<rulesetlibrary>
<ruleset name="123-Reg">
  <target host="www.123-reg.co.uk" />
  <target host="123-reg.co.uk" />

  <rule from="^http://(www\.)?123-reg\.co\.uk/" to="https://www.123-reg.co.uk/"/>
</ruleset>
<ruleset name="1NightStandStory">
  <target host="1nightstandstory.com" />
  <target host="www.1nightstandstory.com" />

  <rule from="^http://(www\.)?1nightstandstory\.com/" to="https://www.1nightstandstory.com/"/>
</ruleset>
<!-- if we are going to include ads and tracking info, lets atleast do it by https.-->
<ruleset name="2o7.net">
	<target host="2o7.net" />
	<target host="*.2o7.net" />
	<target host="*.112.2o7.net" />
	<target host="*.122.2o7.net" />
	<rule from="^http://2o7\.net/" to="https://2o7.net/"/>
  <rule from="^http://([^/:@]*)\.2o7\.net/" to="https://$1.2o7.net/"/>
  <rule from="^http://([^/:@]*)\.112\.2o7\.net/" to="https://$1.112.2o7.net/"/>
  <rule from="^http://([^/:@]*)\.122\.2o7\.net/" to="https://$1.122.2o7.net/"/>
</ruleset>

<ruleset name="33Bits" default_off="Cert warning">
  <target host="www.33bits.org" />
  <target host="33bits.org" />

  <rule from="^http://(www\.)?33bits\.org/" to="https://www.33bits.org/"/>
</ruleset>
<ruleset name="38.de">
  <target host="www.38.de" />
  <target host="38.de" />

  <rule from="^http://(www\.)?38\.de/" to="https://www.38.de/"/>
</ruleset>
<ruleset name="3min">
  <target host="3min.de"/>
  <target host="*.3min.de"/>
  <target host="www.3min.de"/>

  <securecookie host="^(.*\.)?3min\.de$" name=".*" />

  <rule from="^http://(www\.)?3min\.de/" to="https://www.3min.de/"/>
</ruleset>
<ruleset name="4sevens">
  <target host="www.4sevens.com" />
  <target host="4sevens.com" />

  <rule from="^http://(www\.)?4sevens\.com/" to="https://www.4sevens.com/"/>
</ruleset>
<ruleset name="7chan">
  <target host="7chan.org" />
  <target host="www.7chan.org" />

  <rule from="^http://(www\.)?7chan\.org/" to="https://7chan.org/"/>
</ruleset>
<ruleset name="99.se">
	<target host="99.se" />
	<target host="www.99.se" />
	<rule from="^http://99\.se/" to="https://www.99.se/"/>
	<rule from="^http://www\.99\.se/" to="https://www.99.se/"/>
</ruleset>

<!-- slashdot stores most of their stuff here -->
<ruleset name="FSDN.com">
	<target host="a.fsdn.com" />
	<rule from="^http://a\.fsdn\.com/" to="https://a.fsdn.com/"/>
</ruleset>

<ruleset name="American Airlines">
  <target host="www.aa.com" />
  <target host="aa.com" />

  <rule from="^http://(www\.)?aa\.com/" to="https://www.aa.com/"/>
</ruleset>
<ruleset name="ABIS-Studien.se">
	<target host="abis-studien.se" />
	<target host="www.abis-studien.se" />
	<rule from="^http://www\.abis-studien\.se/" to="https://www.abis-studien.se/"/>
	<rule from="^http://abis-studien\.se/" to="https://abis-studien.se/"/>
</ruleset>

<ruleset name="ABN AMRO Bank">
  <!-- Rule created by Jeroen van der Gun -->

  <target host="www.abnamro.nl" />
  <target host="abnamro.nl" />

  <rule from="^http://(www\.)?abnamro\.nl/" to="https://www.abnamro.nl/"/>
</ruleset>
<ruleset name="ACLU of North Carolina">
	<target host="acluofnorthcarolina.org" />
	<target host="www.acluofnorthcarolina.org" />
	<target host="acluofnc.org" />
	<target host="www.acluofnc.org" />

	<rule from="^http://(www\.)?aclu(ofnc|ofnorthcarolina)\.org/" to="https://www.acluofnorthcarolina.org/" />
</ruleset>
<ruleset name="ACLU of Southern California">
	<target host="aclu-sc.org" />
	<target host="www.aclu-sc.org" />

	<rule from="^http://(www\.)?aclu-sc\.org/" to="https://www.aclu-sc.org/" />
</ruleset><!-- acm.org lacks proper ssl for the following domains
http://plone.acm.org
http://portalparts.acm.org.
http://jobs.acm.org <- sends to jobtarget.com
http://awards.acm.org <- stacktrace for coldfusion
http://librarians.acm.org/ 
http://mags.acm.org/ 
-->
<ruleset name="ACM.org">
	<target host="campus.acm.org" />
	<target host="portal.acm.org" />
	<target host="techpack.acm.org" />
	<target host="acm.org" />
	<target host="www.acm.org" />
	<rule from="^http://campus\.acm\.org/" to="https://campus.acm.org/"/>
	<rule from="^http://portal\.acm\.org/" to="https://portal.acm.org/"/>
	<rule from="^http://techpack\.acm\.org/" to="https://techpack.acm.org/"/>
	<rule from="^http://acm\.org/" to="https://www.acm.org/"/>
	<rule from="^http://www\.acm\.org/" to="https://www.acm.org/"/>
</ruleset>

<ruleset name="AJC.com">
	<target host="ajc.com" />
	<target host="www.ajc.com" />
	<rule from="^http://ajc\.com/" to="https://www.ajc.com/"/>
	<rule from="^http://www\.ajc\.com/" to="https://www.ajc.com/"/>
</ruleset>

<ruleset name="AK-Vorrat">
  <target host="vorratsdatenspeicherung.de" />
  <target host="www.vorratsdatenspeicherung.de" />

  <rule from="^http://(www\.)?vorratsdatenspeicherung\.de/" to="https://www.vorratsdatenspeicherung.de/" />
  <rule from="^http://wiki\.vorratsdatenspeicherung\.de/" to="https://wiki.vorratsdatenspeicherung.de/" />
</ruleset>
<ruleset name="Aldi - Germany">
<!-- Hosts: Southern Aldi Germany -->
  <target host="www.aldisued.de" />
  <target host="www.aldi-sued.de" />

<!-- Hosts: Northern Aldi Germany -->
  <target host="www.aldi-nord.de" />
  <target host="www.aldinord.de" />

<!-- Rules: Southern Aldi Germany -->
  <rule from="^http(s)?://(www\.)?\aldisued\.de/" to="https://www.aldi-sued.de/" />
  <rule from="^http://(www\.)?\aldi-sued\.de/" to="https://www.aldi-sued.de/" />

<!-- Rules: Northern Aldi Germany -->
  <rule from="^http://(www\.)?\aldi-nord\.de/" to="https://www.aldi-nord.de/" />
  <rule from="^http(s)?://(www\.)?\aldinord\.de/" to="https://www.aldi-nord.de/" />

</ruleset>
<ruleset name="ANZ">
  <target host="anz.com" />
  <target host="www.anz.com" />

  <securecookie host="^(.+\.)?anz\.com$" name=".*"/>

  <rule from="^http://(www\.)?anz\.com/" to="https://www.anz.com/"/>
</ruleset>
<ruleset name="AOK">
<target host="www.aok.de" />
<target host="aok.de" />
<rule from="^http://(www\.)?aok\.de/" to="https://www.aok.de/"/>
</ruleset>
<ruleset name="ATBank">
  <!-- Rule created by Jeroen van der Gun -->

  <target host="www.atbank.nl" />
  <target host="atbank.nl" />

  <rule from="^http://(www\.)?atbank\.nl/" to="https://www.atbank.nl/"/>
</ruleset>
<ruleset name="Abbo-shop.ch">
        <target host="abbo-shop.ch" />
        <target host="www.abbo-shop.ch" />
        <securecookie host="^(.*\.)?abbo-shop\.ch$" name=".*" />

        <rule from="^http://(www\.)?abbo-shop\.ch/" to="https://www.abbo-shop.ch/"/>
</ruleset>

<ruleset name="AbeBooks">
  <target host="abebooks.co.uk" />
  <target host="www.abebooks.co.uk" />
  <target host="abebooks.com" />
  <target host="www.abebooks.com" />

  <rule from="^http://(www\.)?abebooks\.co\.uk/" to="https://www.abebooks.co.uk/" />
  <rule from="^http://(www\.)?abebooks\.com/" to="https://www.abebooks.com/" />
</ruleset>
<ruleset name="AboutMe (broken)" default_off="Reported broken">
  <target host="about.me"/>
  <target host="www.about.me"/>

  <securecookie host="^(.*\.)?about.me$" name=".*" />

  <rule from="^http://(www\.)?about\.me/" to="https://www.about.me/"/>
</ruleset>
<ruleset name="AccessNow.org">
  <target host="accessnow.org" />
  <target host="www.accessnow.org" />

  <rule from="^http://(www\.)?accessnow\.org/" to="https://www.accessnow.org/" />
</ruleset>
<ruleset name="Accessibility.nl">
  <!-- Rule created by Jeroen van der Gun -->

  <target host="www.accessibility.nl" />
  <target host="accessibility.nl" />

  <rule from="^http://(www\.)?accessibility\.nl/" to="https://www.accessibility.nl/"/>
</ruleset>
<ruleset name="AdaFruit">
  <target host="www.adafruit.com" />
  <target host="adafruit.com" />

  <rule from="^http://(www\.)?adafruit\.com/" to="https://www.adafruit.com/"/>
</ruleset>
<ruleset name="AdblockPlus">
  <target host="adblockplus.org"/>
  <target host="*.adblockplus.org"/>

  <securecookie host="^(.*\.)?adblockplus\.org$" name=".*" />

  <rule from="^http://(www\.)?adblockplus\.org/"
	  to="https://adblockplus.org/"/>
  <rule from="^http://(easylist|easylist-downloads|hg)\.adblockplus\.org/"
	  to="https://$1.adblockplus.org/"/>
</ruleset>
<ruleset name="Adbrite">
    <target host="www.adbrite.com" />
    <target host="adbrite.com" />

    <rule from="^http://([^/:@]*)\.adbrite\.com/" to="https://$1.adbrite.com/"/>
</ruleset>
<ruleset name="AddBooks.se">
  <target host="www.addbooks.se" />
  <target host="addbooks.se" />
  <rule from="^http://www\.addbooks\.se/" to="https://www.addbooks.se/"/>
  <rule from="^http://addbooks\.se/" to="https://addbooks.se/"/>
</ruleset>

<ruleset name="AddThis">
  <target host="*.addthis.com" />
  <target host="addthis.com" />

  <rule from="^http://(www\.)?addthis\.com/bookmark\.php"
	  to="https://www.addthis.com/bookmark.php"/>
  <rule from="^http://api\.addthis\.com/"
	  to="https://api.addthis.com/"/>
  <rule from="^http://s(3|5|7|9)\.addthis\.com/"
	  to="https://s$1.addthis.com/"/>
  <rule from="^http://ds\.addthis\.com/"
	  to="https://ds.addthis.com/" />
  <rule from="^http://cache\.addthis\.com/"
	  to="https://cache.addthis.com/" />
</ruleset>
<ruleset name="AddToAny">
  <target host="static.addtoany.com" />

  <rule from="^http://static\.addtoany\.com/"
          to="https://static.addtoany.com/"/>
</ruleset><ruleset name="Adlibris/Capris">
  <target host="www.adlibris.com" />
  <target host="adlibris.com" />
  <target host="www.capris.no" />
  <target host="capris.no" />

  <rule from="^http://(www\.)?(adlibris\.com|capris\.no)/"
          to="https://www.$2/"/>
</ruleset>
<ruleset name="Adobe">
  <target host="www.adobe.com" />
  <target host="adobe.com" />

  <rule from="^http://(www\.)?adobe\.com/" to="https://www.adobe.com/"/>
</ruleset>
<ruleset name="Adoyacademy.se">
  <target host="www.adoyacademy.se" />
  <target host="adoyacademy.se" />
  <rule from="^http://www\.adoyacademy\.se/" to="https://adoyacademy.se/"/>
  <rule from="^http://adoyacademy\.se/" to="https://adoyacademy.se/"/>
</ruleset>

<!-- banner network. -->
<ruleset name="Adtech.de">
	<target host="adserver.adtech.de" />
	<rule from="^http://adserver\.adtech\.de/" to="https://adserver.adtech.de/"/>
</ruleset>

<ruleset name="Adversary" default_off="self-signed">
  <target host="www.adversary.org" />
  <target host="adversary.org" />

  <rule from="^http://(www\.)?adversary\.org/" to="https://www.adversary.org/" />
</ruleset>
<ruleset name="Aea.se">
  <target host="www.aea.se" />
  <target host="aea.se" />
  <rule from="^http://www\.aea\.se/" to="https://www.aea.se/"/>
  <rule from="^http://aea\.se/" to="https://aea.se/"/>
</ruleset>

<ruleset name="Aeriagames">
<target host="www.aeriagames.com" />
<target host="aeriagames.com" />
<rule from="^http://(www\.)?aeriagames\.com/" to="https://www.aeriagames.com/"/>
</ruleset>
<ruleset name="FreeDNS.Afraid.org">
	<target host="freedns.afraid.org" />
	<rule from="^http://freedns\.afraid\.org/"
		to="https://freedns.afraid.org/" />
</ruleset>
<ruleset name="Aftenposten">
        <target host="www.aftenposten.no" />
        <target host="aftenposten.no" />

	<rule from="^http://(www\.)?aftenposten\.no/" to="https://www.aftenposten.no/"/>

	<!-- The following rules will generate SSL warnings by default because
	the cert is only valid for www.aftenposten.no -->
	<!--
	<rule from="^http://lisacache\.aftenposten\.no/" to="https://lisacache.aftenposten.no/"/>
	<rule from="^http://media\.aftenposten\.no/" to="https://media.aftenposten.no/"/>
	<rule from="^http://oslopuls\.aftenposten\.no/" to="https://oslopuls.aftenposten.no/"/>
	-->
</ruleset>
<!-- Av vendor. -->
<ruleset name="Agnitum">
	<target host="agnitum.com" />
	<target host="www.agnitum.com" />
	<rule from="^http://www\.agnitum\.com/" to="https://www.agnitum.com/"/>
	<rule from="^http://agnitum\.com/" to="https://www.agnitum.com/"/>
</ruleset>

<!-- av vendor -->
<ruleset name="Ahnlab">
	<target host="image.ahnlab.com" />
	<target host="global.ahnlab.com" />
	<rule from="^http://global\.ahnlab\.com/" to="https://global.ahnlab.com/"/>
	<rule from="^http://image\.ahnlab\.com/" to="https://image.ahnlab.com/"/>
</ruleset>

<ruleset name="AirshipVentures">
  <target host="www.airshipventures.com" />
  <target host="airshipventures.com" />

  <rule from="^http://(www\.)?airshipventures\.com/" to="https://www.airshipventures.com/" />
</ruleset>
<ruleset name="Airtricity">
  <target host="www.airtricity.com" />
  <target host="airtricity.com" />
  <target host="*.airtricity.com" />

  <rule from="^http://airtricity\.com/" to="https://www.airtricity.com/"/>
  <rule from="^http://([^/:@]*)\.airtricity\.com/" to="https://$1.airtricity.com/"/>
</ruleset>
<ruleset name="Akismet">
  <target host="akismet.com" />
  <target host="www.akismet.com" />

  <rule from="^http://(www\.)akismet\.com/" to="https://akismet.com/" />
</ruleset>
<ruleset name="Alex.se">
  <target host="www.alex.se" />
  <target host="alex.se" />
  <rule from="^http://www\.alex\.se/" to="https://www.alex.se/"/>
  <rule from="^http://alex\.se/" to="https://alex.se/"/>
</ruleset>

<ruleset name="AliceDSL">
  <target host="alice.de"/>
  <target host="*.alice.de"/>
  <target host="alice-dsl.de"/>
  <target host="*.alice-dsl.de"/>
  <target host="www.alice-dsl.de"/>

