<!--
	Other ACLU rulesets:

		- ACLU_of_Massachusetts.xml
		- ACLU_of_New_Jersey.xml
		- ACLU-of-North-Carolina.xml
		- ACLU_of_Northern_California.xml
		- ACLU-of-Virginia.xml
		- New_Hampshire_Civil_Liberties_Union.xml


	CDN buckets:

		- d320ze5h7gg57a.cloudfront.net
		- d3h9au4afozpag.cloudfront.net


	Problematic subdomains:

		- ^	(works, cert only matches www)


	Fully covered subdomains:

		- (www.)	(^ → www)
		- secure

-->
<ruleset name="ACLU">

	<target host="aclu.org" />
	<target host="*.aclu.org" />
		<!--
			Not only does blanket https use work again, but appears to be forced, too.
													-->
		<!--exclusion pattern="^http://(www\.)?aclu\.org/(?!donate)(blog/|multimedia/|national-security/|prisoners-rights/)?[^/.]*$" /-->
		<!--exclusion pattern="^http://(www\.)?aclu\.org/(?!donate($|[?/])|files/|secure/|sites/)" /-->


	<securecookie host="^secure\.aclu\.org$" name=".+" />


	<rule from="^http://(?:www\.)?aclu\.org/"
		to="https://www.aclu.org/" />

	<rule from="^http://secure\.aclu\.org/"
		to="https://secure.aclu.org/" />

</ruleset>
