<!--
	For problematic rules, see Amnesty-International-mismatches.xml.

	For rules subject to JS redirects, see Amnesty_International-nojs.xml.


	Other Amnesty International rulesets:

		- Amnesty_International_Norway.xml


	CDN buckets:

		- d3soxcs9eo85xz.cloudfront.net


	Nonfunctional domains:

		- web.amnesty.org	(http reply)
		- pthblog.amnesty.org.uk
		- tv.amnesty.org.uk


	Problematic domains:

		- livewire.amnesty.org		(JS redirect to http)
		- action.amnesty.org.uk		(mismatched, CN: action.amnesty.org.uk)


	Partially covered domains:

		- livewire.amnesty.org		(complete coverage in -nojs.xml)


	Fully covered domains:

		- amnesty.org subdomains:

			- (www.)
			- adam
			- files

		- amnesty.org.uk subdomains:

			- (www.)
			- blogs		(→ d3soxcs9eo85xz.cloudfront.net)
			- protectthehuman
			- www2

-->
<ruleset name="Amnesty International (partial)" platform="mixedcontent">

	<target host="amnesty.org" />
	<target host="*.amnesty.org" />
		<!--
			JS redirect to http:
						-->
		<exclusion pattern="^http://livewire\.amnesty\.org/(?:.+/)?(?:\?.*)?$" />
	<target host="amnesty.org.uk" />
	<target host="*.amnesty.org.uk" />


	<securecookie host="^\.amnesty\.org\.uk$" name="^__utm\w$" />
	<securecookie host="^(?:.*\.)?amnesty\.org\.uk$" name=".+" />


	<rule from="^http://((?:adam|files|livewire|www)\.)?amnesty\.org/"
		to="https://$1amnesty.org/" />

	<rule from="^http://(protectthehuman\.|www2?\.)?amnesty\.org\.uk/"
		to="https://$1amnesty.org.uk/" />

	<!--	blogs has a valid certificate, but pages redirect to http.
								-->
	<rule from="^http://blogs\.amnesty\.org\.uk/"
		to="https://d3soxcs9eo85xz.cloudfront.net/" />

</ruleset>
