<!--
	Museum of American Finance

	For problematic rules, see MoAF.org-problematic.xml.


	(www.)?: Expired 2012
	^: cert only matches www


	Insecure cookies are set for these domains and hosts:

		- shop.moaf.org
		- .shop.moaf.org
		- www.moaf.org

-->
<ruleset name="MoAF.org (partial)">

	<!--	Direct rewrites:
				-->
	<target host="shop.moaf.org" />
	<!--target host="www.moaf.org" /-->

	<!--	Complications:
				-->
	<!--target host="moaf.org" /-->


	<!--	Not secured by server:
					-->
	<!--securecookie host="^shop\.moaf\.org$" name="(?:CFGLOBALS|CFID|CFTOKEN)$" /-->
	<!--securecookie host="^\.shop\.moaf\.org$" name="CPSESSIONID$" /-->
	<!--securecookie host="^www\.moaf\.org$" name="^PHPSESSID$" /-->

	<!--securecookie host="^(?:\.?shop|www)\.moaf\.org$" name=".+" /-->
	<securecookie host="^\.?shop\.moaf\.org$" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