  <securecookie host="^(.*\.)?alice-dsl\.de$" name=".*" />

  <rule from="^http://(www\.)?alice\.de/" to="https://www.alice-dsl.de/"/>
  <rule from="^http://alice\.de/" to="https://www.alice-dsl.de/"/>
  <rule from="^http://alice-dsl\.de/" to="https://www.alice-dsl.de/"/>
  <rule from="^http://(www\.)?alice-dsl\.de/" to="https://www.alice-dsl.de/"/>
</ruleset>
<ruleset name="All-inkl.com">
  <target host="*.all-inkl.com" />
  <target host="all-inkl.*" />
  <target host="www.all-inkl.*" />

  <rule from="^http://all-inkl\.com/" to="https://all-inkl.com/" />
  <rule from="^http://([^/:@]*)\.all-inkl\.com/" to="https://$1.all-inkl.com/" />
  <rule from="^http://(www\.)?all-inkl\.[^/:@][^/:@]/" to="https://all-inkl.com/" />
</ruleset>
<!-- NOTE: A user reports that this rule doesn't work and breaks the
     site. -->

<ruleset name="Allegro" default_off="reported broken">
  <target host="www.allegro.pl" />
  <target host="allegro.pl" />

  <rule from="^http://(www\.)?allegro\.pl/" to="https://ssl.allegro.pl/"/>
</ruleset>
<ruleset name="Allingsas.se">
  <target host="www.allingsas.se" />
  <target host="allingsas.se" />
  <rule from="^http://www\.allingsas\.se/" to="https://www.allingsas.se/"/>
  <rule from="^http://allingsas\.se/" to="https://allingsas.se/"/>
</ruleset>

<ruleset name="AltonTowers">
  <target host="altontowers.com" />
  <target host="www.altontowers.com" />
  
  <securecookie host="^(.+\.)?altontowers\.com$" name=".*"/>
  
  <rule from="^http://(www\.)?altontowers\.com/" to="https://www.altontowers.com/"/>
</ruleset>
<ruleset name="Amahi.org">
  <target host="www.amahi.org" />
  <target host="wiki.amahi.org" />
  <target host="amahi.org" />
  <rule from="^http://www\.amahi\.org/" to="https://www.amahi.org/"/>
  <rule from="^http://wiki\.amahi\.org/" to="https://wiki.amahi.org/"/>
  <rule from="^http://amahi\.org/" to="https://amahi.org/"/>
</ruleset>

<!-- This rule is off by default because it causes so many aspects of the
     Amazon site to break; see the mailing list archives for details -->

<ruleset name="Amazon (buggy)" default_off="currently somewhat broken">
   <target host="www.amazon.*" />
   <target host="amazon.*" />
   <target host="www.amazon.co.*" />
   <target host="amazon.co.*" />
   <target host="*.amazon.com" />
   <target host="amazon.com" />

<!-- Amazon appears to operate in 7 countries, and does not hold the domains
     for some others, like .se or .be.  In other cases there is an http-only site
     that redirects to one of these 7 countries.  -->

  <!-- We totally need to figure out if we can have a blanket redirect
  for Amazon Web Services, which are a very popular CDN that appears
  to support HTTPS!  The aws.amazon.com rule below does not do this
  because it only applies to the developer signup page. -->

  <rule from="^http://(www\.)?amazon\.com/" to="https://www.amazon.com/" />

  <rule from="^http://(www\.)?amazon\.co\.(uk|jp)/"
          to="https://www.amazon.co.$2/" />

  <rule from="^http://(www\.)?amazon\.(ca|cn|de|fr)/"
          to="https://www.amazon.$2/" />

  <rule from="^http://aws\.amazon\.com/"
          to="https://aws.amazon.com/" />

</ruleset>
<ruleset name="Amazon Web Services">
  <target host="aws.amazon.com" />
  <target host="aws-portal.amazon.com" />
  <target host="*.s3.amazonaws.com" />
  <target host="s3.amazonaws.com" />

  <rule from="^http://aws\.amazon\.com/" to="https://aws.amazon.com/" />
  <rule from="^http://aws-portal\.amazon\.com/" to="https://aws-portal.amazon.com/" />
  <rule from="^http://([^@:\./]+\.)?s3\.amazonaws\.com/" to="https://$1s3.amazonaws.com/" />
</ruleset>
<ruleset name="American Epilepsy Society (partial)">
	<target host="aesnet.org" />
	<target host="www.aesnet.org" />

	<rule from="^http://(www\.)?aesnet\.org/erc/" to="https://www.aesnet.org/erc/" />
</ruleset><!-- Thanks to ForceTLS -->
<!-- Note that there are lots of subdomains and some are still unprotected,
     but some don't work properly in HTTPS anyway.  This is kind of a mess. -->
<ruleset name="AmericanExpress">
  <target host="www.americanexpress.com" />
  <target host="americanexpress.com" />
  <target host="home.americanexpress.com" />

  <rule from="^http://(www\.)?americanexpress\.com/" to="https://www.americanexpress.com/"/>
  <rule from="^http://home\.americanexpress\.com/" to="https://home.americanexpress.com/"/>
</ruleset>
<ruleset name="Americana Exchange">
  <target host="americanaexchange.com" />
  <target host="www.americanaexchange.com" />

  <rule from="^http://(www\.)?americanaexchange\.com/" to="https://www.americanaexchange.com/" />
</ruleset><ruleset name="Amnesty-International">
  <target host="www.amnesty.org" />
  <target host="amnesty.org" />

  <rule from="^http://(www\.)?amnesty\.org/" to="https://www.amnesty.org/"/>
</ruleset>
<ruleset name="An Post">
  <target host="www.anpost.ie" />
  <target host="anpost.ie" />

  <rule from="^http://(www\.)?anpost\.ie/" to="https://www.anpost.ie/"/>
</ruleset>
 <!-- Partial -->
<ruleset name="Android">
  <target host="market.android.com" />

  <securecookie host="^market\.android\.com$" name=".*" />

  <rule from="^http://market\.android\.com/" to="https://market.android.com/"/>

</ruleset>
<ruleset name="Ansa.it">
  <target host="www.ansa.it" />
  <target host="ansa.it" />

  <rule from="^http://(www\.)?ansa\.it/" to="https://www.ansa.it/"/>
</ruleset>

<ruleset name="AntiSpam e.V.">
  <target host="antispam.de" />
  <target host="www.antispam.de" />  
  
  <rule from="^http://(www\.)?antispam\.de/" to="https://www.antispam.de/"/>
</ruleset>
<ruleset name="Apache">
  <target host="apache.org" />
  <target host="*.apache.org" />

  <securecookie host="^(.+\.)?apache\.org$" name=".*"/>

  <rule from="^http://(www\.)?apache\.org/" to="https://www.apache.org/"/>
  <rule from="^http://([^/:@]+)?\.apache\.org/" to="https://$1.apache.org/"/>
</ruleset>
<!-- pharmacy. medical info should be private -->
<ruleset name="Apoteket.se">
	<target host="apoteket.se" />
	<target host="www.apoteket.se" />
	<rule from="^http://apoteket\.se/" to="https://www.apoteket.se/"/>
	<rule from="^http://www\.apoteket\.se/" to="https://www.apoteket.se/"/>
</ruleset>

<ruleset name="Apple.com (partial)">
  <target host="www.apple.com" />
  <target host="apple.com" />
  <target host="developer.apple.com" />
  <target host="connect.apple.com" />
  <target host="images.apple.com" />
  <target host="jobs.apple.com" />
  <target host="support.apple.com" />

  <rule from="^http://(www\.)?apple\.com/" to="https://www.apple.com/"/>
  <rule from="^http://developer\.apple\.com/" to="https://developer.apple.com/"/>
  <rule from="^http://connect\.apple\.com/" to="https://connect.apple.com/"/>
  <rule from="^http://images\.apple\.com/" to="https://ssl.apple.com/"/>
  <rule from="^http://jobs\.apple\.com/" to="https://jobs.apple.com/"/>
  <rule from="^http://support\.apple\.com/" to="https://support.apple.com/"/>
</ruleset>
<ruleset name="Arbeitsagentur.de">
  <target host="arbeitsagentur.de" />
  <target host="www.arbeitsagentur.de" />
  <target host="jobboerse.arbeitsagentur.de" />

  <rule from="^http://(www\.)?arbeitsagentur\.de/" to="https://www.arbeitsagentur.de/"/>
  <rule from="^http://jobboerse\.arbeitsagentur\.de/" to="https://jobboerse.arbeitsagentur.de/"/>
</ruleset>
<ruleset name="Arch Linux">
  <target host="archlinux.org" />
  <target host="*.archlinux.org" />

  <rule from="^http://archlinux\.org/" to="https://www.archlinux.org/"/>
  <rule from="^http://([^/:@]*)\.archlinux\.org/" to="https://$1.archlinux.org/"/>
</ruleset><ruleset name="Argos">
  <target host="www.argos.co.uk" />
  <target host="argos.co.uk" />

  <rule from="^http://(www\.)?argos\.co\.uk/" to="https://www.argos.co.uk/"/>
</ruleset>
<!-- swedish airport webpage -->
<ruleset name="Arlanda.se">
	<target host="arlanda.se" />
	<target host="www.arlanda.se" />
	<rule from="^http://arlanda\.se/" to="https://www.arlanda.se/"/>
	<rule from="^http://www\.arlanda\.se/" to="https://www.arlanda.se/"/>
</ruleset>

<ruleset name="Assembla">
	<target host="www.assembla.com" />
	<target host="assembla.com" />
	<target host="svn2.assembla.com" />
	<target host="trac2.assembla.com" />

	<rule from="^http://(www\.)?assembla\.com/" to="https://www.assembla.com/"/>
	<rule from="^http://svn2\.assembla\.com/" to="https://svn2.assembla.com/"/>
	<rule from="^http://trac2\.assembla\.com/" to="https://trac2.assembla.com/"/>
</ruleset><!-- uses data from i.acdn.us that doesnt allow https. -->
<ruleset name="associatedcontent.com">
	<target host="associatedcontent.com" />
	<rule from="^http://associatedcontent\.com/" to="https://www.associatedcontent.com/"/>
	<rule from="^http://www\.associatedcontent\.com/" to="https://www.associatedcontent.com/"/>
</ruleset>

<ruleset name="Asterisk">
  <target host="www.asterisk.org" />
  <target host="asterisk.org" />

  <rule from="^http://(www\.)?asterisk\.org/" to="https://www.asterisk.org/"/>
</ruleset>
<ruleset name="atdmt.com">
	<target host="switch.atdmt.com" />
	<target host="clk.atdmt.com" />

<!-- view.atdmt.com removed because it encrypts microsoft download page eg. http://view.atdmt.com/action/windows_downloads_Upgrade_CTA?href=http://www.microsoft.com/downloads/en/details.aspx?FamilyID=1b544e90-7659-4bd9-9e51-2497c146af15&displaylang=en -->

	<rule from="^http://(switch|clk)\.atdmt\.com/" to="https://$1.atdmt.com/" />
</ruleset>
<ruleset name="Atlassian">
  <target host="atlassian.com" />
  <target host="*.atlassian.com" />

  <securecookie host="^(.*\.)?atlassian.com$" name=".*" />

  <rule from="^http://(www\.)?atlassian\.com/" to="https://www.atlassian.com/"/>

  <rule from="^http://(blogs|plugins|confluence)\.atlassian\.com/" to="https://$1.atlassian.com/"/>

</ruleset>
<ruleset name="Audible.de">
  <target host="audible.de"/>
  <target host="*.audible.de"/>

  <securecookie host="^(.*\.)?audible\.de$" name=".*" />

  <rule from="^http://(www\.)?audible\.de/" to="https://www.audible.de/"/>
  <rule from="^http://audible\.de/" to="https://www.audible.de/"/>
</ruleset>
<ruleset name="Australian Koala Foundation">
	<target host="savethekoala.com" />
	<target host="www.savethekoala.com" />

	<rule from="^http://(www\.)?savethekoala\.com/" to="https://www.savethekoala.com/" />
</ruleset><ruleset name="Authorize.Net">
	<target host="authorize.net" />
	<target host="www.authorize.net" />
	<target host="developer.authorize.net" />
	<target host="community.developer.authorize.net" />
	<target host="verify.authorize.net" />
	<target host="authorizenet.com" />
	<target host="www.authorizenet.com" />

	<!-- The fuzeqna.com domain is included to avoid possible
	issues with mixed content. Also, from what one remembers,
	using the Authorize.Net site may involve accessing the
	fuzeqna.com/www.fuzeqna.com domains . -->
	<target host="fuzeqna.com" />
	<target host="www.fuzeqna.com" />

	<rule from="^http://(developer|community\.developer|verify|www)\.authorize\.net/" to="https://$1.authorize.net/" />
	<rule from="^http://authorize\.net/" to="https://www.authorize.net/" />
	<rule from="^https?://(www\.)?authorizenet\.com/" to="https://www.authorize.net/" />
	
	<rule from="^http://(www\.)?fuzeqna\.com/" to="https://www.fuzeqna.com/" />
</ruleset><ruleset name="Autistici/inventati" default_off="self-signed">
  <target host="*.autistici.org" />
  <target host="*.inventati.org" />
  <target host="*.noblogs.org" />

  <rule from="^http://([^/:@]*)\.autistici\.org/" to="https://$1.autistici.org/"/>
  <rule from="^http://([^/:@]*)\.inventati\.org/" to="https://$1.inventati.org/"/>
  <exclusion pattern="^http://stats\.noblogs\.org/"/>
  <rule from="^http://([^/:@]*)\.noblogs\.org/" to="https://$1.noblogs.org/"/>
</ruleset>
<!-- already enforces SSL. adding to prevent ssl strip attacks -->
<ruleset name="Avanza.se">
  <target host="www.Avanza.se" />
  <target host="Avanza.se" />
  <rule from="^http://www\.avanza\.se/" to="https://www.avanza.se/"/>
  <rule from="^http://avanza\.se/" to="https://www.avanza.se/"/>
</ruleset>

<!-- Av vendor. Static.avast.com lacks https. -->
<ruleset name="Avast">
  <!-- Avast as started reditecting HTTPS to HTTP on its main site :(
       https://trac.torproject.org/projects/tor/ticket/3779 -->

	<!--
  <target host="avast.com" />
	<target host="www.avast.com" />
  -->
	<target host="forum.avast.com" />
	<target host="support.avast.com" />
	<!--
  <rule from="^http://www\.avast\.com/" to="https://www.avast.com/"/>
	<rule from="^http://avast\.com/" to="https://www.avast.com/"/>
  -->
	<rule from="^http://(forum|support)\.avast\.com/" to="https://$1.avast.com/"/>
</ruleset>

<ruleset name="Avira">
  <target host="www.avira.com" />
  <target host="avira.com" />
  <target host="forum.avira.com" />
  <target host="license.avira.com" />
  <target host="analysis.avira.com" />
  <target host="myaccount.avira.com" />
  <target host="partnernet.avira.com" />

  <rule from="^http://(www\.)?avira\.com/" to="https://www.avira.com/"/>
  <rule from="^http://(www\.)?forum\.avira\.com/" to="https://forum.avira.com/"/>
  <rule from="^http://(www\.)?license\.avira\.com/" to="https://license.avira.com/"/>
  <rule from="^http://(www\.)?analysis\.avira\.com/" to="https://analysis.avira.com/"/>
  <rule from="^http://(www\.)?myaccount\.avira\.com/" to="https://myaccount.avira.com/"/>
  <rule from="^http://(www\.)?partnernet\.avira\.com/" to="https://partnernet.avira.com/"/>
</ruleset>
<ruleset name="Avropa.se">
  <target host="www.avropa.se" />
  <target host="avropa.se" />
  <rule from="^http://www\.avropa\.se/" to="https://www.avropa.se/"/>
  <rule from="^http://avropa\.se/" to="https://avropa.se/"/>
</ruleset>

<ruleset name="Azingsport.se">
  <target host="www.azingsport.se" />
  <target host="azingsport.se" />
  <rule from="^http://www\.azingsport\.se/" to="https://www.azingsport.se/"/>
  <rule from="^http://azingsport\.se/" to="https://azingsport.se/"/>
</ruleset>

