
<!--
Disabled by https-everywhere-checker because:
Fetch error: http://business.wales.gov.uk/ => https://business.wales.gov.uk/: (60, 'SSL certificate problem: certificate has expired')
Fetch error: http://cssiw.wales.gov.uk/ => https://cssiw.wales.gov.uk/: (51, "SSL: no alternative certificate subject name matches target host name 'cssiw.wales.gov.uk'")

	For other UK government coverage, see GOV.UK.xml.


	Nonfunctional hosts in *wales.gov.uk:

		- apw ᵃ
		- law ᵃ
		- prp ᵃ

	ᵃ Shows another domain


	Problematic hosts in *wales.gov.uk:

		- (www.)? ᵐ
		- lle ᵐ
		- mylocalhealthservice ᵐ
		- mylocalschool ᵐ

	ᵐ Mismatched


	Insecure cookies are set for these domains and hosts:

		- .wales.gov.uk
		- statswales.wales.gov.uk

-->
<ruleset name="Wales.gov.uk (partial)" default_off='failed ruleset test'>

	<target host="adfs.wales.gov.uk" />
	<target host="bcomm.wales.gov.uk" />
	<target host="business.wales.gov.uk" />
	<target host="carrierbagcharge.wales.gov.uk" />
	<target host="change4life.wales.gov.uk" />
	<target host="cssiw.wales.gov.uk" />
	<target host="hwb.wales.gov.uk" />
	<target host="login.hwb.wales.gov.uk" />
	<target host="statswales.wales.gov.uk" />
	<target host="twf.wales.gov.uk" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.wales\.gov\.uk$" name="^hwb$" /-->
	<!--securecookie host="^statswales\.wales\.gov\.uk$" name="^\.ASPXANONYMOUS$" /-->

	<securecookie host="^\w" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
