<!--
	For other Amazon coverage, see Amazon.xml.


	Insecure cookies are set for these domains: ᶜ

		- .amazon.ca

	ᶜ See https://owasp.org/index.php/SecureFlag

-->
<ruleset name="Amazon.ca">

	<target host="amazon.ca" />
	<target host="advertising.amazon.ca" />
	<target host="associates.amazon.ca" />
	<target host="astore.amazon.ca" />
	<target host="fls-na.amazon.ca" />
	<target host="rcm-ca.amazon.ca" />
	<target host="read.amazon.ca" />
	<target host="sellercentral.amazon.ca" />
	<target host="widgets.amazon.ca" />
	<target host="ws.amazon.ca" />
	<target host="www.amazon.ca" />


		<!--	Amazon has a history of breaking us soon after
			adding rulesets, so these are here to detect that.
									-->
		<test url="http://www.amazon.ca/Karcher-9-558-998-0-Pump-Guard/dp/B000EPS22Y/" />
		<test url="http://www.amazon.ca/b?node=7351934011" />
		<test url="http://www.amazon.ca/e/toy-list" />
		<test url="http://www.amazon.ca/forum/-/Tx3LD22UT4QGQ1S/?asin=B00J7YQZL8" />
		<test url="http://www.amazon.ca/gp/product/B008FV5R18/" />
		<test url="http://www.amazon.ca/review/top-reviewers" />
		<test url="http://www.amazon.ca/s?me=A2BXPJGYXBXLMX" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.amazon\.ca$" name="^(?:session-id|session-id-time|ubid-acbca|x-wl-uid)$" /-->

	<securecookie host="." name="^aps-trtmnt$" />
	<securecookie host="^\w" name="." />


	<rule from="^http:"
		to="https:" />

</ruleset>
