<!--
	National Science Foundation



	Nonfunctional hosts in *nsf.gov:

		- dellweb.bfa *

	* Refused


	Problematic hosts in *nsf.gov:

		- fastlane *
		- fldemo *

	* Mismatched


	Insecure cookies are set for these hosts:

		- nsf.gov
		- www.nsf.gov


	Mixed content:

		- Bug on www from wt.research.gov *

	* Not secured by us <= missing certificate chain

-->
<ruleset name="NSF.gov (partial)">

	<!--	Direct rewrites:
				-->
	<target host="nsf.gov" />
	<target host="www.fastlane.nsf.gov" />
	<target host="www.fldemo.nsf.gov" />
	<target host="www.nsf.gov" />

	<!--	Complications:
				-->
	<target host="fastlane.nsf.gov" />
	<target host="fldemo.nsf.gov" />

		<!--	Redirects to http:
						-->
		<exclusion pattern="^http://www\.nsf\.gov/(?:$|\?|awardsearch|index\.jsp|statistics)" />

			<test url="http://www.nsf.gov/index.jsp" />
			<test url="http://www.nsf.gov/awardsearch" />
			<test url="http://www.nsf.gov/awardsearch/" />
			<test url="http://www.nsf.gov/statistics" />
			<test url="http://www.nsf.gov/statistics/" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^(?:www\.)?nsf\.gov$" name="^JSESSIONID$" /-->

	<securecookie host=".+" name=".+" />


	<rule from="^http://(fastlane|fldemo)\.nsf\.gov/"
		to="https://www.$1.nsf.gov/" />

	<rule from="^http:"
		to="https:" />

</ruleset>

