|
1 | 1 | <!-- |
2 | 2 | Other 20min rulesets: |
3 | 3 | - 20min-tv.ch.xml |
4 | | - - 20min.ch-mixedcontent.xml |
5 | 4 | - 20minuti.ch.xml |
6 | 5 |
|
7 | | - Nonfunctional hosts in *.20min.ch: |
8 | | - - 20min.ch (h) |
9 | | - - www.20min.ch (some pages redirect to http; |
10 | | - works with "?httpsredirect" parameter, but has mixed content issues then) |
11 | | - - deal.20min.ch (m) |
12 | | - - m.20min.ch (some pages have mixed content issues) |
13 | | - - secretescapes.20min.ch (e) |
14 | | - - static01.20min.ch (r) |
15 | | - - tilllate.20min.ch (m) |
| 6 | + 20min.ch has both a wildcard DNS record and a wildcard certificate, so enumerating all subdomains is impossible. |
16 | 7 |
|
17 | | - The host has various subdomains as shortlinks to articles. |
18 | | - Those subdomains redirect to http and their www prefixed alias mismatches the cert. |
19 | | -
|
20 | | - e: certificate expired |
21 | | - h: http redirect |
22 | | - m: certificate mismatch |
23 | | - r: connection refused |
24 | | - s: self-signed certificate |
25 | | - t: timeout on https |
26 | | -
|
27 | | - HTTP redirect to 20min.ch on all *.20minuten.ch hosts. |
| 8 | + Mismatched, different cert from rest of domains: |
| 9 | + - secretescapes |
| 10 | + - tilllate |
28 | 11 | --> |
29 | 12 | <ruleset name="20min.ch (partial)"> |
| 13 | + <target host="20min.ch" /> |
30 | 14 | <target host="www.20min.ch" /> |
31 | 15 | <target host="api.20min.ch" /> |
| 16 | + <target host="deal.20min.ch" /> |
32 | 17 | <target host="m.20min.ch" /> |
33 | 18 | <target host="mediadaten.20min.ch" /> |
34 | 19 | <target host="mediakit.20min.ch" /> |
35 | 20 |
|
36 | | - <exclusion pattern="^http://www\.20min\.ch/$" /> |
37 | | - <exclusion pattern="^http://m\.20min\.ch/$" /> |
38 | | - |
39 | | - <test url="http://www.20min.ch/2010/img/navigation/20min_logo.png" /> |
40 | | - <test url="http://m.20min.ch/webapp/img/de/logo.png" /> |
41 | | - <test url="http://www.20min.ch/printpdf/" /> |
42 | | - <test url="http://m.20min.ch/printpdf/" /> |
43 | | - |
44 | | - <rule from="^http://www\.20min\.ch/2010/" to="https://www.20min.ch/2010/" /> |
45 | | - <rule from="^http://m\.20min\.ch/webapp/" to="https://m.20min.ch/webapp/" /> |
46 | | - <rule from="^http://www\.20min\.ch/printpdf/" to="https://www.20min.ch/printpdf/" /> |
47 | | - <rule from="^http://m\.20min\.ch/printpdf/" to="https://m.20min.ch/printpdf/" /> |
| 21 | + <securecookie host=".+" name=".+" /> |
48 | 22 |
|
49 | | - <rule from="^http://(api|mediadaten|mediakit)\.20min\.ch/" |
50 | | - to="https://$1.20min.ch/" /> |
| 23 | + <rule from="^http:" to="https:" /> |
51 | 24 | </ruleset> |
0 commit comments