<!--
	For other Salesforce.com coverage, see Salesforce.com.xml.

	For problematic rules, see Pardot-mismatches.xml.


	CDN buckets:

		- s3.amazonaws.com/storage.pardot.com/

		- pi-assets.pardot.netdna-cdn.com

			- -ssl does not exist
			- cdn
			- form-cdn

		- www-cdn.pardot.netdna-cdn.com

			- -ssl does not exist
			- www-cdn
			- www-cdn[1-3]

		- pardot.tenderapp.com

			- developer

		- pardot.uservoice.com

			- ideas


	Problematic subdomains:

		- form-cdn *
		- developer	(works; mismatched, CN: *.tenderapp.com)
		- ideas		(mismatched, CN: *.uservoice.com)
		- www-cdn *
		- www-cdn[1-3] *

	* 404; mismatched, CN: *.netdna-ssl.com


	pi sets a visitor_id\d{4} tracking cookie on whichever domain it is
	loaded from.

-->
<ruleset name="Pardot.com">

	<!--	Direct rewrites:
				-->
	<target host="pardot.com" />
	<target host="blog.pardot.com" />
	<target host="go.pardot.com" />
	<target host="help.pardot.com" />
	<target host="pi.pardot.com" />
	<target host="www.pardot.com" />

	<!--	Complications:
				-->
	<target host="cdn.pardot.com" />
	<target host="form-cdn.pardot.com" />
	<target host="storage.pardot.com" />
	<target host="www-cdn.pardot.com" />
	<target host="www-cdn1.pardot.com" />
	<target host="www-cdn2.pardot.com" />
	<target host="www-cdn3.pardot.com" />


	<!--	Not secured by server:
					-->
	<!--securecookie host="^\.pardot\.com$" name="^(?:visitor_id\d+|__utm\w)$" /-->
	<!--securecookie host="^go\.pardot\.com$" name="^pardot$" /-->

	<!--	Tracking cookies:
					-->
	<securecookie host="^\." name="^(?:visitor_id\d+|__utm\w)$" />
	<securecookie host="^(?:go|pi|www)\.pardot\.com$" name=".+" />


	<rule from="^http://(?:form-)?cdn\.pardot\.com/"
		to="https://pi.pardot.com/" />

	<rule from="^http://storage\.pardot\.com/"
		to="https://s3.amazonaws.com/storage.pardot.com/" />

	<rule from="^http://www-cdn\d?\.pardot\.com/"
		to="https://www.pardot.com/" />

	<rule from="^http:"
		to="https:" />

</ruleset>
