<!--
	For problematic rules, see Deviantart-mismatches.xml.


	ToDo: Find edgecast URL for /(fc|th)\d+.


	Mixed content:

		- Images on *.....com from e.deviantart.net *

	* Secured by us

-->
<ruleset name="DeviantArt (pending)" default_off="site operator says not ready yet">

	<target host="deviantart.com" />
	<target host="*.deviantart.com" />
	<target host="deviantart.net" />
	<target host="*.deviantart.net" />


	<securecookie host="^\.deviantart\.com$" name=".*" />


	<!--	Redirects from com to net, but does so successfully by itself.
										-->
	<rule from="^http://([aei]|fc\d\d|s[ht]|th\d\d)\.deviantart\.(com|net)/"
		to="https://$1.deviantart.$2/" />

	<!--	This handles everything that isn't in the first rule.
		Namely, usernames, backend, fc, th, and (www.).
			These domains present a cert that is only
		valid for .com.
			Note that .net isn't used on DA, but.net does
		redirect to .com, and we shouldn't break what would
		otherwise work.
			Mustn't rewrite from https here, as doing so
		would conflict with the first rule.
								-->
	<rule from="^http://([^/:@\.]+\.)?deviantart\.(?:com|net)/"
		to="https://$1deviantart.com/" />

</ruleset>
