, 'Could not resolve host: d1wzhalc7g55g3.cloudfront.net')
 
 	For problematic rules, see Vice-problematic.xml.
 
@@ -29,10 +26,6 @@ Fetch error: http://assets-i-d.vice.com/ => https://d1wzhalc7g55g3.cloudfront.ne
 
 			- assets.vice.com
 
-		- d1wzhalc7g55g3.cloudfront.net
-
-			- assets-i-d.vice.com
-
 		- d1ymkg0yqrfr5q.cloudfront.net
 		- df5qbu832tmne.cloudfront.net
 
@@ -70,7 +63,6 @@ Fetch error: http://assets-i-d.vice.com/ => https://d1wzhalc7g55g3.cloudfront.ne
 		- (www.)
 		- assets	(→ d1qzzfctbfyh6r.cloudfront.net)
 		- assets2
-		- assets-i-d	(→ d1wzhalc7g55g3.cloudfront.net)
 		- assets-news
 		- assets-sports
 		- embeds
@@ -120,7 +112,7 @@ Fetch error: http://assets-i-d.vice.com/ => https://d1wzhalc7g55g3.cloudfront.ne
 	* Secured by us
 
 -->
-<ruleset name="Vice.com (partial)" default_off='failed ruleset test'>
+<ruleset name="Vice.com (partial)">
 
 	<!--	Direct rewrites:
 				-->
@@ -152,7 +144,6 @@ Fetch error: http://assets-i-d.vice.com/ => https://d1wzhalc7g55g3.cloudfront.ne
 	<!--	Complications:
 				-->
 	<target host="assets.vice.com" />
-	<target host="assets-i-d.vice.com" />
 	<target host="link.vice.com" />
 	<target host="assets.thump.vice.com" />
 
@@ -176,9 +167,6 @@ Fetch error: http://assets-i-d.vice.com/ => https://d1wzhalc7g55g3.cloudfront.ne
 	<rule from="^http://assets\.vice\.com/"
 		to="https://d1qzzfctbfyh6r.cloudfront.net/" />
 
-	<rule from="^http://assets-i-d\.vice\.com/"
-		to="https://d1wzhalc7g55g3.cloudfront.net/" />
-
 	<rule from="^http://link\.vice\.com/+(?=$|\?)"
 		to="https://vice.com/" />
 
diff --git a/src/chrome/content/rules/Virtual_News_Center.xml b/src/chrome/content/rules/Virtual_News_Center.xml
index dd25ab8feb74..c3a4092e61c8 100644
--- a/src/chrome/content/rules/Virtual_News_Center.xml
+++ b/src/chrome/content/rules/Virtual_News_Center.xml
@@ -1,4 +1,3 @@
-
 <!--
 Disabled by https-everywhere-checker because:
 Fetch error: http://virtualnewscenter.wpengine.netdna-cdn.com/ => https://virtualnewscenter.com/: Too many redirects while fetching 'https://virtualnewscenter.com/'
@@ -27,4 +26,4 @@ Fetch error: http://virtualnewscenter.com/ => https://virtualnewscenter.com/: To
 	<rule from="^http://virtualnewscenter\.wpengine\.netdna-cdn\.com/"
 		to="https://virtualnewscenter.com/" />
 
-</ruleset>
\ No newline at end of file
+</ruleset>
diff --git a/src/chrome/content/rules/Xbox.xml b/src/chrome/content/rules/Xbox.xml
index 01d7f2585fe2..76fcd0ee45ab 100644
--- a/src/chrome/content/rules/Xbox.xml
+++ b/src/chrome/content/rules/Xbox.xml
@@ -1,12 +1,6 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://retailer.xbox.com/ => https://retailer.xbox.com/: (6, 'Could not resolve host: retailer.xbox.com')
-Fetch error: http://solutions.xbox.com/ => https://solutions.xbox.com/: (35, 'Unknown SSL protocol error in connection to solutions.xbox.com:443 ')
-
 	For problematic rules, see Xbox-problematic.xml.
 
-
 	For other Microsoft coverage, see Microsoft.xml.
 