<ruleset name="BritishAirways">
  <target host="britishairways.com"/>
  <target host="www.britishairways.com"/>

  <securecookie host="^(.*\.)?britishairways.com$" name=".*" />

  <rule from="^http://(www\.)?britishairways\.com/" to="https://www.britishairways.com/"/>
</ruleset>
<ruleset name="BKK-Advita">
<target host="www.bkk-advita.de" />
<target host="bkk-advita.de" />
<rule from="^http://(www\.)?bkk-advita\.de/" to="https://www.bkk-advita.de/"/>
</ruleset>
<ruleset name="BKW-FMB.ch">
        <target host="bkw-fmb.ch" />
        <target host="www.bkw-fmb.ch" />

        <rule from="^http://(www\.)?bkw-fmb\.ch/" to="https://www.bkw-fmb.ch/"/>
        <securecookie host="^(.*\.)?bkw-fmb\.ch$" name=".*" />
</ruleset>
<ruleset name="BankOfNewZeland">
  <target host="bnz.co.nz" />
  <target host="www.bnz.co.nz" />

  <securecookie host="^(.+\.)?bnz\.co\.nz$" name=".*"/>

  <rule from="^http://(www\.)?bnz\.co\.nz/" to="https://www.bnz.co.nz/"/>
</ruleset>
<ruleset name="Boe.es">
  <target host="boe.es" />
  <target host="*.boe.es" />

  <rule from="^http://boe\.es/" to="https://www.boe.es/"/>
  <rule from="^http://([^/:@]*)\.boe\.es/" to="https://$1.boe.es/"/>
</ruleset>
<ruleset name="BT">
  <target host="www.bt.com" />
  <target host="bt.com" />

  <rule from="^http://(www\.)?bt\.com/" to="https://www.bt.com/"/>
</ruleset>
<ruleset name="BTH.se">
	<target host="www.bth.se" />
	<target host="bth.se" />
	<rule from="^http://bth\.se/" to="https://www.bth.se/"/>
	<rule from="^http://www\.bth\.se/" to="https://www.bth.se/"/>
</ruleset>

<ruleset name="BTunnel">
  <target host="btunnel.com" />
  <target host="www.btunnel.com" />

  <securecookie host="^(.+\.)?btunnel\.com$" name=".*"/>

  <rule from="^http://(www\.)?btunnel\.com/" to="https://btunnel.com/"/>
</ruleset>
<ruleset name="Backupify">
  <target host="backupify.com" />
  <target host="www.backupify.com" />

  <securecookie host="^(.*\.)?backupify\.com$" name=".*" />

  <rule from="^http://(www\.)?backupify\.com/" to="https://www.backupify.com/"/>
</ruleset>
<ruleset name="Badoo.com">
  <target host="www.badoo.com" />
  <target host="badoo.com" />
  <rule from="^http://www\.badoo\.com/" to="https://www.badoo.com/"/>
  <rule from="^http://badoo\.com/" to="https://www.badoo.com/"/>
</ruleset>

<ruleset name="Bagatoo.se">
  <target host="www.bagatoo.se" />
  <target host="bagatoo.se" />
  <rule from="^http://www\.bagatoo\.se/" to="https://www.bagatoo.se/"/>
  <rule from="^http://bagatoo\.se/" to="https://bagatoo.se/"/>
</ruleset>

<ruleset name="Bahn-BKK">
<target host="www.bahn-bkk.de" />
<target host="bahn-bkk.de" />
<rule from="^http://(www\.)?bahn-bkk\.de/" to="https://www.bahn-bkk.de/"/>
</ruleset>
<ruleset name="Bahn.de">
<target host="*.bahn.de" />
  <target host="bahn.de" />

  <rule from="^http://([^/:@]*)\.bahn\.de/" to="https://$1.bahn.de/"/>
</ruleset>
<ruleset name="Balatarin">
  <target host="balatarin.com" />
  <target host="www.balatarin.com" />

  <rule from="^http://(www\.)?balatarin\.com/" to="https://balatarin.com/" />
</ruleset>
<ruleset name="Baldershage.se">
  <target host="www.baldershage.se" />
  <target host="baldershage.se" />
  <rule from="^http://www\.baldershage\.se/" to="https://www.baldershage.se/"/>
  <rule from="^http://baldershage\.se/" to="https://baldershage.se/"/>
</ruleset>

<ruleset name="Balkongshoppen.se">
  <target host="www.balkongshoppen.se" />
  <target host="balkongshoppen.se" />
  <rule from="^http://www\.balkongshoppen\.se/" to="https://www.balkongshoppen.se/"/>
  <rule from="^http://balkongshoppen\.se/" to="https://balkongshoppen.se/"/>
</ruleset>

<ruleset name="Bandcamp (buggy)" default_off="breaks streaming">
<target host="bandcamp.com" />
<target host="www.bandcamp.com" />
<rule from="^http://(www\.)?bandcamp\.com/" to="https://www.bandcamp.com/"/>
</ruleset> 
<!-- Thanks to ForceTLS -->
<ruleset name="BofA (buggy)" default_off="breaks some URLs">
  <target host="www.bankofamerica.com" />
  <target host="bankofamerica.com" />

  <rule from="^http://(www\.)?bankofamerica\.com/" to="https://www.bankofamerica.com/"/>
</ruleset>
<ruleset name="bankrate.com">
	<target host="bankrate.com" />
	<target host="www.bankrate.com" />
	<rule from="^http://bankrate\.com/" to="https://origin.bankrate.com/"/>
	<rule from="^http://www\.bankrate\.com/" to="https://origin.bankrate.com/"/>
</ruleset>

<ruleset name="Barclays">
  <target host="www.barclays.co.uk" />
  <target host="barclays.co.uk" />
  <target host="ask.barclays.co.uk" />
  <target host="barclayscorporate.com" />
  <target host="www.barclayscorporate.com" />

  <rule from="^http://(www\.)?barclays\.co\.uk/" to="https://www.barclays.co.uk/"/>
  <rule from="^http://ask\.barclays\.co\.uk/" to="https://ask.barclays.co.uk/"/>
  <rule from="^http://(www\.)?barclayscorporate\.com/" to="https://www.barclayscorporate.com/"/>
</ruleset>
<ruleset name="Barmer-GEK">
<target host="www.barmer-gek.de" />
<target host="barmer-gek.de" />
<rule from="^http://(www\.)?barmer-gek\.de/" to="https://www.barmer-gek.de/"/>
</ruleset>
<ruleset name="Barnskospecialisten.se">
  <target host="www.barnskospecialisten.se" />
  <target host="barnskospecialisten.se" />
  <rule from="^http://www\.barnskospecialisten\.se/" to="https://www.barnskospecialisten.se/"/>
  <rule from="^http://barnskospecialisten\.se/" to="https://barnskospecialisten.se/"/>
</ruleset>

<ruleset name="Belpino.se">
  <target host="www.belpino.se" />
  <target host="belpino.se" />
  <rule from="^http://www\.belpino\.se/" to="https://www.belpino.se/"/>
  <rule from="^http://belpino\.se/" to="https://belpino.se/"/>
</ruleset>

<ruleset name="BerliOS" default_off="Cert warning">
  <target host="berlios.de" />
  <target host="*.berlios.de" />

  <rule from="^http://([^/:@]*)\.berlios\.de/" to="https://$1.berlios.de/"/>
</ruleset>
<ruleset name="Berlin.de">
  <target host="www.berlin.de" />
  <target host="berlin.de" />
  <target host="*.berlin.de" />

  <exclusion pattern="^http://action\.berlin\.de/"/>
  <rule from="^http://berlin\.de/" to="https://berlin.de/"/>
  <rule from="^http://([^/:@]*)\.berlin\.de/" to="https://$1.berlin.de/"/>
</ruleset>
<ruleset name="Bhiab.se">
  <target host="www.bhiab.se" />
  <target host="bhiab.se" />
  <rule from="^http://www\.bhiab\.se/" to="https://www.bhiab.se/"/>
  <rule from="^http://bhiab\.se/" to="https://bhiab.se/"/>
</ruleset>

<ruleset name="German BigBrotherAwards">
	<target host="bigbrotherawards.de" />
	<target host="www.bigbrotherawards.de" />

	<rule from="^http://(www\.)?bigbrotherawards\.de/" to="https://www.bigbrotherawards.de/" />

	<!-- Invoking https://bigbrotherawards.de/ produces a certificate error, so redirect
	https://bigbrotherawards.de/ to https://www.bigbrotherawards.de/ -->
	<rule from="^https://bigbrotherawards\.de/" to="https://www.bigbrotherawards.de/" />
</ruleset><ruleset name="BinRev">
  <target host="www.binrev.com" />
  <target host="binrev.com" />

  <rule from="^http://(www\.)?binrev\.com/" to="https://binrev.com/"/>
</ruleset>
<ruleset name="BinSearch">
  <target host="www.binsearch.info" />
  <target host="binsearch.info" />

  <rule from="^http://(www\.)?binsearch\.info/" to="https://www.binsearch.info/"/>
</ruleset>
<!-- blogg.binero.se lacks ssl support. -->
<ruleset name="Binero.se">
  <target host="binero.se" />
  <rule from="^http://binero\.se/" to="https://www.binero.se/"/>
  <rule from="^http://support\.binero\.se/" to="https://support.binero.se/"/>
  <rule from="^http://order\.binero\.se/" to="https://order.binero.se/"/>
  <rule from="^http://www\.binero\.se/" to="https://www.binero.se/"/>
</ruleset>

<ruleset name="BitBucket">
  <target host="www.bitbucket.org" />
  <target host="bitbucket.org" />

  <rule from="^http://(www\.)?bitbucket\.org/" to="https://bitbucket.org/"/>
</ruleset>
<ruleset name="Bitcoin" default_off="self-signed">
  <target host="www.bitcoin.org" />
  <target host="bitcoin.org" />
  <target host="forum.bitcoin.org" />

  <rule from="^http://(www\.)?bitcoin\.org/" to="https://www.bitcoin.org/" />
  <rule from="^http://(forum)\.bitcoin\.org/"  to="https://$1.bitcoin.org/" />
</ruleset>
<ruleset name="bit.ly">
  <target host="bit.ly" />
  <target host="www.bit.ly" />
  <target host="bit.ly.pro" />
  <target host="www.bit.ly.pro" />
  <target host="j.mp" />
  <target host="www.j.mp" />
  <target host="on.fb.me" />

  <securecookie host="^(.*\.)?bit\.ly$" name=".*"/>
  <rule from="^http://(?:www\.)?bit\.ly/" to="https://bit.ly/"/>
  <rule from="^http://(?:www\.)?bit\.ly\.pro/" to="https://bit.ly/pro/"/>
  <!--
  j.mp doesn't have a correct certificate but the namespaces are the same!
  -->
  <rule from="^http://(?:www\.)?j\.mp/" to="https://bit.ly/"/>
  <rule from="^http://on\.fb\.me/" to="https://bit.ly/"/>
</ruleset>
<ruleset name="bittorrentdotorg" default_off="certificate mismatch">
  <target host="bittorrent.org" />
  <target host="www.bittorrent.org" />

  <rule from="^http://(www\.)?bittorrent\.org/" to="https://www.bittorrent.org/"/>
</ruleset>
<ruleset name="BlackHat">
  <target host="blackhat.com" />
  <target host="www.blackhat.com" />

  <rule from="^http://(www\.)?blackhat\.com/" to="https://www.blackhat.com/"/>
</ruleset>
<ruleset name="Black Night">
  <!-- most subdomains for blacknight.com will not work as they use invalid
       certs, .ie instead of .com.  blacknight.ie is reserved for customer
       logins -->
  <target host="www.blacknight.com" />
  <target host="blacknight.com" />

  <rule from="^http://(www\.)?blacknight\.com/" to="https://www.blacknight.com/"/>
</ruleset>
<ruleset name="BlameStella">
  <target host="blamestella.com" />
  <target host="www.blamestella.com" />

  <securecookie host="^(www\.)?blamestella\.com$" name=".*"/>

  <rule from="^http://(www\.)?blamestella\.com/" to="https://www.blamestella.com/"/>
</ruleset>
<ruleset name="Blekko">
  <target host="blekko.com" />
  <target host="www.blekko.com" />

  <rule from="^http://(www\.)?blekko\.com/" to="https://blekko.com/" />
</ruleset>
<ruleset name="Blip">
  <target host="blip.tv" />
  <target host="www.blip.tv" />
  <target host="a.blip.tv" />

  <securecookie host="^(.+\.)?blip\.tv$" name=".*"/>

  <rule from="^http://((www|a)\.)?blip\.tv/" to="https://blip.tv/"/>
</ruleset>
<ruleset name="Blipp.com">
	<target host="blipp.com" />
	<target host="www.blipp.com" />
	<target host="vic20.blipp.com" />
	<rule from="^http://www\.blipp\.com/" to="https://blipp.com/"/>
	<rule from="^http://vic20\.blipp\.com/" to="https://vic20.blipp.com/"/>
	<rule from="^http://blipp\.com/" to="https://blipp.com/"/>
</ruleset>

<ruleset name="BlockBuster UK">
  <target host="www.blockbuster.co.uk" />
  <target host="blockbuster.co.uk" />

  <rule from="^http://(www\.)?blockbuster\.co\.uk/" to="https://www.blockbuster.co.uk/"/>
</ruleset>
<ruleset name="BlockExplorer.com">
  <target host="blockexplorer.com" />
  <target host="www.blockexplorer.com" />

  <rule from="^http://(www\.)?blockexplorer\.com/" to="https://blockexplorer.com/" />
</ruleset>
<ruleset name="Blocket.se">
	<target host="blocket.se" />
	<target host="www.blocket.se" />
	<target host="www2.blocket.se" />
	<target host="eas.blocket.se" />
	<rule from="^http://blocket\.se/" to="https://www.blocket.se/"/>
	<rule from="^http://www\.blocket\.se/" to="https://www.blocket.se/"/>
	<rule from="^http://www2\.blocket\.se/" to="https://www2.blocket.se/"/>
	<rule from="^http://eas\.blocket\.se/" to="https://eas.blocket.se/"/>
</ruleset>

<ruleset name="BlueHost">
  <target host="www.bluehost.com" />
  <target host="bluehost.com" />
  <target host="helpdesk.bluehost.com" />
  <target host="tutorials.bluehost.com" />
  <target host="serverstatus.bluehost.com" />

  <rule from="^http://(www\.)?bluehost\.com/" to="https://www.bluehost.com/"/>
  <rule from="^http://(helpdesk|tutorials)\.bluehost\.com/" to="https://$1.bluehost.com/"/>
  <rule from="^http://serverstatus\.bluehost\.com/$" to="https://www.bluehost.com/cgi/serverstatus/"/>
</ruleset>
<ruleset name="Boards.ie">
  <!-- updated to include subdomains -->
  <target host="boards.ie" />
  <target host="*.boards.ie" />

  <rule from="^http://boards\.ie/" to="https://boards.ie/"/>
  <rule from="^http://([^/:@]*)\.boards\.ie/" to="https://$1.boards.ie/"/>
</ruleset>
<ruleset name="Boell.de">
	<target host="groupwise.boell.de" />
	<rule from="^http://groupwise\.boell\.de/" to="https://groupwise.boell.de/" />
</ruleset>
<ruleset name="Boinc">
<target host="boinc.berkeley.edu" />
<target host="www.boinc.berkeley.edu" />
<rule from="^http://(www\.)?boinc\.berkeley\.edu/" to="https://boinc.berkeley.edu/"/>
</ruleset>
<ruleset name="Bokborgen.se">
  <target host="www.bokborgen.se" />
  <target host="bokborgen.se" />
  <rule from="^http://www\.bokborgen\.se/" to="https://bokborgen.se/"/>
  <rule from="^http://bokborgen\.se/" to="https://bokborgen.se/"/>
</ruleset>

<ruleset name="Bokelskere">
  <target host="bokelskere.no" />
  <target host="www.bokelskere.no" />

  <rule from="^http://bokelskere\.no/" to="https://bokelskere.no/"/>
  <rule from="^http://www\.bokelskere\.no/" to="https://www.bokelskere.no/"/>
</ruleset>
<ruleset name="Bolagsverket.se">
	<target host="bolagsverket.se" />
	<target host="www.bolagsverket.se" />
	<rule from="^http://bolagsverket\.se/" to="https://www.bolagsverket.se/"/>
	<rule from="^http://www\.bolagsverket\.se/" to="https://www.bolagsverket.se/"/>
</ruleset>

