<!--
	For problematic rules, see Columbia_University-problematic.xml.


	cu.custhelp.com
	columbia.studioabroad.com
	academiccommons.uservoice.com 


	Nonfunctional subdomains:

		- (www.) *
		- academiccommons
		- campaignimpact
		- wwwapp.cc			(403/404)
		- mirror.cc			(refused)
		- (www.)astro ⁷
		- (www.)ccnmtl *
		- (www.)cdrs **
		- (www.)ce ***
		- (www.)cerc ⁴
		- (www.)cgsd ⁵
		- cpmcnet ***
		- columbiadoctors ⁶
		- (www.)compliance ***
		- (www.)copyright **
		- clio.cul ⁷
		- scholcomm.cul			(shows haydn.cul)
		- (www.)cumc			(redirects to http)
		- giving.cumc ⁸
		- library.cumc ***
		- sklad.cumc ⁸
		- (www.)earth			(shows RHEL test page; expired 2010-02-04, CN: localhost.localdomain)
		- (www.)earthinstitute ⁴
		- pantagonia.econ		(shows CentOS test page, CN: dyn-iab-164-217.dyn.columbia.edu)
		- (www.)effortreporting ***
		- (www.)ehrs *
		- (www.)ehs *
		- ac4.ei ⁵
		- blogs.ei ⁵
		- (www.)endowmentadmin ⁶
		- (www.)energy ⁴
		- (www.)environment ***
		- events ⁹
		- share.facil
		- (www.)mailman.hs ⁷
		- irvinginstitute
		- webservices.lamp		(403/404, mismatched, CN: *.columbia.edu)
		- digital.lampdev		(403/404, self-signed)
		- (www.)learn ⁶
		- (www.)mailmain ⁷
		- (www.)neighbors *
		- (www.)pathology ***	
		- (www.)publichealth
		- (www.)sas ⁹
		- search
		- (www.)senate *
		- (www.)sipa *
		- arts.tc ⁶
		- ccrc.tc			(interrupted)
		- (www.)techventures ***
		- (www.)transportation ⁹
		- (www.)uem ⁹
		- webservices			(redirects to www.ais, mismatched, CN: www.ais)

	* Shows www1, mismatched, CN: www1.columbia.edu
	** Shows scholcomm, CN: *.cdrs
	*** Shows www.cumc, mismatched, CN: www.cumc
	⁴ reused_issuer_and_serial
	⁵ Shows RHEL test page, self-signed, mismatched, CN: dhcp-113.dfw1.kickstart.lan
	⁶ Times out
	⁷ record_too_long
	⁸ Shows columbiadoctors, mismatched, CN: columbiadoctors
	⁹ Prints "Incorrect URL"


	Problematic subdomains:

		- support.academiccommons	(works, mismatched, CN: *.uservoice.com)
		- advance			(cert only matches www.advance)
		- alice				(403)
		- www.alice *
		- (www.)arch *
		- askus				(cu.custhelp.com redirects back, mismatched, CN: *.custhelp.com)
		- www.alumni			(cert only matches ^alumni)
		- www.alumniclubs		(cert only matches ^alumniclubs)
		- www.arts *
		- www.bme *
		- cdrs **
		- www.communityservice *
		- www.courseworks		(cert only matches ^courseworks)
		- www.cuit *
		- outlook.cuit			(mismatched, CN: outlook1.cuit)
		- www.cuitalerts *
		- www.directory *
		- bulletin.engineering *	(works)
		- www.engineering *
		- www.eoaa *
		- www.evpr *
		- www.facets *
		- www.facilities *
		- www.facultyhouse *
		- www.finance *
		- www.giving			(cert only matches ^giving)
		- www.goaskalice *
		- www.gs *
		- gsas				(cert only matches *.gsas)
		- gsb				(cert only matches *.gsb)
		- www.health *
		- www.housingservices *
		- www.hr *
		- managers.hr *			(works)
		- infoed			(cert only matches www.infoed)
		- www.library			(cert only matches ^library)
		- lionmail			(interrupted)
		- www.mail *
		- math				(cert only matches www.math)
		- twiki.nevis			(self-signed)
		- www.nevis			(md5 signature)
		- www.my *
		- www.news *
		- (www.)ogp			(mismatched, CN: *.studioabroad.com)
		- www.policylibrary *
		- www.printservices *
		- rascal			(mismatched)
		- www.registrar *
		- scholcomm **
		- www.spa *
		- (www.)stv			(works, expired, mismatched, CN: iso.stv)
		- tc				(cert only matches www.tc)
		- uni ***
		- www.universityprograms *
		- www.worklife *
		- www.worldleaders *
		- www.w2aee ***