 
@@ -27,6 +21,7 @@ Fetch error: http://solutions.xbox.com/ => https://solutions.xbox.com/: (35, 'Un
 			- sonos ⁴
 			- tiles *
 			- www **
+			- solutions
 
 		- press.xbox360.com
 
@@ -71,11 +66,9 @@ Fetch error: http://solutions.xbox.com/ => https://solutions.xbox.com/: (35, 'Un
 		- musictemp
 		- myservice
 		- o		(→ xbox-com.112.2o7.net)
-		- retailer
 		- s
 		- service
 		- support
-		- solutions
 
 
 	Insecure cookies are set for these domains and hosts:
@@ -84,7 +77,7 @@ Fetch error: http://solutions.xbox.com/ => https://solutions.xbox.com/: (35, 'Un
 		- music.xbox.com
 
 -->
-<ruleset name="Xbox.com (partial)" default_off='failed ruleset test'>
+<ruleset name="Xbox.com (partial)">
 
 	<!--	Direct rewrites:
 				-->
@@ -99,11 +92,9 @@ Fetch error: http://solutions.xbox.com/ => https://solutions.xbox.com/: (35, 'Un
 	<target host="music-cache.xbox.com" />
 	<target host="musictemp.xbox.com" />
 	<target host="myservice.xbox.com" />
-	<target host="retailer.xbox.com" />
 	<target host="rewards.xbox.com" />
 	<target host="s.xbox.com" />
 	<target host="service.xbox.com" />
-	<target host="solutions.xbox.com" />
 	<target host="support.xbox.com" />
 
 	<!--	Complications:
diff --git a/src/chrome/content/rules/Yahoo_Japan.xml b/src/chrome/content/rules/Yahoo_Japan.xml
index 564cf5ae97c9..557e5e21ee58 100644
--- a/src/chrome/content/rules/Yahoo_Japan.xml
+++ b/src/chrome/content/rules/Yahoo_Japan.xml
@@ -1,11 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://adserver.yahoo.co.jp/ => https://adserver.yahoo.co.jp/: (6, 'Could not resolve host: adserver.yahoo.co.jp')
-Fetch error: http://contact.advertising.yahoo.co.jp/ => https://contact.advertising.yahoo.co.jp/: (6, 'Could not resolve host: contact.advertising.yahoo.co.jp')
-Fetch error: http://secure.stepup.yahoo.co.jp/ => https://secure.stepup.yahoo.co.jp/: (6, 'Could not resolve host: secure.stepup.yahoo.co.jp')
-Fetch error: http://stepup.yahoo.co.jp/ => https://secure.stepup.yahoo.co.jp/: (6, 'Could not resolve host: secure.stepup.yahoo.co.jp')
-
 	For other Yahoo coverage, see Yahoo.xml
 
 
@@ -124,7 +117,6 @@ Fetch error: http://stepup.yahoo.co.jp/ => https://secure.stepup.yahoo.co.jp/: (
 
 		- b12.yahoo.co.jp ¹
 		- id.yahoo.co.jp	(works; mismatched, CN: docs.id.yahoo.co.jp)
-		- stepup.yahoo.co.jp	(mismatched, CN: secure.stepup.yahoo.co.jp)
 
 	¹ Server sends no certificate chain, see https://whatsmychaincert.com
 
@@ -139,8 +131,6 @@ Fetch error: http://stepup.yahoo.co.jp/ => https://secure.stepup.yahoo.co.jp/: (
 
 		- yahoo.co.jp subdomains:
 
-			- adserver
-			- contact.advertising
 			- ard
 			- b[3-9]
 			- b10
@@ -168,8 +158,6 @@ Fetch error: http://stepup.yahoo.co.jp/ => https://secure.stepup.yahoo.co.jp/: (
 			- lot.sample
 			- s.sample
 			- odhistory.shopping
-			- stepup	(→ secure.stepup)
-			- secure.stepup
 			- order.store
 			- yeas
 
@@ -179,12 +167,10 @@ Fetch error: http://stepup.yahoo.co.jp/ => https://secure.stepup.yahoo.co.jp/: (
 		- .yahoo.co.jp
 
 -->
-<ruleset name="Yahoo.co.JP (partial)" default_off='failed ruleset test'>
+<ruleset name="Yahoo.co.JP (partial)">
 
 	<!--	Direct rewrites:
 				-->
-	<target host="adserver.yahoo.co.jp" />
-	<target host="contact.advertising.yahoo.co.jp" />
 	<target host="ard.yahoo.co.jp" />
 