<ruleset name="Boltbus.com">
  <target host="boltbus.com" />
  <target host="www.boltbus.com" />

  <rule from="^http://(www\.)?boltbus\.com/" to="https://www.boltbus.com/" />
</ruleset>
<ruleset name="BookMyName">
  <target host="www.bookmyname.com" />
  <target host="bookmyname.com" />

  <rule from="^http://(www\.)?bookmyname\.com/" to="https://www.bookmyname.com/"/>
</ruleset>
<ruleset name="Booklog.jp">
  <target host="booklog.jp" />
  <target host="www.booklog.jp" />

  <rule from="^http://(www\.)?booklog\.jp/" to="https://www.booklog.jp/" />
</ruleset>
 <!-- Partial -->
<ruleset name="Bookworm">
  <target host="bookworm.oreilly.com" />

  <securecookie host="^bookworm\.oreilly\.com$" name=".*" />

  <rule from="^http://bookworm\.oreilly\.com/" to="https://bookworm.oreilly.com/"/>

</ruleset>
<!-- pharmacy. medical info should be private -->
<ruleset name="boots.com">
	<target host="boots.com" />
	<target host="www.boots.com" />
	<rule from="^http://boots\.com/" to="https://www.boots.com/"/>
	<rule from="^http://www\.boots\.com/" to="https://www.boots.com/"/>
</ruleset>

<ruleset name="Bothar">
  <target host="www.bothar.ie" />
  <target host="bothar.ie" />

  <rule from="^http://(www\.)?bothar\.ie/" to="https://$1bothar.ie/"/>
</ruleset>
<ruleset name="BoxUK">
  <target host="www.boxuk.com"/>
  <target host="boxuk.com"/>

  <securecookie host="^(www\.)?boxuk\.com$" name=".*"/>

  <rule from="^http://(www\.)?boxuk\.com/" to="https://www.boxuk.com/"/>
</ruleset>
<ruleset name="Boxee.tv">
  <target host="www.boxee.tv" />
  <target host="app.boxee.tv" />
  <target host="boxee.tv" />

  <rule from="^http://(?:www\.)?boxee\.tv/" to="https://www.boxee.tv/"/>
  <rule from="^http://app\.boxee\.tv/" to="https://app.boxee.tv/"/>
</ruleset>
<ruleset name="Brainbench">
  <target host="www.brainbench.com" />
  <target host="brainbench.com" />

  <rule from="^http://(www\.)?brainbench\.com/" to="https://www.brainbench.com/"/>
</ruleset>

<ruleset name="Braunschweig">
  <target host="www.braunschweig.de" />
  <target host="braunschweig.de" />

  <rule from="^http://(www\.)?braunschweig\.de/" to="https://www.braunschweig.de/"/>
</ruleset>
<ruleset name="Broadband Reports">
  <target host="www.dslreports.com" />
  <target host="dslreports.com" />
  <target host="www.broadbandreports.com" />
  <target host="broadbandreports.com" />

  <rule from="^http://(www\.)?dslreports\.com/" to="https://secure.dslreports.com/"/>
  <rule from="^http://(www\.)?broadbandreports\.com/" to="https://secure.dslreports.com/"/>
</ruleset>

<ruleset name="BrowserShots">
  <target host="browsershots.org"/>
  <target host="www.browsershots.org"/>

  <securecookie host="^(.+\.)?browsershots\.org$" name=".*"/>

  <rule from="^http://(www\.)?browsershots\.org/" to="https://browsershots.org/"/>
</ruleset>
<ruleset name="Buckyballs">
  <target host="getbuckyballs.com" />
  <target host="www.getbuckyballs.com" />

  <rule from="^http://(www\.)?getbuckyballs\.com/" to="https://www.getbuckyballs.com/" />
</ruleset>
<ruleset name="Budgetgolf.se">
  <target host="www.budgetgolf.se" />
  <target host="budgetgolf.se" />
  <rule from="^http://www\.budgetgolf\.se/" to="https://www.budgetgolf.se/"/>
  <rule from="^http://budgetgolf\.se/" to="https://www.budgetgolf.se/"/>
</ruleset>

<ruleset name="BufferedIO" default_off="Cacert signed">
  <target host="buffered.io" />
  <target host="www.buffered.io" />

  <securecookie host="^(.+\.)?buffered\.io$" name=".*"/>

  <rule from="^http://(www\.)?buffered\.io/" to="https://buffered.io/"/>
</ruleset>
<ruleset name="BulbMan">
  <target host="bulbman.com" />
  <target host="www.bulbman.com" />

  <rule from="^http://(www\.)?bulbman\.com/" to="https://www.bulbman.com/"/>
</ruleset>
<ruleset name="BulkSMS">
  <target host="bulksms.co.uk" />
  <target host="www.bulksms.co.uk" />

  <securecookie host="^(.+\.)?bulksms\.co\.uk$" name=".*"/>

  <rule from="^http://(www\.)?bulksms\.co\.uk/" to="https://www.bulksms.co.uk/"/>
</ruleset>
<!-- Av vendor. -->
<ruleset name="Bullguard">
	<target host="bullguard.com" />
	<target host="www.bullguard.com" />
	<rule from="^http://www\.bullguard\.com/" to="https://www.bullguard.com/"/>
	<rule from="^http://bullguard\.com/" to="https://www.bullguard.com/"/>
</ruleset>

<ruleset name="Bungie">
  <target host="www.bungie.net" />
  <target host="bungie.net" />

  <rule from="^http://(www\.)?bungie\.net/" to="https://www.bungie.net/"/>
</ruleset>
<ruleset name="Bunkus.org">
<target host="www.bunkus.org" />
<target host="bunkus.org" />
<rule from="^http://(www\.)?bunkus\.org/" to="https://www.bunkus.org/"/>
</ruleset>
<ruleset name="BuisnessInsider">
<target host="businessinsider.com" />
<target host="www.businessinsider.com" />
        <rule from="^http://businessinsider\.com/" to="https://www.businessinsider.com/"/>
        <rule from="^http://www\.businessinsider\.com/" to="https://www.businessinsider.com/"/>
</ruleset>
<ruleset name="C-Base">
  <target host="www.c-base.org" />
  <target host="c-base.org" />
  <target host="logbuch.c-base.org" />
  <target host="wiki.c-base.org" />

  <rule from="^http://(www\.)?c-base\.org/" to="https://www.c-base.org/"/>
  <rule from="^http://(logbuch|wiki)\.c-base\.org/" to="https://$1.c-base.org/"/>
</ruleset>
<ruleset name="CA-PCR.fr">
  <target host="www.ca-pca.fr" />
  <target host="ca-pca.fr" />

  <rule from="^http://(www\.)?ca-pca\.fr/" to="https://www.ca-pca.fr/"/>
</ruleset>
<ruleset name="CACert.org" default_off="signed by CACert itself">
  <target host="*.cacert.org" />

  <!-- this currently errs on the side of not breaking things over security -->
  <exclusion pattern="\.crt" />
  <exclusion pattern="\.crl" />
  <exclusion pattern="ocsp\." />
  <exclusion pattern="^http://cats\.cacert\.org/"/>

  <rule from="^http://([^/:@]*)\.cacert\.org/" to="https://$1.cacert.org/"/>
</ruleset>
<ruleset name="ccc.de" default_off="CACert">
  <target host="www.ccc.de" />
  <target host="*.ccc.de" />

  <exclusion pattern="^http://dasalte\.ccc\.de/"/><!-- revoked cert -->
  <exclusion pattern="^http://chaosradio\.ccc\.de/"/><!-- invalid cert -->
  <exclusion pattern="^http://blog.chaosradio\.ccc\.de/"/><!-- invalid cert -->
  <rule from="^http://ccc\.de/" to="https://www.ccc.de/"/>
  <rule from="^http://([^/:@]*)\.ccc\.de/" to="https://$1.ccc.de/"/>
</ruleset>
<ruleset name="CDT">
  <target host="www.cdt.org" />
  <target host="cdt.org" />

  <rule from="^http://(www\.)?cdt\.org/" to="https://www.cdt.org/"/>
</ruleset>
<ruleset name="CDW and CDW-G">
  <target host="www.cdwg.com" />
  <target host="www.cdw.com" />

  <rule from="^http://(www\.)?cdw(g)?\.com/" to="https://www.cdw$2.com/"/>
</ruleset>

<ruleset name="CERT.fi">
  <target host="www.cert.fi" />
  <target host="cert.fi" />
  <rule from="^http://www\.cert\.fi/" to="https://www.cert.fi/"/>
  <rule from="^http://cert\.fi/" to="https://www.cert.fi/"/>
</ruleset>

<ruleset name="CERT.se">
  <target host="www.cert.se" />
  <target host="cert.se" />
  <rule from="^http://www\.cert\.se/" to="https://www.cert.se/"/>
  <rule from="^http://cert\.se/" to="https://www.cert.se/"/>
</ruleset>

<ruleset name="Cert">
  <target host="cert.org" />
  <target host="www.cert.org" />
  <target host="www.kb.cert.org" />

  <securecookie host="^(.+\.)?cert\.org$" name=".*"/>

  <rule from="^http://(www\.)?cert\.org/" to="https://www.cert.org/"/>
  <rule from="^http://www\.kb\.cert\.org/" to="https://www.kb.cert.org/"/>
</ruleset>
<!-- idg does their best to make https tricky -->
<ruleset name="CIO.com.au">
	<target host="demo.idg.com.au" />
	<target host="cio.com.au" />
	<target host="www.cio.com.au" />
	<rule from="^http://demo\.idg\.com\.au/" to="https://demo.idg.com.au/"/>
	<rule from="^http://cio\.com\.au/" to="https://www.cio.com.au/"/>
	<rule from="^http://www\.cio\.com\.au/" to="https://www.cio.com.au/"/>
</ruleset>

<ruleset name="CJ">
  <target host="cj.com" />
  <target host="www.cj.com" />
  <target host="signup.cj.com" />
  <target host="members.cj.com" />

  <securecookie host="^(.+\.)?cj\.com$" name=".*"/>

  <rule from="^http://(www\.)?cj\.com/" to="https://www.cj.com/"/>
  <rule from="^http://(members|signup)\.cj\.com/" to="https://$1.cj.com/"/>
</ruleset>
<ruleset name="CPJ">
  <target host="www.cpj.org" />
  <target host="cpj.org" />

  <rule from="^http://(www\.)?cpj\.org/" to="https://www.cpj.org/"/>
</ruleset>
<ruleset name="CPSC.gov">
  <target host="cpsc.gov" />
  <target host="www.cpsc.gov" />

  <rule from="^http://(www\.)?cpsc\.gov/" to="https://www.cpsc.gov/" />
</ruleset>
<ruleset name="CRM Metrix">
	<target host="www.crm-metrix.com" />
	<target host="crm-metrix.com" />

	<rule from="^http://(www\.)?crm-metrix\.com/" to="https://www.crm-metrix.com/" />
</ruleset><ruleset name="CSAF" default_off="self-signed">
  <target host="www.csaf.cz" />
  <target host="csaf.cz" />

  <rule from="^http://(www\.)?csaf\.cz/" to="https://csaf.cz/"/>
</ruleset>
<ruleset name="CSIS.dk">
	<target host="csis.dk" />
	<target host="www.csis.dk" />
	<rule from="^http://csis\.dk/" to="https://www.csis.dk/"/>
	<rule from="^http://www\.csis\.dk/" to="https://www.csis.dk/"/>
</ruleset>

<ruleset name="CSRSupport.com">
  <target host="www.csrsupport.com" />
  <target host="csrsupport.com" />
  <rule from="^http://www\.csrsupport\.com/" to="https://www.csrsupport.com/"/>
  <rule from="^http://csrsupport\.com/" to="https://www.csrsupport.com/"/>
</ruleset>

<ruleset name="CTunnel">
  <target host="ctunnel.com" />
  <target host="www.ctunnel.com" />

  <securecookie host="^(.+\.)?ctunnel\.com$" name=".*"/>

  <rule from="^http://(www\.)?ctunnel\.com/" to="https://ctunnel.com/"/>
</ruleset>
<ruleset name="CVI Melles Griot">
  <target host="www.cvimellesgriot.com" />
  <target host="cvimellesgriot.com" />

  <rule from="^http://(www\.)?cvimellesgriot\.com/" to="https://www.cvimellesgriot.com/"/>
</ruleset>
<ruleset name="CaceTech">
  <target host="www.cacetech.com" />
  <target host="cacetech.com" />

  <rule from="^http://(www\.)?cacetech\.com/" to="https://www.cacetech.com/"/>
</ruleset>
<!-- lots of domains lack (valid) https:
	www.cam.ac.uk
	www.sports.cam.ac.uk
	www.lib.cam.ac.uk 
	for exampl -->
<ruleset name="Cam.ac.uk">
	<target host="www.cl.cam.ac.uk" />
	<target host="www.admin.cam.ac.uk" />
	<target host="webservices.admin.cam.ac.uk" />
	<rule from="^http://www\.cl\.cam\.ac\.uk/" to="https://www.cl.cam.ac.uk/"/>
	<rule from="^http://www\.admin\.cam\.ac\.uk/" to="https://www.admin.cam.ac.uk/"/>
	<rule from="^http://webservices\.admin\.cam\.ac\.uk/" to="https://webservices.admin.cam.ac.uk/"/>
</ruleset>

<ruleset name="Canadian Lung Association">
	<target host="lung.ca" />
	<target host="www.lung.ca" />

	<rule from="^http://(www\.)?lung\.ca/" to="https://www.lung.ca/" />
</ruleset><!-- ICMag SSL cert is valid for www domains; https://icmag.com/* gives invalid cert warning -->
<ruleset name="Intl Cannagraphic Magazine">
  <target host="www.icmag.*" />
  <target host="icmag.*" />
  
  <rule from="^http://(www\.)?icmag\.com/" to="https://www.icmag.com/"/>
  <rule from="^https://icmag\.com/" to="https://www.icmag.com/"/>
  <rule from="^http://(www\.)?icmag\.com/ic/" to="https://www.icmag.com/ic/"/>
  <rule from="^https://icmag\.com/ic/" to="https://www.icmag.com/ic/"/>
</ruleset>
<ruleset name="Canv.as">
  <target host="canv.as" />
  <target host="www.canv.as" />

  <rule from="^http://(www\.)?canv\.as/" to="https://www.canv.as/" />
</ruleset>
<ruleset name="Cdon.se">
  <target host="cdon.se" />
  <rule from="^http://cdon\.se/" to="https://cdon.se/"/>
  <rule from="^http://www\.cdon\.se/" to="https://cdon.se/"/>
</ruleset>

<ruleset name="Celiac Disease Foundation">
	<target host="celiac.org" />
	<target host="www.celiac.org" />

	<rule from="^http://(www\.)?celiac\.org/" to="https://www.celiac.org/" />
</ruleset><ruleset name="Censorship.govt.nz">
	<target host="censorship.govt.nz" />
	<target host="www.censorship.govt.nz" />
	<rule from="^http://www\.censorship\.govt\.nz/" to="https://www.censorship.govt.nz/"/>
	<rule from="^http://censorship\.govt\.nz/" to="https://www.censorship.govt.nz/"/>
</ruleset>

<ruleset name="Centos">
  <target host="centos.org" />
  <target host="*.centos.org" />

  <rule from="^http://(www\.)?centos\.org/" to="https://www.centos.org/"/>
</ruleset>
<ruleset name="Change.org">
  <target host="change.org" />
  <target host="www.change.org" />

  <rule from="^http://(www\.)?change\.org/" to="https://www.change.org/" />
</ruleset>
<ruleset name="Charlotte Nature Museum">
	<target host="charlottenaturemuseum.org" />
	<target host="www.charlottenaturemuseum.org" />

	<rule from="^http://(www\.)?charlottenaturemuseum\.org/" to="https://www.charlottenaturemuseum.org/" />
</ruleset><ruleset name="Check Point">
  <target host="www.checkpoint.com" />
  <target host="checkpoint.com" />

