<!--
	DNS Name: *.erp.johnshopkins.edu


	Nonfunctional domains:

		- ssc.jhmi.edu	(shows ess.erp.johnhopkins.edu, CN: *.johnshopkins.edu)
		- www.jhu.edu	(CN: *.johnshopkins.edu)
		- (www.)library.jhu.edu


	Problematic domains:

		- cs.jhu.edu	(cert only matches www.cs)


	Fully covered domains:

		- orchid.hosts.jhmi.edu

		- (www.)cs.jhu.edu	(^ → www)
		- webapps.jhu.edu

		- johnshopkins.edu subdomains:

			- ess.erp
			- my
			- portal
			- portalcontent

-->
<ruleset name="The Johns Hopkins University (partial)">

	<target host="orchid.hosts.jhmi.edu" />
	<target host="webapps.jhu.edu" />
	<target host="*.johnshopkins.edu" />
	<target host="ess.erp.johnshopkins.edu" />


	<securecookie host="^.+\.johnshopkins\.edu$" name=".+" />


	<rule from="^http://orchid\.hosts\.jhmi\.edu/"
		to="https://orchid.hosts.jhmi.edu/" />

	<rule from="^https?://(?:www\.)?cs\.jhu\.edu/"
		to="https://www.cs.jhu.edu/" />

	<rule from="^http://webapps\.jhu\.edu/"
		to="https://webapps.jhu.edu/" />

	<rule from="^http://(ess\.erp|my|portal(?:content)?)\.johnshopkins\.edu/"
		to="https://$1.johnshopkins.edu/" />

</ruleset>