<!--
	Insecure cookies are set for these domains:

		- you

-->
<ruleset name="38degrees.org.uk">
    <target host="secure.38degrees.org.uk" />
    <target host="you.38degrees.org.uk" />

	<!--	Not secured by server:
					-->
	<!--securecookie host="^you\.38degrees\.org\.uk$" name="^_agra_session$" /-->

    <securecookie host="^(?:.*\.)?38degrees\.org\.uk$" name=".+" />

	<rule from="^http:"
		to="https:" />
</ruleset>
