<!--
	For problematic rules, see Cam.ac.uk-problematic.xml.


	Nonfunctional subdomains:

		- news.admin	(shows www.admin; mismatched, CN: www.admin.cam.ac.uk)
		- my.alumni *
		- www.lib
		- www.mrc-lmb	(https breaks styling; expired, self-signed)
		- www.sports
		- www.ucs	(redirects to shib.raven, valid cert)
		- www
		- www.zoo	(dropped)

	* Dropped


	Problematic subdomains:

		- alumni *
		- damtp		(cert only matches www.damtp)
		- www.jobs **
		- www.philanthropy **
		- www.study	(works; mismatched, CN: www.admin.cam.ac.uk)

	* Cert only matches www.foo
	** Works; mismatched, CN: www.admin.cam.ac.uk


	Partially covered subdomains:

		- www.damtp	(^ → www, some pages 404)


	Fully covered subdomains:

		- webservices.admin
		- www.admin
		- (www.)alumni		(^ → www)
		- www.cl
		- www2.mrc-lmb
		- raven
		- shib.raven
		- www.wolfson


	Observed cookie domains:

		- www.admin
		- shib.raven
		- www.study

-->
<ruleset name="University of Cambridge (partial)">

	<target host="*.cam.ac.uk" />


	<securecookie host="^www\.a(?:dmin|lumni)\.cam\.ac\.uk$" name=".+" />


	<rule from="^http://(webservices\.admin|www2\.mrc-lmb|(?:shib\.)?raven|www\.(?:admin|cl|wolfson))\.cam\.ac\.uk/"
		to="https://$1.cam.ac.uk/" />

	<rule from="^http://(?:www\.)?alumni\.cam\.ac\.uk/"
		to="https://www.alumni.cam.ac.uk/" />

	<rule from="^http://(?:www\.)?damtp\.cam\.ac\.uk/global/"
		to="https://www.damtp.cam.ac.uk/global/" />

</ruleset>