 	<target host="b3.yahoo.co.jp" />
@@ -221,13 +207,11 @@ Fetch error: http://stepup.yahoo.co.jp/ => https://secure.stepup.yahoo.co.jp/: (
 	<target host="s.sample.yahoo.co.jp" />
 	<target host="custom.search.yahoo.co.jp" />
 	<target host="odhistory.shopping.yahoo.co.jp" />
-	<target host="secure.stepup.yahoo.co.jp" />
 	<target host="order.store.yahoo.co.jp" />
 	<target host="yeas.yahoo.co.jp" />
 
 	<!--	Complications:
 				-->
-	<target host="stepup.yahoo.co.jp" />
 
 		<exclusion pattern="^http://custom\.search\.yahoo\.co\.jp/(?!favicon\.ico|images/)" />
 
@@ -261,9 +245,6 @@ Fetch error: http://stepup.yahoo.co.jp/ => https://secure.stepup.yahoo.co.jp/: (
 	<securecookie host="^\.forms\.business\.yahoo\.co\.jp$" name=".+" />
 
 
-	<rule from="^http://stepup\.yahoo\.co\.jp/"
-		to="https://secure.stepup.yahoo.co.jp/" />
-
 	<rule from="^http:"
 		to="https:" />
 
diff --git a/src/chrome/content/rules/Yandex.ua.xml b/src/chrome/content/rules/Yandex.ua.xml
index 04e61245c6da..58ec909f88dc 100644
--- a/src/chrome/content/rules/Yandex.ua.xml
+++ b/src/chrome/content/rules/Yandex.ua.xml
@@ -1,11 +1,3 @@
-
-<!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://beta.yandex.ua/ => https://beta.yandex.ua/: (28, 'Connection timed out after 10000 milliseconds')
-Fetch error: http://islands.yandex.ua/ => https://islands.yandex.ua/: (28, 'Connection timed out after 10000 milliseconds')
-
--->
-
 <!--
 	For other Yandex coverage, see Yandex.xml.
 
@@ -62,7 +54,6 @@ Fetch error: http://islands.yandex.ua/ => https://islands.yandex.ua/: (28, 'Conn
 		- auto
 		- avia
 		- awaps
-		- beta
 		- blogs
 		- browser
 		- city
@@ -73,7 +64,6 @@ Fetch error: http://islands.yandex.ua/ => https://islands.yandex.ua/: (28, 'Conn
 		- m.fotki
 		- gorod
 		- help
-		- islands
 		- kiks
 		- images
 		- legal
@@ -144,13 +134,12 @@ Fetch error: http://islands.yandex.ua/ => https://islands.yandex.ua/: (28, 'Conn
 	² Unsecurable <= dropped
 
 -->
-<ruleset name="Yandex.ua (partial)" default_off='failed ruleset test'>
+<ruleset name="Yandex.ua (partial)">
 
 	<target host="yandex.ua" />
 	<target host="auto.yandex.ua" />
 	<target host="avia.yandex.ua" />
 	<target host="awaps.yandex.ua" />
-	<target host="beta.yandex.ua" />
 	<target host="blogs.yandex.ua" />
 	<target host="browser.yandex.ua" />
 	<target host="city.yandex.ua" />
@@ -162,7 +151,6 @@ Fetch error: http://islands.yandex.ua/ => https://islands.yandex.ua/: (28, 'Conn
 	<target host="gorod.yandex.ua" />
 	<target host="help.yandex.ua" />
 	<target host="images.yandex.ua" />
-	<target host="islands.yandex.ua" />
 	<target host="kiks.yandex.ua" />
 	<target host="legal.yandex.ua" />
 	<target host="m.legal.yandex.ua" />
@@ -192,7 +180,7 @@ Fetch error: http://islands.yandex.ua/ => https://islands.yandex.ua/: (28, 'Conn
 	<!--securecookie host="^\.yandex\.ua$" name="^(Cookie_check|L|Session_id|YX_SEARCHPREFS|fyandex|geo_sync|my|sessionid2|yabs-frequency|yandex_gid|yandex_login|yandex_mail|yandexmarket|yandexuid|ys)$" /-->
 	<!--securecookie host="^(auto|realty)\.yandex\.ua$" name="^from$" /-->
 	<!--securecookie host="^auto\.yandex\.ua$" name="^from_lifetime$" /-->
-	<!--securecookie host="^(auto|city|gorod|islands|rabota|realty|m\.rabota|slovari|m\.slovari|stat)\.yandex\.ua$" name="^uid$" /-->
+	<!--securecookie host="^(auto|city|gorod|rabota|realty|m\.rabota|slovari|m\.slovari|stat)\.yandex\.ua$" name="^uid$" /-->
 	<!--securecookie host="^feedback2\.yandex\.ua$" name="^feedback2-sid$" /-->
 	<!--securecookie host="^internet\.yandex\.ua$" name="^(csrftoken|test)$" /-->
 	<!--securecookie host="^mail\.yandex\.ua$" name="^ni$" /-->
@@ -202,7 +190,7 @@ Fetch error: http://islands.yandex.ua/ => https://islands.yandex.ua/: (28, 'Conn
 	<!--securecookie host="^translate\.yandex\.ua$" name="^(first_visit_src|stoken)$" /-->
 
