<!--
	Nonfunctional subdomains:

		- bedrift *
		- papp2 *
		- sport		(times out)

	* Revoked


	Problematic subdomains:

		- atorget *
		- bedriftfiles		(self-signed, mismatched, CN: hotelladmin.aftenposten.no)
		- bil *
		- godetilbud *
		- kundeservice		(revoked)
		- reise *
		- rubrikkcache *

	* Works; mismatched, CN: www.aftenposten.no


	Partially covered subdomains:

		- kundeservice		(→ a)

-->
<ruleset name="Aftenposten" platform="mixedcontent">
        <target host="*.aftenposten.no" />
        <target host="aftenposten.no" />
	<target host="ap.mnocdn.no" />


	<!--securecookie host="^\.aftenposten\.no$" name="^environment$" /-->
	<securecookie host="^(?:a|kundeweb|onlinesos)\.aftenposten\.no$" name=".+" />


	<rule from="^http://(?:www\.)?aftenposten\.no/" to="https://www.aftenposten.no/"/>

	<rule from="^http://(a|kundeweb|onlinesos)\.aftenposten\.no/"
		to="https://$1.aftenposten.no/" />

	<rule from="^http://kundeservice\.aftenposten\.no/(\?.*)?$"
		to="https://a.aftenposten.no/kundeservice/$1" />

	<!-- The following rules will generate SSL warnings by default because
	the cert is only valid for www.aftenposten.no -->
	<!--
	<rule from="^http://lisacache\.aftenposten\.no/" to="https://lisacache.aftenposten.no/"/>
	<rule from="^http://media\.aftenposten\.no/" to="https://media.aftenposten.no/"/>
	<rule from="^http://oslopuls\.aftenposten\.no/" to="https://oslopuls.aftenposten.no/"/>
	-->

	<rule from="^http://ap\.mnocdn\.no/"
		to="https://www.aftenposten.no/" />

</ruleset>
