<!--
	For rules that are on by default, see Microsoft.xml.


	Fully covered hosts in *microsoft.com:

		- adcenter
		- (www.)?update		(^ → www)

-->
<ruleset name="Microsoft.com (untrusted root)" default_off="expired, mismatched, untrusted root">

	<!--	Direct rewrites:
				-->
	<target host="widgets.membership.microsoft.com" />
	<target host="www.update.microsoft.com" />

	<!--	Complications:
				-->
	<target host="update.microsoft.com" />
	<target host="windowsupdate.microsoft.com" />
	<target host="v4.windowsupdate.microsoft.com" />
	<target host="v5.windowsupdate.microsoft.com" />


	<rule from="^http://(?:(?:[45]\.)?windows)?update\.microsoft\.com/"
		to="https://www.update.microsoft.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