 	<securecookie host="^\.yandex\.ua$" name="^(?:geo_sync|yabs-frequency)$" />
-	<securecookie host="^(?:(?:auto|city|gorod|islands|mail|mobile|slovari|stat|translate|\.?www)\.)?yandex\.ua$" name=".+" />
+	<securecookie host="^(?:(?:auto|city|gorod|mail|mobile|slovari|stat|translate|\.?www)\.)?yandex\.ua$" name=".+" />
 
 
 	<rule from="^http:"
diff --git a/src/chrome/content/rules/Zoho.jp.xml b/src/chrome/content/rules/Zoho.jp.xml
index 2da2a30d3ebb..952517f55966 100644
--- a/src/chrome/content/rules/Zoho.jp.xml
+++ b/src/chrome/content/rules/Zoho.jp.xml
@@ -1,8 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://forums.zoho.jp/ => https://forums.zoho.jp/: (6, 'Could not resolve host: forums.zoho.jp')
-
 	For other Zoho coverage, see Zoho.xml.
 
 
@@ -21,7 +17,7 @@ Fetch error: http://forums.zoho.jp/ => https://forums.zoho.jp/: (6, 'Could not r
 
 
 -->
-<ruleset name="Zoho.jp (partial)" default_off='failed ruleset test'>
+<ruleset name="Zoho.jp (partial)">
 
 	<!--	Direct rewrites:
 				-->
@@ -29,11 +25,6 @@ Fetch error: http://forums.zoho.jp/ => https://forums.zoho.jp/: (6, 'Could not r
 
 	<target host="zoho.jp" />
 	<target host="blogs.zoho.jp" />
-	<target host="forums.zoho.jp" />
-
-
-	<securecookie host="^forums\.zoho\.jp$" name=".+" />
-
 
 	<rule from="^http:"
 		to="https:" />

From 2abaaf570c754e8a6a4a644cfdc3735078e70a8a Mon Sep 17 00:00:00 2001
From: Jacob Hoffman-Andrews <github@hoffman-andrews.com>
Date: Thu, 25 Jun 2015 20:19:42 -0700
Subject: [PATCH 55/58] Re-enable AmazonAWS AmericanExpress GoDaddy

---
 src/chrome/content/rules/AmazonAWS.xml       | 2 +-
 src/chrome/content/rules/AmericanExpress.xml | 2 +-
 src/chrome/content/rules/GoDaddy.xml         | 9 +--------
 3 files changed, 3 insertions(+), 10 deletions(-)

diff --git a/src/chrome/content/rules/AmazonAWS.xml b/src/chrome/content/rules/AmazonAWS.xml
index 0b792004e513..8bb828a5ce9a 100644
--- a/src/chrome/content/rules/AmazonAWS.xml
+++ b/src/chrome/content/rules/AmazonAWS.xml
@@ -91,7 +91,7 @@
 		- z-ak.images-amazon.com
 
 -->
-<ruleset name="Amazon Web Services" default_off='failed ruleset test'>
+<ruleset name="Amazon Web Services">
 
 	<target host="fls-eu.amazon.co.uk" />
 	<target host="aws.amazon.com" />
diff --git a/src/chrome/content/rules/AmericanExpress.xml b/src/chrome/content/rules/AmericanExpress.xml
index 970f943d49ae..65797e52d4ca 100644
--- a/src/chrome/content/rules/AmericanExpress.xml
+++ b/src/chrome/content/rules/AmericanExpress.xml
@@ -85,7 +85,7 @@
 <!-- Thanks to ForceTLS -->
 <!-- Note that there are lots of subdomains and some are still unprotected,
      but some don't work properly in HTTPS anyway.  This is kind of a mess. -->
-<ruleset name="AmericanExpress.com (partial)" default_off='failed ruleset test'>
+<ruleset name="AmericanExpress.com (partial)">
 
