<!--
	CDN buckets:

		- s3.amazonaws.com/c.ooyala.com/
		- ak.c.ooyala.com.edgesuite.net


	Nonfunctional hosts in *ooyala.com:

		- community	Refused


	Problematic subdomains:

		- ak.c.ooyala.com	(akamai)
		- player.ooyala.com
			Player JS correctly chooses secure player based on parent document
			protocol, but fails if parent document is HTTP and player is rewritten to
			HTTPS. Therefore, only enabled on mixedcontent platforms. See
			https://github.com/EFForg/https-everywhere/issues/1421 for example of breakage.

		- status.ooyala.com	Mismatched
		- support.ooyala.com	Mismatched


	Mixed content:

		- css on www from fast.fonts.net *
		- Ads on www from www.googleadservices.com *

	* Secured by us

-->
<ruleset name="Ooyala.com (partial)" platform="mixedcontent">

	<target host="ak-c.ooyala.com" />
	<target host="backlot.ooyala.com" />
	<target host="cdn-api.ooyala.com" />
	<target host="extras.ooyala.com" />
	<target host="info.ooyala.com" />
	<target host="l.ooyala.com" />
	<target host="opf.ooyala.com" />
	<target host="player.ooyala.com" />
	<target host="www.ooyala.com" />

	<!--	Complications:
				-->
	<target host="ooyala.com" />
	<target host="c.ooyala.com" />
	<target host="ak.c.ooyala.com" />

		<!--	https://trac.torproject.org/projects/tor/ticket/7615
							-->
		<exclusion pattern="crossdomain\.xml$" />
	<test url="http://www.ooyala.com/crossdomain.xml" />

	<securecookie host="^(?:.*\.)?ooyala\.com$" name=".+" />

	<rule from="^http://(?:ak\.)?c\.ooyala\.com/"
		to="https://ak-c.ooyala.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
