
<!--
Disabled by https-everywhere-checker because:
Fetch error: http://lists.ntp.org/ => https://lists.ntp.org/: (60, 'SSL certificate problem: certificate has expired')

	Remark: [0-9].*pool.ntp.org are completely omitted here. 
		*.pool.ntp.org are omitted if they do not give SSL error.

	Non-functional hosts
		Couldn't connect to server:
			 - archive.ntp.org
			 - bk1.ntp.org
			 - doc.ntp.org
			 - packages.ntp.org
			 - psp3.ntp.org

		Timeout was reached:
			 - mail1.ntp.org
			 - ns1.ntp.org
			 - ns2.ntp.org

		SSL connect error:
			 - ntp.org
			 - www.ntp.org
			 - bk.ntp.org
			 - ar.pool.ntp.org
			 - ec.pool.ntp.org
			 - id.pool.ntp.org
			 - in.pool.ntp.org
			 - uk.pool.ntp.org
			 - uy.pool.ntp.org

		SSL peer certificate was not OK:
			 - mailman.ntp.org
			 - pool.ntp.org
			 - www.pool.ntp.org
			 - cn.pool.ntp.org
			 - cz.pool.ntp.org
			 - de.pool.ntp.org
			 - ee.pool.ntp.org
			 - es.pool.ntp.org
			 - europe.pool.ntp.org
			 - fi.pool.ntp.org
			 - fr.pool.ntp.org
			 - hu.pool.ntp.org
			 - il.pool.ntp.org
			 - lu.pool.ntp.org
			 - no.pool.ntp.org
			 - north-america.pool.ntp.org
			 - pl.pool.ntp.org
			 - rs.pool.ntp.org
			 - sg.pool.ntp.org
			 - ua.pool.ntp.org
			 - us.pool.ntp.org
			 - vn.pool.ntp.org

		Peer certificate cannot be authenticated with given CA certificates:
			 - ae.pool.ntp.org
			 - au.pool.ntp.org
			 - bg.pool.ntp.org
			 - dk.pool.ntp.org
			 - jp.pool.ntp.org
			 - mk.pool.ntp.org
			 - ro.pool.ntp.org
			 - ru.pool.ntp.org

		Incomplete certificate chain error:
			 - bugs.ntp.org
			 - bugzilla.ntp.org
			 - people.ntp.org
			 - africa.pool.ntp.org
			 - asia.pool.ntp.org
			 - psp2.ntp.org
			 - support.ntp.org
			 - twiki.ntp.org
-->
<ruleset name="NTP.org (partial)" default_off='failed ruleset test'>
	<target host="lists.ntp.org" />

	<securecookie host="^lists\.ntp\.org$" name=".+" />

	<rule from="^http:" to="https:" />
</ruleset>
