<!--
	Insecure cookies are set for these hosts: ᶜ

		- longform.org

	ᶜ See https://owasp.org/index.php/SecureFlag


	Mixed content:

		- Images from s3.longform.org.s3.amazonaws.com
		- Web bugs from pixel.quantserve.com ˢ

	ˢ Secured by us, see https://www.paulirish.com/2010/the-protocol-relative-url/

-->
<ruleset name="Longform.org">

	<target host="longform.org" />
	<target host="www.longform.org" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^longform\.org$" name="^_longform\.org_session$" /-->

	<securecookie host=".+" name=".+" />


	<rule from="^http:"
		to="https:" />

</ruleset>
