<!--
	For other Microsoft coverage, see Microsoft.xml.


	Nonfunctional domains:

		- in *live.com:

			- explore ¹
			- idsignup ²
			- security ²
			- messenger.services
			- startup

		- www.wlmessenger.net

	¹ 404
	² Refused


	Problematic hosts in *live.com:

		- ^ *
		- sc[34].maps
		- home.services.spaces ²

	* Refused
	² Mismatched


	Fully covered hosts in *live.com:

		- (www.)?	(^ → www)
		- account
		- c
		- c-mid
		- calendar
		- choice

		- consent
		- contacts
		- contacts-df
		- devices
		- directory

		- *.directory:

			- people

		- domains
		- login.domains
		- favorites
		- g
		- groups
		- h
		- client.hip
		- dc[12].client.hip
		- hipservice
		- home
		- hotmail
		- sc.imp
		- odc.officeapps
		- login
		- *.login
		- mail

		- *.mail:	([^.]+.[^.] → \2)

			- m
			- snt\d+
			- sn133w.snt133
			- www

		- in *.maps:

			- mc1
			- sc[12]
			- sc[34]		(→ sc1.maps)

		- messenger

		- *.gateway.messenger:

			- baymsg\d+

		- mid
		- oauth
		- office
		- c2rsetup.officeapps
		- onecare
		- onedrive
		- people
		- people-df
		- photos
		- postmaster
		- profile

		- *.profile:

			- cid-\w+

		- profile-df.live.com
		- profiles
		- rad

		- secure.shared

		- directory.services
		- livecontacts.services
		- geo.messenger.services

		- signout
		- signup
		- skydrive
		- skygfx
		- spaces
		- mobile.spaces
		- status
		- storage

		- *.storage:

			- blufiles
			- byfiles
			- dm1files
			- cid-\w+.users


		- max.sup


	Insecure cookies are set for these domains and hosts:

		- .live.com
		- .h.live.com
		- login.live.com
		- .login.live.com
		- office.live.com
		- .office.live.com
		- postmaster.live.com


	Mixed content:

		- Bug on onedrive from c.microsoft.com *

	* Secured by us

-->
<ruleset name="Live.com">

	<!--	Direct rewrites:
				-->
	<target host="secure.shared.live.com" />
	<target host="account.live.com" />
	<target host="calendar.live.com" />
	<target host="c.live.com" />
	<target host="c-mid.live.com" />
	<target host="choice.live.com" />
	<target host="consent.live.com" />
	<target host="contacts.live.com" />
	<target host="contacts-df.live.com" />
	<target host="devices.live.com" />
	<target host="directory.live.com" />
	<target host="*.directory.live.com" />

	<target host="domains.live.com" />
	<target host="login.domains.live.com" />
	<target host="favorites.live.com" />
	<target host="g.live.com" />
	<target host="groups.live.com" />
	<target host="h.live.com" />

	<target host="client.hip.live.com" />
	<target host="dc1.client.hip.live.com" />
	<target host="dc2.client.hip.live.com" />

	<target host="hipservice.live.com" />
	<target host="home.live.com" />
	<target host="hotmail.live.com" />
	<target host="sc.imp.live.com" />
	<target host="login.live.com" />
	<target host="*.login.live.com" />
	<target host="mail.live.com" />

	<!--	Target host is * because Live URLs can contain multiple unpredictable
		components, like http://snXXXw.sntXXX.mail.live.com/default.aspx
				-->
	<target host="*.mail.live.com" />

	<target host="mc1.maps.live.com" />
	<target host="sc1.maps.live.com" />
	<target host="sc2.maps.live.com" />

	<target host="messenger.live.com" />
	<target host="*.gateway.messenger.live.com" />
	<target host="mid.live.com" />
	<target host="oauth.live.com" />
	<target host="office.live.com" />
	<target host="c2rsetup.officeapps.live.com" />
	<target host="odc.officeapps.live.com" />
	<target host="onecare.live.com" />
	<target host="onedrive.live.com" />
	<target host="people.live.com" />
	<target host="people-df.live.com" />
	<target host="photos.live.com" />
	<target host="postmaster.live.com" />
	<target host="profile.live.com" />
	<target host="*.profile.live.com" />
	<target host="profile-df.live.com" />
	<target host="profiles.live.com" />
	<target host="rad.live.com" />

	<target host="directory.services.live.com" />
	<target host="livecontacts.services.live.com" />
	<target host="geo.messenger.services.live.com" />

	<target host="signout.live.com" />
	<target host="signup.live.com" />
	<target host="skydrive.live.com" />
	<target host="skygfx.live.com" />
	<target host="spaces.live.com" />
	<target host="mobile.spaces.live.com" />
	<target host="status.live.com" />

	<target host="*.storage.live.com" />
	<target host="max.sup.live.com" />
	<target host="www.live.com" />

	<!--	Complications:
				-->
	<target host="live.com" />
	<target host="sc3.maps.live.com" />
	<target host="sc4.maps.live.com" />

		<test url="http://sn133w.snt133.mail.live.com/default.aspx" />
		<test url="http://sn133w.snt133.mail.live.com/default.aspx?wa=" />
		<test url="http://sn133w.snt133.mail.live.com/default.aspx?wa=wsignin1.0" />
		<test url="http://secure.shared.live.com/" />


	<!--	Not secured by server:
					-->

	<!--securecookie host="^\.live\.com$" name="^(E|LD|MUID|RVC|wla\d+|xidseq)$" /-->
	<!--securecookie host="^\.h\.live\.com$" name="^SM$" /-->
	<!--securecookie host="^login\.live\.com$" name="^MSPRequ$" /-->
	<!--securecookie host="^\.login\.live\.com$" name="^MSPOK$" /-->
	<!--securecookie host="^office\.live\.com$" name="^BIGipCookie$" /-->
	<!--securecookie host="^\.office\.live\.com$" name="^AM3-ARRAffinity" /-->
	<!--securecookie host="^postmaster\.live\.com$" name="^ASP\.NET_SessionId$" /-->

	<!--	NB: Are cross-domain cookies needed on unsecurable pages?

	<securecookie host="^\.live\.com$" name=".+" /-->
	<securecookie host="^\.?(?:account|consent|people\.directory|(?:login\.)?domains|login|mail|messenger|postmaster|profile|signup)\.live\.com$" name=".+" />


	<rule from="^http://live\.com/"
		to="https://www.live.com/" />

	<!--	Example:
			http://sn133w.snt133.mail.live.com/default.aspx?wa=wsignin1.0 >>>
			https://snt133.mail.live.com/default.aspx?wa=wsignin1.0
							-->
	<rule from="^http://[^@:/.]+\.([^@:/.]+)\.mail\.live\.com/"
		to="https://$1.mail.live.com/" />

	<rule from="^http://sc[34]\.maps\.live\.com/"
		to="https://sc1.maps.live.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