 	<!--	Direct rewrites:
 				-->
diff --git a/src/chrome/content/rules/GoDaddy.xml b/src/chrome/content/rules/GoDaddy.xml
index c218efe69678..f199e24a6aa2 100644
--- a/src/chrome/content/rules/GoDaddy.xml
+++ b/src/chrome/content/rules/GoDaddy.xml
@@ -1,11 +1,6 @@
 
 <!--
 Disabled by https-everywhere-checker because:
-Fetch error: http://idp.m.godaddy.com/user/retrieveloginname.aspx?spkey= => https://idp.m.godaddy.com/user/retrieveloginname.aspx?spkey=: (35, 'Unknown SSL protocol error in connection to idp.m.godaddy.com:443 ')
-Fetch error: http://sg.m.godaddy.com/ => https://sg.m.godaddy.com/: Too many redirects while fetching 'https://sg.m.godaddy.com/'
-Fetch error: http://idp.godaddy.com/ => https://idp.godaddy.com/: (35, 'Unknown SSL protocol error in connection to idp.godaddy.com:443 ')
-Fetch error: http://mcc.godaddy.com/ => https://mcc.godaddy.com/: (35, 'Unknown SSL protocol error in connection to idp.godaddy.com:443 ')
-Fetch error: http://shops.godaddy.com/ => https://shops.godaddy.com/: (28, 'Connection timed out after 10001 milliseconds')
 
 	Other GoDaddy rulesets:
 
@@ -53,7 +48,6 @@ Fetch error: http://shops.godaddy.com/ => https://shops.godaddy.com/: (28, 'Conn
 			- mcc
 			- mya
 			- seal
-			- shops
 			- who
 			- ar
 			- au
@@ -122,7 +116,7 @@ Fetch error: http://shops.godaddy.com/ => https://shops.godaddy.com/: (28, 'Conn
 		- who.godaddy.com
 
 -->
-<ruleset name="GoDaddy.com (partial)" default_off='failed ruleset test'>
+<ruleset name="GoDaddy.com (partial)">
 
 	<!--	Direct rewrites:
 				-->
@@ -139,7 +133,6 @@ Fetch error: http://shops.godaddy.com/ => https://shops.godaddy.com/: (28, 'Conn
 	<target host="mcc.godaddy.com" />
 	<target host="mya.godaddy.com" />
 	<target host="seal.godaddy.com" />
-	<target host="shops.godaddy.com" />
 	<target host="support.godaddy.com" />
 	<!--target host="supportcenter.godaddy.com" /-->
 	<target host="who.godaddy.com" />

From c50a67ac0c048d2ba29e397a390529ca0c457e2f Mon Sep 17 00:00:00 2001
From: Jacob Hoffman-Andrews <github@hoffman-andrews.com>
Date: Fri, 26 Jun 2015 11:02:13 -0700
Subject: [PATCH 56/58] Clean up GoDaddy rule.

---
 src/chrome/content/rules/GoDaddy.xml | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/src/chrome/content/rules/GoDaddy.xml b/src/chrome/content/rules/GoDaddy.xml
index f199e24a6aa2..cbff9b19223b 100644
--- a/src/chrome/content/rules/GoDaddy.xml
+++ b/src/chrome/content/rules/GoDaddy.xml
@@ -1,7 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-
 	Other GoDaddy rulesets:
 
 		- GoDaddy.net.xml

From 033d1d896858820457e1ec9cff644c3cabc7e0e4 Mon Sep 17 00:00:00 2001
From: Jacob Hoffman-Andrews <github@hoffman-andrews.com>
Date: Fri, 26 Jun 2015 11:05:56 -0700
Subject: [PATCH 57/58] Revert Microsoft rule to master.

