<!--
	Nonfunctional domains:

		-  illinois.edu subdomains:

			- acdis *
			- admissions		(403 & 404, expired, CN: www-s2.oar.illinois.edu)
			- blog.admissions *
			- www.ahs		(shows www.mrp, CN: www.mrp.illinois.edu)
			- isl.beckman **
			- (www.)bioen ***
			- bioengineering ***
			- (www.)cam ****
			- cgs
			- cs			(shows chbe, CN: engineering.illinois.edu)
			- lists.cs
			- disability		(prints "The service is unavailable.", expired, self-signed, CN: ED-webdev1.ad.uiuc.edu)
			- engagement ****
			- www.grad		(403)
			- honors ****
			- i2i ****
			- ilint ****
			- (www.)ise ***
			- www.isss ***
			- iti ***
			- www.iti		(shows chbe, mismatched)
			- (www.)library
			- (www.)ncsa **
			- mechanical *****
			- mechse *****
			- mrl *****
			- news ****
			- npre ******
			- parallel ******

		- uiuc.edu subdomains:

			- lists.cs
			- (www.)isl **
			- syzygy.isl **
			- (www.)ms-tech		(shows business.illinois.edu; mismatched, CN: business.illinois.edu)

	* Shows lsecure.admin; CN: lsecure.admin.illinois.edu
	** Times out
	*** Reset
	**** Shows secure.admin, CN: secure.admin.illinois.edu
	***** shows www-s.mechse, CN: www-s.mechse.uiuc.edu
	****** Shows chbe, cert valid


	Problematic domains:

		illinois.edu subdomains:

			- www *
			- www.business		(expired 2010-05-30, mismatched, CN: www.business.uiuc.edu)
			- www.chbe *
			- www.engineering *
			- www.housing		(cert only matches www-s.housing)
			- mrp			(cert only matches www.mrp)

		uiuc.edu subdomains:

			- (www.)		(mismatched, redirects to illinois.edu)
			- www.ks		(cert only matches www-s.ks.uiuc.edu)
			- (www.)union		(cert doesn't match uiuc)

	* Cert doesn't match www


	Partially covered domains:

		- illinois.edu subdomains:

			- (www.) *
			- cs		(→ chbe.illinois.edu)
			- npre		(→ chbe.illinois.edu)

		- (www.)uiuc.edu *

	* Some (most?) pages redirect to http


	Fully covered domains:

		- illinois.edu

			- secure.admin
			- autodiscover
			- (www.)business	(www → ^)
			- www1.business
			- chbe
			- www.chbe		(→ chbe.illinois.edu)

			- engineering subdomains:

				- ^
				- blogs
				- iefx
				- it
				- www		(→ engineering.illinois.edu)

			- exchws
			- (www.)housing		(→ www-s.housing.illinois.edu)
			- www-s.housing
			- mrp			(→ www.mrp.illinois.edu)
			- www.mrp
			- internal.ncsa
			- security.ncsa
			- parallel
			- (www.)union
			- webmail

		- uiuc.edu subdomains:

			- (www.)		(→ illinois.edu)
			- (www.)ks		(→ www-s.ks.uiuc.edu)
			- www-s.ks
			- www-s.mechse
			- (www.)union		(→ [www.]union.illinois.edu)

		- (www.)illinoislawreview.org


	Targets solely for wildcard cookies:

		- *.blogs.engineering.illinois.edu
		- *.iefx.engineering.illinois.edu
		- *.it.engineering.illinois.edu


	This is the result of a cursory trawl.
	There is much, much more to add.

-->
<ruleset name="University of Illinois at Urban-Champaign (partial)" platform="mixedcontent">

	<target host="illinois.edu" />
	<target host="*.illinois.edu" />
	<target host="illinoislawreview.org" />
	<target host="www.illinoislawreview.org" />
	<target host="uiuc.edu" />
	<target host="*.uiuc.edu" />


	<!--	Don't match www, just in case cookies set on
		securable www pages are needed on unsecurable ones.

		Observed cookies (.illinois.edu):

			- business
			- .chbe
			- .engineering
			- .blogs.engineering
			- .iefx.engineering
			- .it.engineering
			- www-s.housing
			- mrp
					-->
	<securecookie host="^.*[^w]\.illinois\.edu$" name=".+" />
	<securecookie host="^www-s\.mechse\.uiuc\.edu$" name=".+" />


	<rule from="^https?://(?:www\.)?(?:illinois|uiuc)\.edu/(about/about\.html|academics/academics\.html|assets2?/|athletics/athletics\.html|favicon\.ico|\.psg/)"
		to="https://illinois.edu/$1" />

	<rule from="^http://(secure\.admin|autodiscover|www1\.business|exchws|(?:internal|security)\.ncsa|webmail)\.illinois\.edu/"
		to="https://$1.illinois.edu/" />

	<rule from="^https?://(?:www\.)?(business|chbe)\.illinois\.edu/"
		to="https://$1.illinois.edu/" />

	<rule from="^https?://(?:cs|npre)\.illinois\.edu/sites/"
		to="https://chbe.illinois.edu/sites/" />

	<rule from="^https?://(?:((?:blogs|iefx|it)\.)|www\.)?engineering\.illinois\.edu/"
		to="https://$1engineering.illinois.edu/" />

	<rule from="^https?://(?:www(?:-s)?\.)?housing\.illinois\.edu/"
		to="https://www-s.housing.illinois.edu/" />

	<rule from="^https?://(?:www\.)?mrp\.illinois\.edu/"
		to="https://www.mrp.illinois.edu/" />

	<rule from="^http://parallel\.illinois\.edu/sites/"
		to="https://parallel.illinois.edu/sites/" />

	<rule from="^https://(www\.)?union\.(?:uiuc|illinois)\.edu/"
		to="https://$1union.illinois.edu/" />

	<rule from="^http://(www\.)?illinoislawreview\.org/"
		to="https://$1illinoislawreview.org/" />

	<rule from="^https?://(?:www(?:-s)?\.)?ks\.uiuc\.edu/"
		to="https://www-s.ks.uiuc.edu/" />

	<!--	www 302s to mechse.illinois.edu.
							-->
	<rule from="^http://www-s\.mechse\.uiuc\.edu/"
		to="https://www-s.mechse.uiuc.edu/" />

</ruleset>
