<ruleset name="Helmet.fi">
  <target host="haku.helmet.fi" />
	<target host="luettelo.helmet.fi" />
	<target host="www.helmet.fi" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.helmet\.fi$" name="^(III_ENCORE_PATRON|III_EXPT_FILE|III_SESSION_ID|SESSION_LANGUAGE)$" /-->
	<!--securecookie host="^haku\.helmet\.fi$" name="^(ENCORE_INITIAL_PROTOCOL|jcontainerId)$" /-->
	<!--securecookie host="^luettelo\.helmet\.fi$" name="^SESSION_SCOPE$" /-->
	<!--securecookie host="^www\.helmet\.fi$" name="^(ASP\.NET_SessionId|HelmetLanguage)$" /-->

	<securecookie host="^(?:haku|luettelo|www)?\.helmet\.fi$" name=".+" />


  <rule from="^http:" to="https:" />
</ruleset>