---
 src/chrome/content/rules/Microsoft.xml | 25 +------------------------
 1 file changed, 1 insertion(+), 24 deletions(-)

diff --git a/src/chrome/content/rules/Microsoft.xml b/src/chrome/content/rules/Microsoft.xml
index 38154bd31165..18c35b8fcd73 100644
--- a/src/chrome/content/rules/Microsoft.xml
+++ b/src/chrome/content/rules/Microsoft.xml
@@ -1,27 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Non-2xx HTTP code: http://search.microsoft.com/shared/ (200) => https://www.microsoft.com/shared/ (404)
-Fetch error: http://adcenter.microsoft.com/ => https://adcenter.microsoft.com/: (60, 'SSL certificate problem: certificate has expired')
-Fetch error: http://feedback.adcenter.microsoft.com/ => https://feedback.adcenter.microsoft.com/: (7, 'Failed to connect to feedback.adcenter.microsoft.com port 443: Connection timed out')
-Fetch error: http://innovation.connect.microsoft.com/ => https://innovation.connect.microsoft.com/: (51, "SSL: no alternative certificate subject name matches target host name 'innovation.connect.microsoft.com'")
-Fetch error: http://services.connect.microsoft.com/ => https://services.connect.microsoft.com/: (51, "SSL: no alternative certificate subject name matches target host name 'services.connect.microsoft.com'")
-Fetch error: http://events.microsoft.com/ => https://events.microsoft.com/: (51, "SSL: no alternative certificate subject name matches target host name 'events.microsoft.com'")
-Fetch error: http://insider.microsoft.com/ => https://insider.microsoft.com/: (6, 'Could not resolve host: insider.microsoft.com')
-Fetch error: http://learning.microsoft.com/ => https://learning.microsoft.com/: Too many redirects while fetching 'https://learning.microsoft.com/'
-Fetch error: http://m.microsoft.com/ => https://m.microsoft.com/: (28, 'Connection timed out after 10000 milliseconds')
-Fetch error: http://widgets.membership.microsoft.com/ => https://widgets.membership.microsoft.com/: (51, "SSL: no alternative certificate subject name matches target host name 'widgets.membership.microsoft.com'")
-Fetch error: http://mobile.microsoft.com/ => https://mobile.microsoft.com/: (28, 'Connection timed out after 10001 milliseconds')
-Non-2xx HTTP code: http://oem.microsoft.com/ (200) => https://oem.microsoft.com/ (404)
-Fetch error: http://office365.microsoft.com/ => https://office365.microsoft.com/: (7, 'Failed to connect to office365.microsoft.com port 443: Connection timed out')
-Fetch error: http://research.microsoft.com/ => https://research.microsoft.com/: Too many redirects while fetching 'https://research.microsoft.com/'
-Fetch error: http://snackbox.microsoft.com/ => https://snackbox.microsoft.com/: (51, "SSL: no alternative certificate subject name matches target host name 'snackbox.microsoft.com'")
-Fetch error: http://windowsupdate.microsoft.com/ => https://windowsupdate.microsoft.com/: (51, "SSL: certificate subject name 'www.update.microsoft.com' does not match target host name 'windowsupdate.microsoft.com'")
-Fetch error: http://v4.windowsupdate.microsoft.com/ => https://v4.windowsupdate.microsoft.com/: (51, "SSL: certificate subject name 'www.update.microsoft.com' does not match target host name 'v4.windowsupdate.microsoft.com'")
-Fetch error: http://v5.windowsupdate.microsoft.com/ => https://v5.windowsupdate.microsoft.com/: (51, "SSL: certificate subject name 'www.update.microsoft.com' does not match target host name 'v5.windowsupdate.microsoft.com'")
-Fetch error: http://i1.connect.microsoft.com/ => https://services.connect.microsoft.com/: (51, "SSL: no alternative certificate subject name matches target host name 'services.connect.microsoft.com'")
-Fetch error: http://i1.mobile.microsoft.com/ => https://m.microsoft.com/: (28, 'Connection timed out after 10000 milliseconds')
-
 	For rules causing false/broken MCB, see Microsoft.com-falsemixed.xml.
 
 
@@ -362,7 +339,7 @@ Fetch error: http://i1.mobile.microsoft.com/ => https://m.microsoft.com/: (28, '
 	* Secured by us
 
 -->
-<ruleset name="Microsoft.com (partial)" default_off='failed ruleset test'>
+<ruleset name="Microsoft.com (partial)">
 
 	<target host="microsoft.com" />
 	<target host="*.microsoft.com" />

From a794886ba78316ba135e79cc8aa58b3bad090f70 Mon Sep 17 00:00:00 2001
From: Jacob Hoffman-Andrews <github@hoffman-andrews.com>
Date: Fri, 26 Jun 2015 16:58:57 -0700
Subject: [PATCH 58/58] Re-enable Yandex.

