<!--
	As of 2012-05-14, known unprotected domains are:

		- planet *
		- vger		(dropped)
		- wireless	(404, CN: sipsolutions.net)

	* rx_record_too_long


	Problematic subdomains:

		- ^		(cert only matches *.)


	Fully covered subdomains:

		- ^		(→ www)
		- accounts
		- all
		- archive
		- boot
		- bugzilla
		- eu
		- ftp
		- git
		- [\w-]+.git
		- mirrors
		- patchwork
		- pub
		- userweb
		- wiki
		- [\w-]+.wiki
		- www

-->
<ruleset name="Kernel.org">

	<target host="kernel.org" />
	<target host="*.kernel.org" />
		<exclusion pattern="^http://(?:planet|vger|wireless)\." />


	<securecookie host="^.*\.kernel\.org$" name=".+" />


	<rule from="^https?://kernel\.org/"
		to="https://www.kernel.org/" />

	<rule from="^http://([\w\.-]+)\.kernel\.org/"
		to="https://$1.kernel.org/" />

</ruleset>