  <rule from="^http://(www\.)?checkpoint\.com/" to="https://www.checkpoint.com/"/>
</ruleset>
<ruleset name="ChillingEffects">
  <target host="www.chillingeffects.org" />
  <target host="chillingeffects.org" />

  <rule from="^http://(www\.)?chillingeffects\.org/" to="https://www.chillingeffects.org/"/>
</ruleset>
<!-- Google chromium web. Supports src over ssl atm -->
<ruleset name="Chromium.org">
  <target host="src.chromium.org" />
  <rule from="^http://src\.chromium\.org/" to="https://src.chromium.org/"/>
</ruleset>

<ruleset name="Chronicle">
  <target host="chronicle.com" />
  <target host="www.chronicle.com" />

  <securecookie host="^(www\.)?chronicle\.com$" name=".*"/>

  <rule from="^http://(www\.)?chronicle\.com/" to="https://chronicle.com/"/>
</ruleset>
<ruleset name="Cia.vc" default_off="Cert expired in 2009" >
  <target host="cia.vc" />
  <target host="www.cia.vc" />

  <rule from="^http://(www\.)?cia\.vc/" to="https://cia.vc/" />
</ruleset>
<ruleset name="Cisco" default_off="Needs review">
  <target host="www.cisco.com"/>
  <target host="cisco.com"/>
  <exclusion pattern="^http://www\.cisco\.com/cgi-bin/login"/>
 <!-- Cisco Redirection Pages do not support HTTPS, so we exclude them. They redirect to HTTPS secured pages, though -->
  <exclusion pattern="^http://(www\.)?cisco\.com/go"/>

  <!-- Default: Replace with HTTPS. Redirect at Logout is still bugged, but the Logout itself works -->
  <rule from="^http://(www\.)?cisco\.com/" to="https://www.cisco.com/"/>
</ruleset>
<ruleset name="CiteULike">
  <target host="www.citeulike.org" />
  <target host="citeulike.org" />

  <rule from="^http://(www\.)?citeulike\.org/login" to="https://citeulike.org/login"/>
</ruleset>
<ruleset name="CitizensInformation">
  <target host="www.citizensinformation.ie" />
  <target host="citizensinformation.ie" />

  <!-- cert only valid for www.citizensinformation.ie -->
  <rule from="^http://(www\.)?citizensinformation\.ie/" to="https://www.citizensinformation.ie/"/>
</ruleset>
<ruleset name="City of Portland, OR">
  <target host="www.portlandonline.com"/>
  <target host="portlandonline.com"/>

  <rule from="^http://(www\.)?portlandonline\.com/" to="https://www.portlandonline.com/"/>
</ruleset>
<ruleset name="Clasohlson.se">
	<target host="clasohlson.se" />
	<target host="www.clasohlson.se" />
	<rule from="^http://www\.clasohlson\.se/" to="https://www.clasohlson.se/"/>
	<rule from="^http://clasohlson\.se/" to="https://www.clasohlson.se/"/>
</ruleset>

<ruleset name="Clickbank.com">
  <target host="www.clickbank.com" />
  <target host="clickbank.com" />
  <rule from="^http://www\.clickbank\.com/" to="https://www.clickbank.com/"/>
  <rule from="^http://clickbank\.com/" to="https://www.clickbank.com/"/>
</ruleset>

<ruleset name="Cloudflare">
  <target host="cloudflare.com" />
  <target host="www.cloudflare.com" />

  <securecookie host="^(.*\.)?cloudflare\.com$" name=".*" />

  <rule from="^http://(www\.)?cloudflare\.com/" to="https://www.cloudflare.com/"/>
</ruleset>
<ruleset name="Cloudfront">
  <target host="www.cloudfront.net" />
  <target host="*.cloudfront.net" />

  <rule from="^http://([^/:@]*)\.cloudfront\.net/"  to="https://$1.cloudfront.net/"/>
</ruleset>
<ruleset name="Codeplex">
  <target host="codeplex.com" />
  <target host="*.codeplex.com" />

  <securecookie host="^(.*\.)?codeplex\.com$" name=".*" />

  <exclusion pattern="^http://download\.codeplex\.com/" />
  <exclusion pattern="^http://i1\.codeplex\.com/" />
  <exclusion pattern="^http://i2\.codeplex\.com/" />
  <exclusion pattern="^http://i3\.codeplex\.com/" />

  <rule from="^http://(www\.)?codeplex\.com/" to="https://www.codeplex.com/"/>
  <rule from="^http://([^/:@]*)\.codeplex\.com/" to="https://$1.codeplex.com/"/>
</ruleset>
<ruleset name="Colorado State Attorney General">
	<target host="coloradoattorneygeneral.gov" />
	<target host="www.coloradoattorneygeneral.gov" />

	<rule from="^http://(www\.)?coloradoattorneygeneral\.gov/" to="https://www.coloradoattorneygeneral.gov/" />
</ruleset><ruleset name="Official Colorado No-Call List">
	<target host="coloradonocall.com" />
	<target host="www.coloradonocall.com" />

	<rule from="^http://(www\.)?coloradonocall\.com/" to="https://www.coloradonocall.com/" />
</ruleset><ruleset name="CommonDreams">
  <target host="commondreams.org" />
  <target host="www.commondreams.org" />

  <securecookie host="^(www\.)?commondreams\.org$" name=".*"/>

  <rule from="^http://(www\.)?commondreams\.org/" to="https://www.commondreams.org/"/>
</ruleset>
<ruleset name="CommuniGate">
  <target host="communigate.com" />
  <target host="*.communigate.com" />

  <rule from="^http://(www\.)?communigate\.com/" to="https://www.communigate.com/"/>
</ruleset>
<ruleset name="Comodo (Partial)">
  <target host="*.comodo.com" />
  <rule from="^http://(www|personalfirewall|antivirus|enterprise)\.comodo\.com/"
          to="https://$1.comodo.com/"/>
</ruleset>
<ruleset name="Comparis.ch">
        <target host="comparis.ch" />
        <target host="www.comparis.ch" />
        <securecookie host="^(.*\.)?comparis\.ch$" name=".*" />

        <rule from="^http://(www\.)?comparis\.ch/" to="https://www.comparis.ch/"/>
</ruleset>
<ruleset name="ComputerWorld">
  <target host="computerworld.com"/>
  <target host="www.computerworld.com"/>

  <rule from="^http://(www\.)?computerworld\.com/" to="https://www.computerworld.com/"/>
</ruleset>
<!-- already enforces https. adding to prevent sslstrips on port 80 -->
<ruleset name="Comviq.se">
	<target host="comviq.se" />
	<target host="www.comviq.se" />
	<rule from="^http://comviq\.se/" to="https://comviq.se/"/>
	<rule from="^http://www\.comviq\.se/" to="https://www.comviq.se/"/>
</ruleset>

<ruleset name="Continental">
  <target host="www.continental.com" />
  <target host="continental.com" />
  <target host="www.covacations.com" />
  <target host="covacations.com" />
  <target host="checkin.continental.com" />

  <rule from="^http://(www\.)?continental\.com/" to="https://www.continental.com/"/>
  <rule from="^http://www\.covacations\.com/" to="https://www.covacations.com/"/>
  <rule from="^http://covacations\.com/" to="https://www.covacations.com/"/>
  <rule from="^http://checkin\.continental\.com/" to="https://checkin.continental.com/"/>

</ruleset>
<ruleset name="Coop.ch">
        <target host="coop.ch" />
        <target host="www.coop.ch" />
        <target host="bankcoop.ch" />
        <target host="www.bankcoop.ch" />
        <target host="onlinebanking.bankcoop.ch" />
        <target host="supercard.ch" />
        <target host="www.supercard.ch" />

        <rule from="^http://(www\.)?coop\.ch/" to="https://www.coop.ch/"/>
        <rule from="^http://(www\.)?bankcoop\.ch/" to="https://www.bankcoop.ch/"/>
        <rule from="^http://(onlinebanking\.)?bankcoop\.ch/" to="https://onlinebanking.bankcoop.ch/"/>
        <rule from="^http://(www\.)?supercard\.ch/" to="https://www.supercard.ch/"/>
</ruleset>

<ruleset name="Couchsurfing">
  <target host="www.couchsurfing.org" />
  <target host="couchsurfing.org" />

  <rule from="^http://www\.couchsurfing\.org/login\.html$" to="https://www.couchsurfing.org/login.html"/>
</ruleset>

<!-- Another tracking firm -->
<ruleset name="Countquest.se">
	<target host="sdc.countquest.se" />
	<rule from="^http://sdc\.countquest\.se/" to="https://sdc.countquest.se/"/>
</ruleset>

<ruleset name="Courage Campaign">
	<target host="couragecampaign.org" />
	<target host="www.couragecampaign.org" />
	<target host="secure.couragecampaign.org" />

	<rule from="^http://((www|secure)\.)?couragecampaign\.org/" to="https://secure.couragecampaign.org/" />
</ruleset><ruleset name="Foundation for Health Coverage Education">
	<target host="coverageforall.org" />
	<target host="www.coverageforall.org" />

	<rule from="^http://(www\.)?coverageforall\.org/" to="https://www.coverageforall.org/" />
</ruleset><!-- if we are going to include ads and tracking info, lets atleast do it by https.-->
<ruleset name="coxnewsweb.net">
	<target host="coxnewsweb.com" />
	<target host="img.coxnewsweb.com" />
	<target host="alt.coxnewsweb.com" />
	<rule from="^http://img\.coxnewsweb\.com/" to="https://img.coxnewsweb.com/"/>
	<rule from="^http://alt\.coxnewsweb\.com/" to="https://alt.coxnewsweb.com/"/>
</ruleset>

<ruleset name="Creative Commons">
  <target host="i.creativecommons.org" />
  <target host="api.creativecommons.org" />
  <target host="creativecommons.org" />
  <target host="creativecommons.net" />

  <rule from="^http://(i|api)\.creativecommons\.org/" to="https://$1.creativecommons.org/"/>
  <rule from="^http://creativecommons\.org/" to="https://creativecommons.org/"/>
  <rule from="^http://creativecommons\.net/" to="https://creativecommons.net/"/>
</ruleset>
<ruleset name="Crucial.com (partial)">
  <target host="*.crucial.com" />

  <rule from="^http://www\.crucial\.com/(images\d{0,2}|js|css|reviews)/"
          to="https://www.crucial.com/$1/"/>
  <rule from="^http://www\.crucial\.com/favicon.png"
  	  to="https://www.crucial.com/favicon.png" />
</ruleset>
<ruleset name="Cultura Sparebank">
  <target host="cultura.no" />
  <target host="www.cultura.no" />

  <rule from="^http://cultura\.no/" to="https://cultura.no/"/>
  <rule from="^http://www\.cultura\.no/" to="https://www.cultura.no/"/>
</ruleset>

<ruleset name="cve.mitre.org">
	<target host="cve.mitre.org" />
	<rule from="^http://cve\.mitre\.org/" to="https://cve.mitre.org/"/>
</ruleset>

<ruleset name="Cykloteket.se">
  <target host="www.cykloteket.se" />
  <target host="cykloteket.se" />
  <rule from="^http://www\.cykloteket\.se/" to="https://cykloteket.se/"/>
  <rule from="^http://cykloteket\.se/" to="https://cykloteket.se/"/>
</ruleset>

<ruleset name="DALnet">
  <target host="dal.net"/>
  <target host="www.dal.net"/>
  <target host="inspiration.dal.net"/>
  <target host="users.dal.net"/>

  <securecookie host="^(.+\.)?dal\.net$" name=".*"/>

  <rule from="^http://(www\.)?dal\.net/" to="https://www.dal.net/"/>
  <rule from="^http://(inspiration|users)\.dal\.net/" to="https://$1.dal.net/"/>
</ruleset>
<ruleset name="DHL.de">
  <target host="dhl.de"/>
  <target host="*.dhl.de"/>

  <securecookie host="^(.*\.)?dhl\.de$" name=".*" />

  <rule from="^http://(www\.)?dhl\.de/" to="https://www.dhl.de/"/>
  <rule from="^http://dhl\.de/" to="https://www.dhl.de/"/>
</ruleset>
<ruleset name="DTunnel">
  <target host="dtunnel.com" />
  <target host="www.dtunnel.com" />

  <securecookie host="^(.+\.)?dtunnel\.com$" name=".*"/>

  <rule from="^http://(www\.)?dtunnel\.com/" to="https://dtunnel.com/"/>
</ruleset>
<ruleset name="DVDFab" default_off="TLS error">
  <target host="www.dvdfab.com" />
  <target host="www.dvdfab.net" />
  <target host="dvdfab.com" />
  <target host="dvdfab.net" />

  <rule from="^https?://(www\.)?dvdfab\.(com|net)/" to="https://www.dvdfab.$2/"/>
</ruleset>
<ruleset name="Daft.ie" default_off="causes image problems">
  <target host="www.daft.ie" />
  <target host="daft.ie" />

  <!-- cert only valid for *.daft.ie -->
  <rule from="^http://(www\.)?daft\.ie/" to="https://www.daft.ie/"/>
</ruleset>
<ruleset name="Daily">
  <target host="www.daily.co.uk" />
  <target host="webmail.daily.co.uk" />
  <target host="daily.co.uk" />

  <rule from="^http://(www\.)?daily\.co\.uk/" to="https://www.daily.co.uk/"/>
  <rule from="^http://(webmail)\.daily\.co\.uk/" to="https://$1.daily.co.uk/"/>
</ruleset>
<!-- jobs.datacenterknowledge.com lacks ssl. :( -->
<!-- openx.datacenterknowledge.com lacks ssl. :( -->
<ruleset name="DataCenterKnowledge.com">
  <target host="www.datacenterknowledge.com" />
  <target host="datacenterknowledge.com" />
  <rule from="^http://www\.datacenterknowledge\.com/" to="https://www.datacenterknowledge.com/"/>
  <rule from="^http://datacenterknowledge\.com/" to="https://datacenterknowledge.com/"/>
</ruleset>

<ruleset name="Datatilsynet">
  <target host="www.datatilsynet.no" />
  <target host="datatilsynet.no" />
  <target host="www.slettmeg.no" />
  <target host="slettmeg.no" />

  <rule from="^http://(www\.)?datatilsynet\.no/" to="https://www.datatilsynet.no/"/>
  <rule from="^http://(www\.)?slettmeg\.no/" to="https://slettmeg.no/"/>
</ruleset>
<ruleset name="Deal Extreme">
  <target host="www.dealextreme.com" />
  <target host="dealextreme.com" />

  <rule from="^http://(www\.)?dealextreme\.com/" to="https://www.dealextreme.com/"/>
</ruleset>
<ruleset name="DebianLists" default_off="self-signed">
  <target host="lists.debian.org" />

  <rule from="^http://lists\.debian\.org/" to="https://lists.debian.org/"/>
</ruleset>

<ruleset name="Decdna.net">
	<target host="na.decdna.net" />
	<target host="eu.link.decdna.net" />

	<rule from="^http://(na|(eu\.link))\.decdna\.net/" to="https://$1.decdna.net/" />
</ruleset><ruleset name="Delico.se">
  <target host="www.delico.se" />
  <target host="delico.se" />
  <rule from="^http://www\.delico\.se/" to="https://www.delico.se/"/>
  <rule from="^http://delico\.se/" to="https://delico.se/"/>
</ruleset>

<ruleset name="Dell">
	<target host="www.dell.com" />
	<target host="support.dell.com" />
	<rule from="^http://www\.dell\.com/" to="https://www.dell.com/"/>
	<rule from="^http://support\.dell\.com/" to="https://support.dell.com/"/>
</ruleset>

<ruleset name="DemocracyNow">
  <target host="www.democracynow.org" />
  <target host="democracynow.org" />

  <rule from="^http://(www\.)?democracynow\.org/" to="https://www.democracynow.org/"/>
</ruleset>

<ruleset name="Demonoid">
  <target host="*.demonoid.com" />
  <target host="demonoid.com" />
  <target host="*.demonoid.me" />
  <target host="demonoid.me" />

  <securecookie host="^(.*\.)demonoid\.com$" name=".*" />
  <securecookie host="^(.*\.)demonoid\.me$" name=".*" />

