<!--
	For other U.S. government coverage, see US-government.xml.


	Insecure cookies are set for these hosts:

		- billing.healthcare.gov
		- localhelp.healthcare.gov
		- www.healthcare.gov


	Mixed content:

		- css on billing from fonts.googleapis.com ˢ

	ˢ Secured by us

-->
<ruleset name="Healthcare.gov">
    <target host="healthcare.gov" />
    <target host="*.healthcare.gov" />

		<test url="http://billing.healthcare.gov/" />
		<test url="http://localhelp.healthcare.gov/" />
		<test url="http://www.healthcare.gov/" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^(?:billing\.|www\.)?healthcare\.gov$" name="^akavpau_vp1$" /-->

	<securecookie host="." name="." />


	<rule from="^http:"
		to="https:" />

</ruleset>
