
<!--
Disabled by https-everywhere-checker because:
Fetch error: http://myforms.sc.egov.usda.gov/ => https://myforms.sc.egov.usda.gov/: (60, 'SSL certificate problem: unable to get local issuer certificate')
Fetch error: http://pws.sc.egov.usda.gov/ => https://pws.sc.egov.usda.gov/: (6, 'Could not resolve host: pws.sc.egov.usda.gov')
Fetch error: http://usdalinc.sc.egov.usda.gov/ => https://usdalinc.sc.egov.usda.gov/: (60, 'SSL certificate problem: unable to get local issuer certificate')
Fetch error: http://my.usda.gov/ => https://my.usda.gov/: (35, 'Unknown SSL protocol error in connection to my.usda.gov:443 ')

	United States Department of Agriculture

	For problematic rules, see USDA-ARS.xml.



	Nonfunctional hosts in *usda.gov:

		- ^ ᶠ
		- www.ams ʰ
		- wt-sdc2.arsnet ᵈ
		- www.cnpp ʰ
		- www.csrees ᵈ
		- www.dm

		- eauth.sc.egov ᶠ
		- eligability.sc.egov ᶠ
		- forms.sc.egov ᶠ
		- offices.sc.egov ᶠ
		- rdmfhrentals.sc.egov ᶠ

		- www.energymatrix ᵈ

		- snaped.fns ᶠ
		- www.whatscooking.fns	503
		- www.fns ᶠ

		- www.fsis	503

		- agclass.nal ᶠ
		- agricola.nal ᶠ
		- awic.nal ᶠ
		- naldc.nal ᶠ
		- ndb.nal ʳ
		- organicroots.nal ᶠ
		- pubag.nal ᶠ

		- www.mo.nrcs ᵈ
		- climatehubs.oce ᶠ
		- www.ocfo ʰ
		- www.ocio ʰ
		- www.rd ʰ
		- rdhomeloans ᶠ
		- www.resales ᶠ
		- rurdev ᵈ
		- search ʰ
		- usdasearch		403
		- vivo ᶠ
		- websoilsurvey ᶠ
		- www ʰ

	ᵈ Dropped
	ᶠ Handshake fails
	ʰ Redirects to http
	ʳ Refused


	Problematic hosts in *usda.gov:

		- www.ars ˣ
		- origin.drupal.fns ᵐ
		- fsa ᶠ
		- (www.)?nifa ᶜ ˣ
		- www.nrcs ᴬ
		- www.rurdev ᴬ

	ᴬ Akamai/mismatched
	ˣ Mixed css
	ᵐ Mismatched
	ᶜ Server sends no certificate chain, see https://whatsmychaincert.com
	ᶠ Handshake fails


	Mixed content:

		- css, on:

			- www.ars from code.jquery.com *
			- (www.)?nifa from fonts.googleapis.com *
			- (www.)?nifa from nifa.usda.gov
			- (www.)?nifa from www.nifa.usda.gov

		- Images, on:

			- i5k.nal from media.eol.org
			- ltar.nal cdn.1001freedownloads.com
			- audioarchives.oc from $self *

		- Bugs on www.ars from wt-sdc2.arsnet.usda.gov

	* Secured by us

-->
<ruleset name="USDA.gov (partial)" default_off='failed ruleset test'>

	<!--	Direct rewrites:
				-->
	<target host="search.ams.usda.gov" />
	<target host="www.aphis.usda.gov" />
	<target host="ars.usda.gov" />
	<target host="agresearchmag.ars.usda.gov" />
	<!--target host="www.ars.usda.gov" /-->
	<target host="www.ascr.usda.gov" />
	<target host="www.eauth.usda.gov" />
	<target host="identitymanager.eems.usda.gov" />

	<target host="myforms.sc.egov.usda.gov" />
	<target host="oip.sc.egov.usda.gov" />
	<target host="pws.sc.egov.usda.gov" />
	<target host="usdalinc.sc.egov.usda.gov" />

	<target host="lovingsupport.fns.usda.gov" />
	<target host="wicnss.fns.usda.gov" />
	<target host="wicworks.fns.usda.gov" />

	<target host="www.fsa.usda.gov" />
	<target host="my.usda.gov" />

	<target host="afsic.nal.usda.gov" />
	<target host="d2.nal.usda.gov" />
	<target host="data.nal.usda.gov" />
	<target host="digitop.nal.usda.gov" />
	<target host="dtnav.nal.usda.gov" />
	<target host="fnic.nal.usda.gov" />
	<target host="fsrio.nal.usda.gov" />
	<target host="healthymeals.nal.usda.gov" />
	<target host="i5k.nal.usda.gov" />
	<target host="lovingsupport.nal.usda.gov" />
	<target host="ltar.nal.usda.gov" />
	<target host="nutritionhistory.nal.usda.gov" />
	<target host="ric.nal.usda.gov" />
	<target host="riley.nal.usda.gov" />
	<target host="snap.nal.usda.gov" />
	<target host="specialcollections.nal.usda.gov" />
	<target host="submit.nal.usda.gov" />
	<target host="wicnss.nal.usda.gov" />
	<target host="wicworks.nal.usda.gov" />
	<target host="wqic.nal.usda.gov" />
	<target host="www.nal.usda.gov" />

	<target host="newfarmers.usda.gov" />
	<target host="nfc.usda.gov" />
	<target host="www.nfc.usda.gov" />
	<!--target host="nifa.usda.gov" /-->
	<!--target host="www.nifa.usda.gov" /-->
	<target host="audioarchives.oc.usda.gov" />
	<target host="oip.usda.gov" />
	<target host="supertracker.usda.gov" />
	<target host="www.supertracker.usda.gov" />

	<!--	Complications:
				-->
	<target host="fsa.usda.gov" />


	<securecookie host="^\w" name=".+" />


	<rule from="^http://fsa\.usda\.gov/"
		to="https://www.fsa.usda.gov/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