  <rule from="^http://(www\.)?demonoid\.com/" to="https://www.demonoid.com/"/>
  <rule from="^http://(www\.)?demonoid\.me/" to="https://www.demonoid.me/"/>
</ruleset>
<ruleset name="DepositProtection">
  <target host="depositprotection.com" />
  <target host="www.depositprotection.com" />

  <securecookie host="^(.+\.)?depositprotection\.com$" name=".*"/>

  <rule from="^http://(www\.)?depositprotection\.com/" to="https://www.depositprotection.com/"/>
</ruleset>
<ruleset name="Deutsche BKK">
<target host="www.deutschebkk.de" />
<target host="deutschebkk.de" />
<rule from="^http://(www\.)?deutschebkk\.de/" to="https://www.deutschebkk.de/"/>
</ruleset>
<ruleset name="Develop-online.net">
	<target host="develop-online.net" />
	<target host="www.develop-online.net" />
	<rule from="^http://develop-online\.net/" to="https://develop-online.net/"/>
	<rule from="^http://www\.develop-online\.net/" to="https://www.develop-online.net/"/>
</ruleset>

<ruleset name="DeviantArt (pending)" default_off="site operator says not ready yet">
	<target host="deviantart.com" />
	<target host="*.deviantart.com" />
	<target host="*.deviantart.net" />
	<exclusion pattern="^http://(backend|st|fc\d+|th\d+)\.deviantart\.(com|net)/"/>
	<rule from="^http://deviantart\.com/"
		to="https://www.deviantart.com/" />
	<rule from="^http://(.*)?\.deviantart\.(com|net)/"
		to="https://$1.deviantart.com/" />
</ruleset>
<ruleset name="Diagonalperiodico.net">
  <target host="diagonalperiodico.net" />
  <target host="www.diagonalperiodico.net" />

  <rule from="^http://(www\.)?diagonalperiodico\.net/" to="https://www.diagonalperiodico.net/" />
</ruleset>
<ruleset name="Diasp.org">
  <target host="diasp.org" />
  <target host="www.diasp.org" />

  <rule from="^http://(www\.)?diasp\.org/"
          to="https://diasp.org/"/>
</ruleset>
<ruleset name="Diaspora">
  <target host="joindiaspora.com" />
  <target host="www.joindiaspora.com" />

  <rule from="^http://(www\.)?joindiaspora\.com/"
          to="https://joindiaspora.com/"/>
</ruleset>
<ruleset name="Die-Linke.de">
        <target host="die-linke.de" />
        <target host="www.die-linke.de" />
        <target host="linksmail.de" />
        <target host="www.linksmail.de" />

        <rule from="^http://(www\.)?die-linke\.de/" to="https://www.die-linke.de/"/>
        <rule from="^http://(www\.)?linksmail\.de/" to="https://www.linksmail.de/"/>
</ruleset>
<ruleset name="Digitec.ch">
   <target host="www.digitec.ch" />
   <target host="digitec.ch" />
   <securecookie host="^(.*\.)?digitec\.ch$" name=".*" />

   <rule from="^http://(www\.)?digitec\.ch/" to="https://www.digitec.ch/"/>
</ruleset>

<ruleset name="Discovery Place">
	<target host="discoveryplace.org" />
	<target host="www.discoveryplace.org" />
	<target host="discoveryplacekids.org" />
	<target host="www.discoveryplacekids.org" />

	<rule from="^http://(www\.)?discoveryplace\.org/" to="https://www.discoveryplace.org/" />
	<rule from="^http://(www\.)?discoveryplacekids\.org/" to="https://www.discoveryplacekids.org/" />
</ruleset><ruleset name="Diskusjon">
  <target host="diskusjon.no" />
  <target host="www.diskusjon.no" />

  <rule from="^http://diskusjon\.no/" to="https://diskusjon.no/"/>
  <rule from="^http://www\.diskusjon\.no/" to="https://www.diskusjon.no/"/>
</ruleset>

<!-- commenting system used by several large sites. -->
<ruleset name="Disqus">
	<target host="disqus.com" />
	<target host="www.disqus.com" />
	<rule from="^http://www\.disqus\.com/" to="https://disqus.com/"/>
	<rule from="^http://disqus\.com/" to="https://disqus.com/"/>
</ruleset>

<ruleset name="Ditt Distrikt">
  <target host="dittdistrikt.no" />
  <target host="www.dittdistrikt.no" />

  <rule from="^http://(www\.)?dittdistrikt\.no/" to="https://www.dittdistrikt.no/"/>
</ruleset>

<ruleset name="DjurRattsAlliansen.se">
  <target host="www.djurrattsalliansen.se" />
  <target host="djurrattsalliansen.se" />
  <rule from="^http://www\.djurrattsalliansen\.se/" to="https://djurrattsalliansen.se/"/>
  <rule from="^http://djurrattsalliansen\.se/" to="https://djurrattsalliansen.se/"/>
</ruleset>

<ruleset name="DnB Nor">
  <target host="www.dbnnor.no" />
  <target host="dbnnor.no" />

	<rule from="^http://(www\.)?dnbnor\.no/" to="https://www.dnbnor.no/"/>
</ruleset>
<ruleset name="Dnsexit">
	<target host="www.dnsexit.com" />
	<target host="dnsexit.com" />
	
	<securecookie host="^(.*\.)?dnsexit\.com$" name=".*" />
	
	<rule from="^http://(www\.)?dnsexit\.com/" to="https://www.dnsexit.com/"/>
</ruleset>
<ruleset name="DoctorsWithoutBorders.org">
	<target host="doctorswithoutborders.org" />
	<target host="www.doctorswithoutborders.org" />
	<rule from="^http://www\.doctorswithoutborders\.org/" to="https://www.doctorswithoutborders.org/"/>
	<rule from="^http://doctorswithoutborders\.org/" to="https://doctorswithoutborders.org/"/>
</ruleset>

<ruleset name="DocumentCloud">
  <target host="documentcloud.org" />
  <target host="www.documentcloud.org" />

  <rule from="^http://(www\.)?documentcloud\.org/" to="https://www.documentcloud.org/" />
</ruleset>
<ruleset name="Dopplr.com">
  <target host="dopplr.com" />
  <target host="www.dopplr.com" />

  <rule from="^http://(www\.)?dopplr\.com/" to="https://www.dopplr.com/" />
</ruleset>
<ruleset name="Dotster">
  <target host="dotster.com" />
  <target host="*.dotster.com" />

  <rule from="^http://dotster\.com/" to="https://dotster.com/"/>
  <rule from="^http://([^/:@]*)\.dotster\.com/" to="https://$1.dotster.com/"/>
</ruleset>
<!-- if we are going to include ads and tracking info, lets atleast do it by https.-->
<ruleset name="Doubleclick.net (disabled)" default_off="breaks some news sites">
	<target host="doubleclick.net" />
	<target host="*.doubleclick.net" />
	<target host="*.au.doubleclick.net" />
	<target host="*.uk.doubleclick.net" />
	<target host="www.googleadservices.com" />
	<rule from="^http://doubleclick\.net/" to="https://doubleclick.net/"/>
  <rule from="^http://([^/:@]*)\.doubleclick\.net/" to="https://$1.doubleclick.net/"/>
  <rule from="^http://([^/:@]*)\.au\.doubleclick\.net/" to="https://$1.au.doubleclick.net/"/>
  <rule from="^http://([^/:@]*)\.uk\.doubleclick\.net/" to="https://$1.uk.doubleclick.net/"/>
  <rule from="^http://www\.googleadservices\.com/" to="https://www.googleadservices.com/"/>
</ruleset>
<!-- NOTE: In its current form and with the current site configuration,
this rule protects login passwords but prevents the user from reading
other users' journals! -->

<ruleset name="Dreamwidth" default_off="breaks for non-logged-in users">
  <target host="www.dreamwidth.org" />
  <target host="dreamwidth.org" />

  <rule from="^http://(?:www\.)?dreamwidth\.org/" to="https://www.dreamwidth.org/"/>
</ruleset>
<ruleset name="DropDav">
  <target host="dropdav.com"/>
  <target host="www.dropdav.com"/>
  <target host="dav.dropdav.com"/>
  
  <securecookie host="^(.+\.)?dropdav\.com$" name=".*"/>

  <rule from="^http://(www\.)?dropdav\.com/" to="https://dropdav.com/"/>
  <rule from="^http://dav\.dropdav\.com/" to="https://dav.dropdav.com/" />
</ruleset>
<ruleset name="Dropbox">
  <target host="www.dropbox.com" />
  <target host="dropbox.com" />
  <target host="dl.dropbox.com" />
  <target host="dl-web.dropbox.com" />
  <target host="files.dropbox.com" />

  <securecookie host="^(.*\.)?dropbox\.com$" name=".*" />

  <rule from="^http://(dl|dl-web|files)\.dropbox\.com/" to="https://$1.dropbox.com/"/>
  <rule from="^http://(www\.)?dropbox\.com/" to="https://www.dropbox.com/"/>
  
  <!-- this fixes https://trac.torproject.org/projects/tor/ticket/3673 -->
  <exclusion pattern="http://(www\.)?dropbox.com/frameresize.htm" />

  <!-- This breaks blog.dropbox.com and forums.dropbox.com, for example
  <rule from="^http://([^/:@]+)\.dropbox\.com/" to="https://$1.dropbox.com/"/>
  -->
</ruleset>
<ruleset name="Drupal">
  <target host="*.drupal.org" />
  <target host="drupal.org" />

  <rule from="^http://(www\.)?drupal\.org/" to="https://drupal.org/"/>
  <rule from="^http://(sec|association|chicago2011)\.drupal\.org/" to="https://$1.drupal.org/"/>
  <!-- Following a bug report and https://drupal.org/node/952992 -->
  <!-- Some of the following don't work. -->
  <!--
  <rule from="^http://(groups|localize|testing|api|association|scratch|beta|chicago2011|london2011)\.drupal\.org/" to="https://$1.drupal.org/"/>
   -->
</ruleset>
<!-- Av vendor. includes plaintext from st.drweb.com -->
<ruleset name="Dr.Web">
	<target host="drweb.com" />
	<target host="www.drweb.com" />
	<target host="st.drweb.com" />
	<rule from="^http://www\.drweb\.com/" to="https://www.drweb.com/"/>
	<rule from="^http://st\.drweb\.com/" to="https://st.drweb.com/"/>
	<rule from="^http://drweb\.com/" to="https://www.drweb.com/"/>
</ruleset>

<ruleset name="DuckDuckGo">
  <target host="duckduckgo.com" />
  <target host="*.duckduckgo.com" />
  <target host="duck.co" />
  
  <rule from="^http://duckduckgo\.com/" to="https://duckduckgo.com/"/>
  <rule from="^http://([^/:@]*)\.duckduckgo\.com/" to="https://$1.duckduckgo.com/"/>
  <rule from="^http://duck\.co/" to="https://duck.co/"/>
</ruleset>
<ruleset name="Dynamo Dresden">
        <target host="cms.dynamo-dresden.de" />
        <securecookie host="^(.*\.)?dynamo-dresden\.de$" name=".*" />

        <rule from="^http://(cms\.)?dynamo-dresden\.de/" to="https://cms.dynamo-dresden.de/"/>
</ruleset>
<ruleset name="ED.gov">
  <target host="www.ed.gov" />
  <target host="nces.ed.gov" />
  <target host="ed.gov" />
  <rule from="^http://www\.ed\.gov/" to="https://www.ed.gov/"/>
  <rule from="^http://nces\.ed\.gov/" to="https://nces.ed.gov/"/>
  <rule from="^http://ed\.gov/" to="https://www.ed.gov/"/>
</ruleset>

<ruleset name="EFF">
  <exclusion pattern="^http://action\.eff\.org/"/>
  <target host="*.eff.org" />
  <target host="eff.org" />

  <rule from="^http://eff\.org/" to="https://eff.org/"/>

  <rule from="^http://www\.eff\.org/" to="https://www.eff.org/"/>

  <rule from="^http://secure\.eff\.org/shop"
          to="https://secure.eff.org/site/Ecommerce?store_id=2441" />

  <rule from="^http://secure\.eff\.org/renew"
          to="https://secure.eff.org/site/Donation2" />

  <rule from="^http://secure\.eff\.org/wiretapping"
          to="https://secure.eff.org/site/Donation2?idb=1344423068&#x26;df_id=1220" />

  <rule from="^http://secure\.eff\.org/donate"
          to="https://secure.eff.org/site/Donation2?idb=43804189&#x26;df_id=1200" />

  <rule from="^http://secure\.eff\.org/mechaposter"
        to="https://secure.eff.org/site/Ecommerce?VIEW_PRODUCT=true&#x26;product_id=2161&#x26;store_id=2441" />

  <rule from="^http://([^/:@]*)\.eff\.org/" to="https://$1.eff.org/"/>
</ruleset>
<ruleset name="EPA (.ie)">
  <target host="www.epa.ie" />
  <target host="epa.ie" />

  <exclusion pattern="^http://gis\.epa\.ie/"/> <!-- more a reminder to check for support at later date -->
  <!-- cert valid only for www. -->
  <rule from="^http://(www\.)?epa\.ie/" to="https://www.epa.ie/"/>
</ruleset>
<ruleset name="EPIC">
	<target host="epic.org" />
	<target host="www.epic.org" />

	<rule from="^http://(www\.)?epic\.org/" to="https://epic.org/" />
</ruleset>
<ruleset name="ESB.ie">
  <target host="www.esb.ie" />
  <target host="esb.ie" />
  <target host="www.esbie.ie" />
  <target host="esbie.ie" />

  <rule from="^http://(www\.)?esb\.ie/" to="https://www.esb.ie/"/>
  <rule from="^http://(www\.)?esbie\.ie/" to="https://$1esbie.ie/"/>
  <!-- esbi.ie and esbtelecoms.ie have no ssl support at this time -->
</ruleset>
<ruleset name="ESISS">
  <target host="esiss.ac.uk" />
  <target host="www.esiss.ac.uk" />

  <securecookie host="^(.+\.)?esiss\.ac\.uk$" name=".*"/>

  <rule from="^http://(www\.)?esiss\.ac\.uk/" to="https://www.esiss.ac.uk/"/>
</ruleset>
<ruleset name="ESRB">
  <target host="www.esrb.org" />
  <target host="esrb.org" />

  <rule from="^http://(www\.)?esrb\.org/" to="https://www.esrb.org/"/>
</ruleset><ruleset name="ETS">
  <target host="ets.org" />
  <target host="*.ets.org" />

  <rule from="^http://(www\.)?ets\.org/" to="https://www.ets.org/"/>
  <rule from="^http://(apstudio|ept-elm|gedcalifornia|gresearch|ibtsd3|mygre|onyx|ppi|srp|title2|toefl-registration|toeflrts)\.ets\.org/" to="https://$1.ets.org/"/>
</ruleset><ruleset name="EZTV">
  <target host="www.ezrss.it" />
  <target host="ezrss.it" />
  <target host="www.eztv.it" />
  <target host="eztv.it" />
  <target host="www.zoink.it" />
  <target host="zoink.it" />
  <target host="www.ezimages.eu" />
  <target host="ezimages.eu" />

  <rule from="^(http|https)://(www\.)?(ezrss\.it|eztv\.it|zoink\.it|ezimages\.eu)/" to="https://$3/"/>
  <rule from="^http://torrent\.zoink\.it/" to="https://torrent.zoink.it/"/>
</ruleset>
<ruleset name="EasyNews">
  <target host="www.easynews.com" />
  <target host="easynews.com" />
  <target host="members.easynews.com" />

  <rule from="^http://(www\.)?easynews\.com/" to="https://easynews.com/"/>
  <rule from="^http://members\.easynews\.com/" to="https://secure.members.easynews.com/"/>
</ruleset>

<ruleset name="Economist">
<target host="www.economist.com" />
<target host="economist.com" />
<target host="media.economist.com" />
<rule from="^http://(www\.)?economist\.com/" to="https://www.economist.com/"/>
<rule from="^http://media\.economist\.com/" to="https://media.economist.com/"/>
</ruleset>
<ruleset name="EdUbuntu">
  <target host="edubuntu.org" />
  <target host="www.edubuntu.org" />