	* Cert only matches *.
	** Cert only matches *.cdrs
	*** Shows www1, CN: www1)


	Partially covered domains:

		- (www.)		(→ cuit)
		- (www.)advance		(some pages redirect to http, some paths redirect to Error.aspx, ^ → www)
		- (www.)gs *		(www → ^)
		- (www.)library *	(www → ^)
		- (www.)procurement *
		- uni			(→ cuit)
		- www.w2aee		(→ wikis.cuit)

	* At least some pages redirect to http


	Fully covered subdomains:

		- www.ais
		- (www.)alice			(→ health)
		- (www.)alumni			(www → ^)
		- (www.)alumniclubs		(www → ^)
		- (www.)arch			(www → ^)
		- (www.)arts			(www → ^)
		- cas
		- cubemail.cc
		- ingo.cc
		- rascalprod.cc
		- uniapp.cc
		- (www.)cdrs			(^ → www)
		- www.college
		- (www.)communityservice	(www → ^)
		- (www.)courseworks		(www → ^)
		- (www.)cuit			(www → ^)
		- outlook.cuit			(→ outlook1.cuit)
		- outlook1.cuit
		- (www.)cuitalerts		(www → ^)
		- haydn.cul
		- roomreservations.cul
		- scholcomm-dev.cul
		- (www.)directory		(www → ^)
		- (www.)engineering		(www → ^)
		- (www.)eoaa			(www → ^)
		- (www.)evpr			(www → ^)
		- (www.)facets			(www → ^)
		- www.facil
		- (www.)facilities		(www → ^)
		- (www.)facultyhouse		(www → ^)
		- (www.)finance			(www → ^)
		- forms.finance
		- (www.)giving			(www → ^)
		- (www.)goaskalice
		- admissions.gs
		- (www.)gsas			(^ → www)
		- apply.gsas
		- gsas-2l12p-01.gsas

		- gsb subdomains:

			- (www.)		(^ → www)
			- apply
			- gear
			- www0
			- www2
			- www4
			- www6
			- www7
			- www8
			- www-1

		- (www.)health			(www → ^)
		- housingportal
		- (www.)housingservices		(www → ^)
		- (www.)hr			(www → ^)
		- (www.)infoed			(^ → www)
		- isso
		- lexington
		- alumni-friends.library
		- lionmail			(→ mail.google.com)
		- (www.)mailservices		(www → ^)
		- (www.)math			(^ → www)
		- (www.)my			(www → ^)
		- newcourseworks
		- (www.)news			(www → ^)
		- (www.)ogp			(→ columbia.studioabroad.com)
		- (www.)policylibrary		(www → ^)
		- (www.)printservices		(www → ^)
		- (www.)rascal			(^ → www)
		- (www.)registrar		(www → ^)
		- (www.)researchinitiatives	(www → ^)
		- portal.seas
		- (www.)spa			(www → ^)
		- ssol
		- (www.)studentaffairs
		- undergraduate-admissions.studentaffairs
		- (www.)tc			(^ → www)
		- auth.tc
		- careers.tc
		- my.tc
		- (www.)universityprograms	(www → ^)
		- wind
		- (www.)worklife		(www → ^)
		- (www.)worldleaders		(www → ^)
		- www1


	www.cdrs requires some handling of scholcomm.


