<!--
	CDN buckets:

		- wac.1ddb.edgecastcdn.net/??1DDB/

			- images.cheezburger.com

		- cheezburger.freshdesk.com

			- support.cheezburger.com


	As of 2012-08-22, known unprotected subdomains are:

		- advertising	(unbounce.com certificate)
		- blog		(not listening on https)
		- corp		(not listening on https)
		- feedback	(uservoice.com certificate)
		- jobs		(theresumator.com certificate)
		- sites		(unbounce.com certificate)

	However, there are tens (hundreds?) of subdomains supporting https with
	a wildcard certificate, so it's not worth whitelisting them one by one.

	Other related unprotected hosts:

		- chzb.gr
		- knowyourmeme.com


	Problematic domains:

		- images.cheezburger.com	(works; mismatched, CN: gp1.wac.edgecastcdn.net)
		- support.cheezburger.com	(freshdesk)

-->
<ruleset name="Cheezburger" platform="mixedcontent">

	<target host="cheezburger.com" />
	<target host="*.cheezburger.com" />
		<exclusion pattern="^http://(?:advertising|blog|corp|feedback|jobs|sites)\.cheezburger\.com/" />
		<!--
			Exclude what *shouldn't* be downgraded:
								-->
		<exclusion pattern="^https://corp\.cheezburger\.com/(?!(?:copyright-infringement-notification|privacy-policy|terms-of-service)/$)" />
	<target host="chzb.gr" />
	<target host="*.chzbgr.com" />


	<securecookie host="^www\.cheezburger\.com$" name=".+" />


	<!--	https://mail1.eff.org/pipermail/https-everywhere-rules/2013-August/001665.html
							-->
	<rule from="^http://images\.cheezburger\.com/"
		to="https://i.chzbgr.com/" />

	<rule from="^http://support\.cheezburger\.com/"
		to="https://cheezburger.support.com/" />

	<!--	There are some inconsistent redirects between cheezburger.com and
		www.cheezburger.com. So don't try to enforce either hostname.
									-->
	<rule from="^http://([\w-]+\.)?cheezburger\.com/"
		to="https://$1cheezburger.com/" />

	<rule from="^https?://chzb\.gr/"
		to="https://bit.ly/" />

	<rule from="^http://(i|s|t)\.chzbgr\.com/"
		to="https://$1.chzbgr.com/" />

	<rule from="^https://(advertising|blog|corp|feedback|jobs|sites)\.cheezburger\.com/?$"
		to="http://$1.cheezburger.com/" downgrade="1" />

</ruleset>