  <rule from="^http://(www\.)?edubuntu\.org/" to="https://edubuntu.org/"/>
</ruleset>
<ruleset name="Edas.info">
  <target host="edas.info" />
  <target host="www.edas.info" />

  <rule from="^http://(www\.)?edas\.info/" to="https://www.edas.info/" />
</ruleset>
<ruleset name="Egg">
  <target host="*.egg.com"/>
  <target host="egg.com"/>

  <rule from="^http://(new\.|www\.)?egg\.com/" to="https://new.egg.com/"/>
  <rule from="^http://(your|phonehome)\.egg\.com/" to="https://$1.egg.com/"/>
</ruleset>
<ruleset name="ehrensenf" default_off="Cert warning">
  <target host="ehrensenf.de"/>
  <target host="www.ehrensenf.de"/>

  <securecookie host="^(.*\.)?ehrensenf\.de$" name=".*" />

  <rule from="^http://(www\.)?ehrensenf\.de/" to="https://www.ehrensenf.de/"/>
</ruleset>
<ruleset name="Elgiganten.se">
	<target host="elgiganten.se" />
	<rule from="^http://elgiganten\.se/" to="https://www.elgiganten.se/"/>
	<rule from="^http://www\.elgiganten\.se/" to="https://www.elgiganten.se/"/>
</ruleset>

<ruleset name="Emediate.eu">
  <target host="eas4.emediate.eu" />
  <rule from="^http://eas4\.emediate\.eu/" to="https://eas4.emediate.eu/"/>
</ruleset>

<ruleset name="Emsisoft">
	<target host="emsisoft.com" />
	<target host="www.emsisoft.com" />
	<rule from="^http://www\.emsisoft\.com/" to="https://www.emsisoft.com/"/>
	<rule from="^http://emsisoft\.com/" to="https://www.emsisoft.com/"/>
</ruleset>

<ruleset name="EnergyStar">
  <target host="www.energystar.gov" />
  <target host="energystar.gov" />

  <rule from="^http://(www\.)?energystar\.gov/" to="https://www.energystar.gov/"/>
</ruleset>

<ruleset name="Eniro.se">
  <target host="eniro.se" />
  <rule from="^http://eniro\.se/" to="https://www.eniro.se/"/>
  <rule from="^http://www\.eniro\.se/" to="https://www.eniro.se/"/>
</ruleset>

<ruleset name="Enom">
  <!-- Probably not be shippable until
  http://www.enom.com/domainsearch/default.aspx is unbroken or an appropriate
  exclusion is written for it -->
  <target host="www.enom.com" />
  <target host="enom.com" />

  <rule from="^http://(www\.)?enom\.com/" to="https://www.enom.com/"/>
</ruleset>
<ruleset name="Epilepsy Foundation of America">
	<target host="epilepsyfoundation.org" />
	<target host="www.epilepsyfoundation.org" />

	<rule from="^http://(www\.)?epilepsyfoundation\.org/" to="https://www.epilepsyfoundation.org/" />
</ruleset><ruleset name="Epilepsy Ontario">
	<target host="epilepsyontario.org" />
	<target host="www.epilepsyontario.org" />

	<rule from="^http://(www\.)?epilepsyontario\.org/" to="https://www.epilepsyontario.org/" />

	<!-- Invoking https://epilepsyontario.org/ gives a certificate
	error, so redirect https://epilepsyontario.org/ to
	https://www.epilepsyontario.org/ -->
	<rule from="^https://epilepsyontario\.org/" to="https://www.epilepsyontario.org/" />
</ruleset><ruleset name="Epson.com (partial)">
  <target host="www.epson.com" />
  <target host="epson.com" />
  <target host="was.epson.com" />
  <target host="pos.epson.com" />

	<exclusion pattern="^http://(www\.)?epson\.com/cgi-bin/Store/jsp/Product/Photos.do"/>
	<!-- URLs such as http://www.epson.com/snowleopard -->
	<exclusion pattern="^http://(www\.)?epson\.com/([a-zA-Z]([a-zA-Z0-9])+){1}$"/>
	<exclusion pattern="^http://(www\.)?epson\.com/cgi-bin/Store/consumer/"/>

	<rule from="^http://(www\.)?epson\.com/" to="https://www.epson.com/"/>
	<rule from="^http://was\.epson\.com/" to="https://was.epson.com/"/>
	<rule from="^http://pos\.epson\.com/" to="https://pos.epson.com/"/>
	<rule from="^https://(www\.)?epson\.com/(([a-zA-Z]([a-zA-Z0-9])+){1})$" to="https://$1epson.com/$2"/>
</ruleset>


<ruleset name="Erowid">
  <target host="www.erowid.com" />
  <target host="erowid.com" />
  <target host="www.erowid.org" />
  <target host="erowid.org" />

  <rule from="^http://(www\.)?erowid\.(com|org)/" to="https://www.erowid.org/"/>
</ruleset>
<ruleset name="Euro-ix.net">
  <target host="euro-ix.net" />
  <target host="www.euro-ix.net" />

  <rule from="^http://(www\.)?euro-ix\.net/" to="https://www.euro-ix.net/" />
</ruleset>
<!-- almost everything on europa.eu is missconfigured. but there are some exceptions. -->
<ruleset name="Europa.eu">
	<target host="consilium.europa.eu" />
	<target host="www.consilium.europa.eu" />
	<target host="www.ecb.europa.eu" />
	<target host="www.ecb.eu" />
	<rule from="^http://www\.consilium\.europa\.eu/" to="https://www.consilium.europa.eu/"/>
	<rule from="^http://consilium\.europa\.eu/" to="https://www.consilium.europa.eu/"/>
	<rule from="^http://www\.ecb\.europa\.eu/" to="https://www.ecb.europa.eu/"/>
	<rule from="^http://www\.ecb\.eu/" to="https://www.ecb.europa.eu/"/>
</ruleset>
<ruleset name="Eventbrite">
  <target host="eventbrite.com" />
  <target host="*.eventbrite.com" />

  <rule from="^http://([^/:@]*\.)?eventbrite\.com/" to="https://$1eventbrite.com/" />
</ruleset>
<ruleset name="Evernote">
  <target host="www.evernote.com" />
  <target host="evernote.com" />

  <securecookie host="^(.*\.)?evernote\.com$" name=".*" />

  <rule from="^http://(www\.)?evernote\.com/" to="https://www.evernote.com/"/>
</ruleset>
<!-- uses data from stats.examiner.com that doesnt allow https with a correct cert. 2o7.net-->
<!-- Uses b.scorecardresearch.com, that only provides ssl via akamai. -->
<ruleset name="examiner.com">
	<target host="examiner.com" />
	<target host="www.examiner.com" />
	<target host="cdn2-b.examiner.com" />
	<rule from="^http://examiner\.com/" to="https://www.examiner.com/"/>
	<rule from="^http://www\.examiner\.com/" to="https://www.examiner.com/"/>
	<rule from="^http://cdn2\-b\.examiner\.com/" to="https://cdn2-b.examiner.com/"/>
</ruleset>

<ruleset name="EzineArticles">
  <target host="www.ezinearticles.com" />
  <target host="blog.ezinearticles.com" />
  <target host="shop.ezinearticles.com" />
  <target host="subscriptions.ezinearticles.com" />
  <target host="ezinearticles.com" />

  <rule from="^http://(www\.)?ezinearticles\.com/" to="https://ezinearticles.com/"/>
  <rule from="^http://(subscriptions)\.ezinearticles\.com/" to="https://$1.ezinearticles.com/"/>
  <!--
  <rule from="^http://(blog|shop|subscriptions)\.ezinearticles\.com/" to="https://$1.ezinearticles.com/"/>
  -->
</ruleset>
<ruleset name="FAAN College Network">
	<target host="faancollegenetwork.org" />
	<target host="www.faancollegenetwork.org" />

	<rule from="^http://(www\.)?faancollegenetwork\.org/" to="https://www.faancollegenetwork.org/" />
</ruleset><ruleset name="FAZ">
  <target host="www.faz.net" />
  <target host="faz.net" />
  <target host="www.faz.de" />
  <target host="faz.de" />

  <rule from="^http://(www\.)?faz\.(net|de)/" to="https://www.faz.net/"/>
</ruleset>
<ruleset name="Facebook+ (may break apps)" default_off="waiting for full FB cert deployment">
  <target host="facebook.com" />
  <target host="*.facebook.com" />

  <securecookie host="^(.*\.)?facebook\.com$" name="c_user" />
  <securecookie host="^(.*\.)?facebook\.com$" name="lu" />
  <securecookie host="^(.*\.)?facebook\.com$" name="sct" />
  <securecookie host="^(.*\.)?facebook\.com$" name="xs" />

  <rule from="^http://([a-z][a-z])-([a-z][a-z])\.facebook\.com/" to="https://www.facebook.com/"/>

  <rule from="^http://apps\.facebook\.com/" to="https://apps.facebook.com/" />
</ruleset>
<ruleset name="FFMPEG" default_off="Certificate and SSL handshake errors">
  <target host="www.ffmpeg.org" />
  <target host="ffmpeg.org" />

  <rule from="^(http|https)://(www\.)?ffmpeg\.org/" to="https://ffmpeg.org/"/>
</ruleset>
<ruleset name="FHI.se">
	<target host="fhi.se" />
	<target host="www.fhi.se" />
	<rule from="^http://www\.fhi\.se/" to="https://www.fhi.se/"/>
	<rule from="^http://fhi\.se/" to="https://fhi.se/"/>
</ruleset>

<ruleset name="FHS.se">
	<target host="www.fhs.se" />
	<target host="fhs.se" />
	<rule from="^http://fhs\.se/" to="https://www.fhs.se/"/>
	<rule from="^http://www\.fhs\.se/" to="https://www.fhs.se/"/>
</ruleset>

<ruleset name="FMV.se">
	<target host="fmv.se" />
	<target host="www.fmv.se" />
	<rule from="^http://www\.fmv\.se/" to="https://www.fmv.se/"/>
	<rule from="^http://fmv\.se/" to="https://www.fmv.se/"/>
</ruleset>

<ruleset name="Free Software Foundation">
	<target host="fsf.org"/>
	<target host="www.fsf.org"/>
	<target host="static.fsf.org"/>
	<target host="gnu.org"/>
	<target host="*.gnu.org"/>

	<rule from="^http://(www\.)?fsf\.org/" to="https://www.fsf.org/"/>
	<rule from="^http://static\.fsf\.org/" to="https://static.fsf.org/"/>
        <rule from="^http://(www\.)?gnu\.org/" to="https://www.gnu.org/"/>
        <rule from="^http://(lists|savannah)\.gnu\.org/" to="https://$1.gnu.org/"/>
</ruleset>
<ruleset name="FSFE.org">
  <target host="www.fsfe.org" />
  <target host="fsfe.org" />
  <rule from="^http://www\.fsfe\.org/" to="https://www.fsfe.org/"/>
  <rule from="^http://fsfe\.org/" to="https://fsfe.org/"/>
</ruleset>

<ruleset name="FTD.de">
  <target host="www.ftd.de" />
  <target host="ftd.de" />

  <rule from="^http://(www\.)?ftd\.de/" to="https://www.ftd.de/"/>
</ruleset>
<ruleset name="Facebook">
  <target host="facebook.com" />
  <target host="*.facebook.com" />
  <target host="*.facebook.de" />
  <target host="facebook.de" />
  <target host="*.facebook.fr" />
  <target host="facebook.fr" />
  <target host="connect.facebook.net" />
  <target host="*.fbcdn.net" />
  <target host="fbcdn-profile-a.akamaihd.net" />

  <rule from="^http://(www\.)?facebook\.com/" to="https://www.facebook.com/"/>
  <rule from="^http://m\.facebook\.com/"      to="https://m.facebook.com/"/>
  <rule from="^http://ssl\.facebook\.com/"    to="https://ssl.facebook.com/"/>
  <rule from="^http://login\.facebook\.com/"  to="https://login.facebook.com/"/>
  <rule from="^http://developers\.facebook\.com/"  to="https://developers.facebook.com/"/>
  <rule from="^http://www\.v6\.facebook\.com/" 
          to="https://www.v6.facebook.com/"/>

  <rule from="^http://s-static\.ak\.facebook\.com/"
          to="https://s-static.ak.facebook.com/" />

  <rule from="^http://profile\.ak\.facebook\.com/"
          to="https://profile.ak.facebook.com/" />

  <rule from="^http://badge\.facebook\.com/badge/"
          to="https://www.facebook.com/badge/"/>

  <rule from="^https?://(de-de\.|www\.)?facebook\.de/"
          to="https://www.facebook.com/"/>
  <rule from="^https?://de-de\.facebook\.com/"
          to="https://www.facebook.com/"/>

  <rule from="^https?://(fr-fr\.|www\.)?facebook\.fr/"
          to="https://www.facebook.com/"/>
  <rule from="^https?://fr-fr\.facebook\.com/"
          to="https://www.facebook.com/"/>

  <rule from="^http://connect\.facebook\.net/"
          to="https://connect.facebook.net/"/>

  <rule from="^http://([^@:\./]+)\.fbcdn\.net/"
          to="https://$1.fbcdn.net/"/>

  <rule from="^http://fbcdn-profile-a\.akamaihd\.net/"
          to="https://fbcdn-profile-a.akamaihd.net/"/>
</ruleset><ruleset name="Fanboy">
  <target host="fanboy.co.nz" />
  <target host="www.fanboy.co.nz" />
  <target host="secure.fanboy.co.nz" />

  <securecookie host="^(.+\.)?fanboy\.co\.nz$" name=".*"/>

  <rule from="^http://(www\.)?fanboy\.co\.nz/" to="https://secure.fanboy.co.nz/"/>
  <rule from="^http://secure\.fanboy\.co\.nz/" to="https://secure.fanboy.co.nz/"/>
</ruleset>
<!-- farmaciforbundet.se is a swedish labour union -->
<ruleset name="Farmaciforbundet.se">
	<target host="farmaciforbundet.se" />
	<target host="www.farmaciforbundet.se" />
	<rule from="^http://farmaciforbundet\.se/" to="https://www.farmaciforbundet.se/"/>
	<rule from="^http://www\.farmaciforbundet\.se/" to="https://www.farmaciforbundet.se/"/>
</ruleset>

<ruleset name="FAS.org">
  <target host="www.fas.org" />
  <target host="fas.org" />
  <rule from="^http://www\.fas\.org/" to="https://www.fas.org/"/>
  <rule from="^http://fas\.org/" to="https://fas.org/"/>
</ruleset>

<!-- medica info.. medical info should be private -->
<ruleset name="Fass.se">
	<target host="fass.se" />
	<target host="www.fass.se" />
	<rule from="^http://fass\.se/" to="https://www.fass.se/"/>
	<rule from="^http://www\.fass\.se/" to="https://www.fass.se/"/>
</ruleset>

<ruleset name="Fastmail">
  <target host="www.fastmail.fm" />
  <target host="fastmail.fm" />

  <rule from="^http://(www\.)?fastmail\.fm/" to="https://fastmail.fm/"/>
</ruleset>
<ruleset name="Fedora Project">
  <target host="fedoraproject.org" />
  <target host="*.fedoraproject.org" />

  <rule from="^http://(www\.)?fedoraproject\.org/" to="https://fedoraproject.org/" />
  <rule from="^http://(alt|archives|blogs|boot|docs|lists|mirrors|spins|start|talk)\.fedoraproject\.org/" to="https://$1.fedoraproject.org/" />
</ruleset><ruleset name="FeedMyInbox">
  <target host="www.feedmyinbox.com" />
  <target host="feedmyinbox.com" />

  <securecookie host="^(.*\.)?feedmyinbox\.com$" name=".*" />

  <rule from="^http://(www\.)?feedmyinbox\.com/" to="https://www.feedmyinbox.com/"/>
</ruleset>
<ruleset name="Fefe">
  <target host="blog.fefe.de" />

  <rule from="^http://blog\.fefe\.de/" to="https://blog.fefe.de/"/>
</ruleset>

<ruleset name="Feide">
  <target host="idp.feide.no" />

  <rule from="^http://idp\.feide\.no/" to="https://idp.feide.no/"/>
</ruleset>
<ruleset name="Fianna Fail">
  <target host="www.fiannafail.ie" />
  <target host="fiannafail.ie" />

