<!--
	Problematic subdomains:

		- ^		(akamai)
		- media		(works; mismatched, CN: secure-media.victoriassecret.com)
		- vsallaccess	(works; akamai)
		- www		(mismatched, CN: secure.victoriassecret.com)


	Fully covered subdomains:

		- (www.)	(→ secure)
		- espanol
		- secure-media


	Mixed images from media.

-->
<ruleset name="Victoria's Secret (partial)">

	<target host="victoriassecret.com" />
	<target host="*.victoriassecret.com" />


	<securecookie host="^(?:espanol|secure)?\.victoriassecret\.com$" name=".+" />


	<rule from="^http://(?:secure\.|www\.)?victoriassecret\.com/"
		to="https://secure.victoriassecret.com/" />

	<rule from="^http://(espanol|secure-media)\.victoriassecret\.com/"
		to="https://$1.victoriassecret.com/" />

</ruleset>