<!--
	Nonfunctional hosts in *itch.io:

		- blog ᵀ

	ᵀ Tumblr / redirects to http


	Insecure cookies are set for these domains:

		- .itch.io

	ᶜ See https://owasp.org/index.php/SecureFlag

-->
<ruleset name="Itch.io (partial)">

	<target host="itch.io" />
	<target host="img.itch.io" />
	<target host="static.itch.io" />
	<target host="www.itch.io" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.itch\.io$" name="^itchio_(?:id|token)$" /-->

	<securecookie host="^\." name="^(?:__cfduid|cf_clearance)$" />


	<rule from="^http:"
		to="https:" />

</ruleset>