---
 src/chrome/content/rules/Yandex.com.xml | 22 +---------------------
 1 file changed, 1 insertion(+), 21 deletions(-)

diff --git a/src/chrome/content/rules/Yandex.com.xml b/src/chrome/content/rules/Yandex.com.xml
index 71513a7e3c02..a8b3fc1185f8 100644
--- a/src/chrome/content/rules/Yandex.com.xml
+++ b/src/chrome/content/rules/Yandex.com.xml
@@ -1,15 +1,4 @@
-
 <!--
-Disabled by https-everywhere-checker because:
-Fetch error: http://www.internet.yandex.com/ => https://www.internet.yandex.com/: (6, 'Could not resolve host: www.internet.yandex.com')
-Fetch error: http://www.constructor.maps.yandex.com/ => https://www.constructor.maps.yandex.com/: (51, "SSL: no alternative certificate subject name matches target host name 'www.constructor.maps.yandex.com'")
-Fetch error: http://passport.yandex.com/ => https://passport.yandex.com/: (28, 'Connection timed out after 10000 milliseconds')
-Fetch error: http://suggest.rasp.yandex.com/ => https://suggest.rasp.yandex.com/: (6, 'Could not resolve host: suggest.rasp.yandex.com')
-Fetch error: http://startups.yandex.com/ => https://startups.yandex.com/: (52, 'Empty reply from server')
-Fetch error: http://developer.tech.yandex.com/ => https://developer.tech.yandex.com/: (52, 'Empty reply from server')
-Fetch error: http://www.tech.yandex.com/ => https://www.tech.yandex.com/: (52, 'Empty reply from server')
-Fetch error: http://technologies.yandex.com/ => https://technologies.yandex.com/: (52, 'Empty reply from server')
-
 	For other Yandex coverage, see Yandex.xml.
 
 
@@ -134,7 +123,6 @@ Fetch error: http://technologies.yandex.com/ => https://technologies.yandex.com/
 
 		- api.rasp
 		- m.rasp
-		- suggest.rasp
 		- t.rasp
 
 		- research
@@ -146,9 +134,7 @@ Fetch error: http://technologies.yandex.com/ => https://technologies.yandex.com/
 
 		- (www.)?tech
 		- api.tech
-		- developer.tech
 
-		- technologies
 		- ticket
 		- time
 		- translate
@@ -209,7 +195,7 @@ Fetch error: http://technologies.yandex.com/ => https://technologies.yandex.com/
 	* Secured by us
 
 -->
-<ruleset name="Yandex.com (partial)" default_off='failed ruleset test'>
+<ruleset name="Yandex.com (partial)">
 
 	<!--	Direct rewrites:
 				-->
@@ -254,7 +240,6 @@ Fetch error: http://technologies.yandex.com/ => https://technologies.yandex.com/
 	<target host="help.yandex.com" />
 	<target host="images.yandex.com" />
 	<target host="internet.yandex.com" />
-	<target host="www.internet.yandex.com" />
 	<target host="kiks.yandex.com" />
 	<target host="legal.yandex.com" />
 	<target host="m.legal.yandex.com" />
@@ -281,17 +266,12 @@ Fetch error: http://technologies.yandex.com/ => https://technologies.yandex.com/
 	<target host="prefetch-maps.yandex.com" />
 	<target host="api.rasp.yandex.com" />
 	<target host="m.rasp.yandex.com" />
-	<target host="suggest.rasp.yandex.com" />
 	<target host="t.rasp.yandex.com" />
-	<target host="startups.yandex.com" />
 	<target host="subs.yandex.com" />
 	<target host="taxi.yandex.com" />
 	<target host="m.taxi.yandex.com" />
 	<target host="tech.yandex.com" />
 	<target host="api.tech.yandex.com" />
-	<target host="developer.tech.yandex.com" />
-	<target host="www.tech.yandex.com" />
-	<target host="technologies.yandex.com" />
 	<target host="ticket.yandex.com" />
 	<target host="time.yandex.com" />
 	<target host="translate.yandex.com" />