	Secured wildcard cookies:

		- *.alumni.columbia.edu
		- *.cubmail.cc.columbia.edu
		- *.ingo.cc.columbia.edu
		- *.cuitalerts.columbia.edu
		- *.facets.columbia.edu
		- *.facilites.columbia.edu
		- *.forms.finance.columbia.edu
		- *.www7.gsb.columbia.edu
		- *.isso.columbia.edu
		- *.lexington.columbia.edu
		- *.mailservices.columbia.edu
		- *.my.columbia.edu
		- *.news.columbia.edu
		- *.policylibrary.columbia.edu
		- *.researchinitiatives.columbia.edu
		- *.spa.columbia.edu
		- *.universityprograms.columbia.edu
		- *.worklife.columbia.edu
		- *.worldleaders.columbia.edu


	Other wildcard cookies observed:

		- .hr.columbia.edu
		- .managers.hr.columbia.edu
		- .procurement.columbia.edu

-->
<ruleset name="Columbia University (partial)">

	<target host="*.columbia.edu" />
		<exclusion pattern="^http://www\.giving\.columbia\.edu/(?!$|ccvolunteers/(?:App_Themes/|Telerik\.Web\.UI\.WebResource\.axd)|volunteer/)" />
		<exclusion pattern="^http://gs\.columbia\.edu/(?!files/|misc/|sites/)" />
		<exclusion pattern="^http://library\.columbia\.edu/(?!apps/|content/|etc/)" />
		<exclusion pattern="^http://procurement\.columbia\.edu/(?!modules/|sites/)" />


	<!--	Avoiding blanket wildcard cookies for now.
								-->
	<securecookie host="^\w.*\.columbia\.edu$" name=".+" />
	<securecookie host="^\.(?:alumni|cubemail\.cc|ingo\.cc|cuitalerts|facets|facilities|forms\.finance|www7\.gsb|isso|lexington|mailservices|my|news|policylibrary|researchinitiatives|spa|universityprograms|worklife|worldleaders)\.columbia\.edu$" name=".+" />


	<rule from="^http://(?:www\.)?columbia\.edu/cuit/index\.html($|\?.*)"
		to="https://cuit.columbia.edu/$1" />

	<rule from="^http://(www\.ais|cas|(?:cubemail|ingo|rascalprod|uniapp)\.cc|www\.college|wikis\.cuit|(?:haydn|roomreservations|scholcomm-dev)\.cul|www\.facil|forms\.finance|admissions\.gs|(?:apply|gsas-2l12p-01)\.gsas|(?:apply|gear|www[024678]|www-1)\.gsb|housingportal|isso|lexington|alumni-friends\.library|newcourseworks|portal\.seas|(?:www\.)?procurement|ssol|(?:undergraduate-admissions\.|www\.)?studentaffairs|(?:auth|careers|my)\.tc|wind|www1)\.columbia\.edu/"
		to="https://$1.columbia.edu/" />

	<rule from="^https?://(?:www\.)?alice\.columbia\.edu/(?:.*)"
		to="https://health.columbia.edu/services/alice" />

	<rule from="^http://(?:www\.)?(alumni(?:clubs)?|arch|arts|bme|communityservice|courseworks|cuit|cuitalerts|directory|engineering|eoaa|evpr|facets|facilities|facultyhouse|finance|giving|goaskalice|gs|health|housingservices|hr|library|mail|my|news|policylibrary|printservices|registar|researchinitiatives|spa|universityprograms|worklife|worldleaders)\.columbia\.edu/"
		to="https://$1.columbia.edu/" />

	<rule from="^http://(?:www\.)?(giving|gsas|gsb|infoed|math|rascal|tc)\.columbia\.edu/"
		to="https://www.$1.columbia.edu/" />

	<rule from="^http://(?:www\.)?ogp\.columbia\.edu/"
		to="https://columbia.studioabroad.com/" />

	<rule from="^http://outlook1?\.cuit\.columbia\.edu/"
		to="https://outlook1.cuit.columbia.edu/" />

	<rule from="^http://lionmail\.columbia\.edu/(?:.*)"
		to="https://mail.google.com/a/columbia.edu" />

	<rule from="^http://uni\.columbia\.edu/(?:$|\?.*)"
		to="https://cuit.columbia.edu/cuit/manage-my-uni" />

	<rule from="^http://www\.w2aee\.columbia\.edu/($|\?.*)"
		to="https://wikis.cuit.columbia.edu/confluence/display/cuarc/Home$1" />

</ruleset>