
<!--
Disabled by https-everywhere-checker because:
Non-2xx HTTP code: http://billing.healthcare.gov/ (200) => https://billing.healthcare.gov/ (403)
Non-2xx HTTP code: http://localhelp.healthcare.gov/ (200) => https://localhelp.healthcare.gov/ (403)



	Insecure cookies are set for these hosts:

		- billing.healthcare.gov
		- localhelp.healthcare.gov
		- www.healthcare.gov


	Mixed content:

		- css on billing from fonts.googleapis.com ˢ

	ˢ Secured by us

-->
<ruleset name="Healthcare.gov" default_off='failed ruleset test'>
    <target host="healthcare.gov" />
    <target host="*.healthcare.gov" />

		<test url="http://billing.healthcare.gov/" />
		<test url="http://localhelp.healthcare.gov/" />
		<test url="http://www.healthcare.gov/" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^(?:billing\.|www\.)?healthcare\.gov$" name="^akavpau_vp1$" /-->

	<securecookie host=".+" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