  <rule from="^http://(www\.)?fiannafail\.ie/" to="https://secure.fiannafail.ie/"/>
</ruleset>
<ruleset name="Finn">
  <target host="finn.no" />
  <target host="www.finn.no" />

  <exclusion pattern="^http://labs\.finn\.no/"/>
  <exclusion pattern="^http://kart\.finn\.no/"/>
  <exclusion pattern="^http://oppdrag\.finn\.no/"/>
  <exclusion pattern="^http://katalog\.finn\.no/"/>
  <exclusion pattern="^http://www\.katalog\.finn\.no/"/>
  <rule from="^http://finn\.no/" to="https://finn.no/"/>
  <rule from="^http://www\.finn\.no/" to="https://www.finn.no/"/>
</ruleset>

<!-- already enforces https. adding to prevent sslstrips on port 80 -->
<ruleset name="Fiskeriverket.se">
	<target host="fiskeriverket.se" />
	<target host="www.fiskeriverket.se" />
	<rule from="^http://fiskeriverket\.se/" to="https://www.fiskeriverket.se/"/>
	<rule from="^http://www\.fiskeriverket\.se/" to="https://www.fiskeriverket.se/"/>
</ruleset>

<ruleset name="FiveTV">
  <target host="*.five.tv" />
  <target host="five.tv" />

  <rule from="^http://(www\.)?five\.tv/" to="https://www.five.tv/"/>
  <rule from="^http://(about|demand|fwd|sso)\.five\.tv/" to="https://$1.five.tv/"/>
</ruleset>
<!-- already enforces https. adding to prevent sslstrips on port 80 -->
<ruleset name="Flashback.org">
	<target host="flashback.org" />
	<target host="www.flashback.org" />
	<rule from="^http://flashback\.org/" to="https://www.flashback.org/"/>
	<rule from="^http://www\.flashback\.org/" to="https://www.flashback.org/"/>
</ruleset>

<ruleset name="Flattr">
  <target host="api.flattr.com" />
  <target host="www.flattr.com" />
  <target host="flattr.com" />

  <rule from="^http://(www\.)?flattr\.com/" to="https://flattr.com/" />
  <rule from="^http://api\.flattr\.com/" to="https://api.flattr.com/" />
</ruleset>
<ruleset name="Flickr (partial)">
	<target host="www.flickr.com" />
	<target host="flickr.com" />

	<rule from="^http://(www\.)?flickr\.com/" to="https://secure.flickr.com/"/>
</ruleset>
<ruleset name="FluxBB.org">
  <target host="www.fluxbb.org" />
  <target host="fluxbb.org" />

  <rule from="^http://(www\.)?fluxbb\.org/" to="https://fluxbb.org/"/>
</ruleset><ruleset name="Fokus Bank">
  <target host="fokus.no" />
  <target host="www.fokus.no" />

  <rule from="^http://fokus\.no/" to="https://www.fokus.no/"/>
  <rule from="^http://www\.fokus\.no/" to="https://www.fokus.no/"/>
</ruleset>

<!-- This is a swedish insurance company -->
<ruleset name="Folksam.se">
	<target host="folksam.se" />
	<target host="www.folksam.se" />
	<rule from="^http://www\.folksam\.se/" to="https://www.folksam.se/"/>
	<rule from="^http://folksam\.se/" to="https://www.folksam.se/"/>
</ruleset>

<ruleset name="Food Allergy Initiative">
	<target host="faiusa.org" />
	<target host="www.faiusa.org" />

	<rule from="^http://(www\.)?faiusa\.org/" to="https://www.faiusa.org/" />
</ruleset><ruleset name="Food Allergy &amp; Anaphylaxis Network">
	<target host="foodallergy.org"/>
	<target host="www.foodallergy.org"/>

	<rule from="^http://(www\.)?foodallergy\.org/" to="https://www.foodallergy.org/" />
</ruleset><ruleset name="Foris Wine">
  <target host="foriswine.com" />
  <target host="www.foriswine.com" />

  <rule from="^http://(www\.)?foriswine\.com/" to="https://www.foriswine.com/"/>
</ruleset>
<ruleset name="Forsakringskassan.se">
  <target host="www.forsakringskassan.se" />
  <target host="forsakringskassan.se" />
  <rule from="^http://www\.forsakringskassan\.se/" to="https://www.forsakringskassan.se/"/>
  <rule from="^http://forsakringskassan\.se/" to="https://www.forsakringskassan.se/"/>
</ruleset>

<!-- forsvarsforbundet.se is a swedish labour union -->
<ruleset name="Forsvarsforbundet.se">
	<target host="forsvarsforbundet.se" />
	<target host="www.forsvarsforbundet.se" />
	<rule from="^http://forsvarsforbundet\.se/" to="https://www.forsvarsforbundet.se/"/>
	<rule from="^http://www\.forsvarsforbundet\.se/" to="https://www.forsvarsforbundet.se/"/>
</ruleset>

<!-- Fortum is nordic power company. -->
<ruleset name="Fortum.se">
	<target host="fortum.se" />
	<target host="www.fortum.se" />
	<target host="fortum.fi" />
	<target host="www.fortum.fi" />
	<rule from="^http://fortum\.se/" to="https://www.fortum.se/"/>
	<rule from="^http://www\.fortum\.se/" to="https://www.fortum.se/"/>
	<rule from="^http://fortum\.fi/" to="https://www.fortum.fi/"/>
	<rule from="^http://www\.fortum\.fi/" to="https://www.fortum.fi/"/>
</ruleset>

<ruleset name="Foursquare.com">
  <target host="foursquare.com" />
  <target host="www.foursquare.com" />

  <rule from="^http://(www\.)?foursquare\.com/" to="https://foursquare.com/" />
</ruleset>
<ruleset name="Freedombox Foundation">
  <target host="freedomboxfoundation.org" />
  <target host="www.freedomboxfoundation.org" />

  <rule from="^http://(www\.)?freedomboxfoundation\.org/" to="https://www.freedomboxfoundation.org/"/>
</ruleset>

<ruleset name="Freelancer">
  <target host="freelancer.com" />
  <target host="*.freelancer.com" />
  <target host="freelancer.co.uk" />
  <target host="*.freelancer.co.uk" />

  <securecookie host="^(.+\.)?freelancer\.(com|co\.uk)$" name=".*"/>

  <rule from="^http://(www\.)?freelancer\.(com|co\.uk)/" to="https://www.freelancer.$2/"/>
  <rule from="^http://(cdn[0-9]+)\.freelancer\.(com|co\.uk)/" to="https://$1.freelancer.$2/"/>
</ruleset>
<ruleset name="Freenet">
  <target host="*.freenetproject.org" />
  <target host="freenetproject.org" />

	<rule from="^http://freenetproject\.org/" to="https://freenetproject.org/"/>
	<rule from="^http://downloads\.freenetproject\.org/" to="https://downloads.freenetproject.org/"/>
	<rule from="^http://emu\.freenetproject\.org/" to="https://emu.freenetproject.org/"/>
	<rule from="^http://bugs\.freenetproject\.org/" to="https://bugs.freenetproject.org/"/>
	<rule from="^http://checksums\.freenetproject\.org/" to="https://checksums.freenetproject.org/"/>
</ruleset>
<ruleset name="Freenode.net" default_off="CACert">
  <target host="freenode.net" />
  <target host="*.freenode.net" />

  <rule from="^http://(www\.)?freenode\.net/" to="https://www.freenode.net/"/>
  <rule from="^http://(blog|dev|webchat)\.freenode\.net/"
          to="https://$1.freenode.net/"/>
</ruleset>
<ruleset name="Der Freitag" default_off="self signed">
  <target host="www.freitag.de" />
  <target host="freitag.de" />

  <rule from="^http://(www\.)?freitag\.de/" to="https://www.freitag.de/"/>
</ruleset>
<ruleset name="Fridge">
  <target host="frid.ge" />
  <target host="www.frid.ge" />

  <securecookie host="^(.+\.)?frid\.ge$" name=".*"/>

  <rule from="^http://(www\.)?frid\.ge/" to="https://frid.ge/"/>
</ruleset>
<ruleset name="Friendfeed">
  <target host="www.friendfeed.com" />
  <target host="friendfeed.com" />

  <rule from="^http://(www\.)?friendfeed\.com/" to="https://friendfeed.com/"/>
</ruleset>
<ruleset name="Frontline Defenders">
  <target host="www.frontlinedefenders.org" />
  <target host="frontlinedefenders.org" />

  <rule from="^http://(www\.)?frontlinedefenders\.org/" to="https://$1frontlinedefenders.org/"/>
</ruleset>
<ruleset name="FusionIO">
  <target host="fusionio.com" />
  <target host="www.fusionio.com" />
  <target host="support.fusionio.com" />
  <target host="quote.fusionio.com" />

  <securecookie host="^(.+\.)?fusionio\.com$" name=".*"/>

  <rule from="^http://fusionio\.com/" to="https://fusionio.com/"/>
  <rule from="^http://(www|support|quote)\.fusionio\.com/" to="https://$1.fusionio.com/"/>
</ruleset>
<ruleset name="GLAD (Gay &amp; Lesbian Advocates &amp; Defenders)">
	<target host="glad.org" />
	<target host="*.glad.org" />

	<rule from="^http://(www\.)?glad\.org/" to="https://www.glad.org/" />
	<rule from="^http://([a-zA-Z0-9\-]+)\.glad\.org/" to="https://$1.glad.org/" />

	<!-- Invoking https://glad.org/ produces a certificate error, so redirect
	https://glad.org/ to https://www.glad.org/ -->
	<rule from="^https://glad\.org/" to="https://www.glad.org/" />
</ruleset>
<ruleset name="GMX" match_rule="http:.*gmx\.">
  <target host="www.gmx.*" />
  <target host="gmx.*" />
  <target host="www.gmx.co.uk" />
  <target host="gmx.co.uk" />
  <target host="service.gmx.com" />
  <target host="service.gmx.net" />
  <target host="help.gmx.com" />
  <target host="storage-file-eu.gmx.com" />

  <!-- in countries like se, it, ca, and ru, www.gmx.cctld redirects
       to www.gmx.com; we may as well secure that a bit but it should
       work regardless of whether we got all of these countries -->

  <rule from="^http://(www\.)?gmx\.(se|it|ca|ru)/"
          to="https://www.gmx.com/" />

  <!-- In these domains GMX supports SSL right at the homepage -->
  <!-- https://gmx.com appears to work but hopefully redirecting away won't
  break anything.-->

  <rule from="^http://(www\.)?gmx\.(fr|co\.uk|ch|at|com|net)/"
          to="https://www.gmx.$2/" />

  <!-- gmx.de lives at gmx.net -->

  <rule from="^http://(www\.)?gmx\.de/"
          to="https://www.gmx.net/" />

  <!-- a lot of the back-end work is reportedly done by service.gmx.* -->

  <rule from="^http://service\.gmx\.(com|net)/"
          to="https://service.gmx.$1/" />

  <rule from="^http://help\.gmx\.com/"
          to="https://help.gmx.com/" />
	
   <!-- Gmx file storage service (WebDAV) -->
  <rule from="^http://storage-file-eu\.gmx\.com/"
          to="https://storage-file-eu.gmx.com/" />
</ruleset>
<ruleset name="GNOME (partial)">
  <target host="mail.gnome.org" />
  <target host="live.gnome.org" />

  <rule from="^http://(mail|live)\.gnome\.org/" to="https://$1.gnome.org/" />
</ruleset>
<ruleset name="Gibson Research">
<target host="www.grc.com" />
<target host="grc.com" />
<rule from="^http://(www\.)?grc\.com/" to="https://www.grc.com/"/>
</ruleset>
<ruleset name="GRSecurity.net">
	<target host="grsecurity.net" />
	<target host="www.grsecurity.net" />
	<target host="forums.grsecurity.net" />
	<rule from="^http://grsecurity\.net/" to="https://grsecurity.net/"/>
	<rule from="^http://www\.grsecurity\.net/" to="https://grsecurity.net/"/>
	<rule from="^http://forums\.grsecurity\.net/" to="https://forums.grsecurity.net/"/>
</ruleset>

<!-- Gothenburg university -->
<!-- lots of subdomains lack ssl, and the site does less intelligent rewriteing. how to fix?.-->
<ruleset name="GU.se">
	<target host="www.gu.se" />
	<target host="gu.se" />
	<rule from="^http://gu\.se/" to="https://www.gu.se/"/>
	<rule from="^http://www\.gu\.se/" to="https://www.gu.se/"/>
</ruleset>

<ruleset name="Gandi">
  <target host="www.gandi.net" />
  <target host="gandi.net" />

  <rule from="^http://(www\.)?gandi\.net/" to="https://www.gandi.net/"/>
</ruleset>
<!-- Av vendor. includes plaintext from st.gdata-software.com -->
<ruleset name="G Data Software">
	<target host="gdata-software.com" />
	<target host="www.gdata-software.com" />
	<rule from="^http://www\.gdata-software\.com/" to="https://www.gdata-software.com/"/>
	<rule from="^http://gdata-software\.com/" to="https://gdata-software.com/"/>
</ruleset>

<!-- slashdot stores most of their stuff here -->
<ruleset name="Geek.net">
	<target host="www.geek.net" />
	<target host="geek.net" />
	<rule from="^http://geek\.net/" to="https://geek.net/"/>
	<rule from="^http://www\.geek\.net/" to="https://geek.net/"/>
</ruleset>

<ruleset name="Gentoo" match_rule="http://.*\.gentoo\.org">
  <target host="bugs.gentoo.org" />
  <target host="forums.gentoo.org" />

  <!-- Considered but not included:
         devmanual.gentoo.org
         anoncvs.gentoo.org
         store.gentoo.org
         packages.gentoo.org 
   -->

  <rule from="^http://bugs\.gentoo\.org/" to="https://bugs.gentoo.org/"/>
  <rule from="^http://forums\.gentoo\.org/" to="https://forums.gentoo.org/"/>
</ruleset>
<!--  -->
<ruleset name="georgetown.edu">
  <target host="www.law.georgetown.edu" />
  <target host="www.georgetown.edu" />
  <target host="georgetown.edu" />
  <rule from="^http://www\.law\.georgetown\.edu/" to="https://www.law.georgetown.edu/"/>
  <rule from="^http://www\.georgetown\.edu/" to="https://www.georgetown.edu/"/>
  <rule from="^http://georgetown\.edu/" to="https://www.georgetown.edu/"/>
</ruleset>

<ruleset name="GetFirebug">
  <target host="www.getfirebug.com" />
  <target host="getfirebug.com" />

  <rule from="^http://(www\.)?getfirebug\.com/" to="https://getfirebug.com/"/>
</ruleset>
<ruleset name="GetPersonas.com">
        <target host="getpersonas.com" />
        <target host="www.getpersonas.com" />

        <rule from="^http://(www\.)?getpersonas\.com/" to="https://www.getpersonas.com/"/>
</ruleset>
<ruleset name="GetClicky">
  <target host="getclicky.com" />
  <target host="*.getclicky.com" />

  <rule from="^http://getclicky\.com/" to="https://www.getclicky.com/"/>
  <rule from="^http://([^/:@]*)\.getclicky\.com/" to="https://$1.getclicky.com/"/>
</ruleset>
<ruleset name="GiBlod.no">
  <target host="www.giblod.no" />
  <target host="giblod.no" />

  <rule from="^http://(www\.)?giblod\.no/" to="https://www.giblod.no/"/>
</ruleset>
<ruleset name="Gigaset.com">
	<target host="gigaset.com" />
	<target host="www.gigaset.com" />
	<rule from="^http://gigaset\.com/" to="https://gigaset.com/"/>
	<rule from="^http://www\.gigaset\.com/" to="https://gigaset.com/"/>
</ruleset>

<ruleset name="GitHub">
  <target host="*.github.com" />
  <target host="github.com" />

  <securecookie host="^(.*\.)?github\.com$" name=".*" />

  <rule from="^http://(www\.)?github\.com/" to="https://github.com/"/>
  <rule from="^http://(assets\d+|gist)\.github\.com/" to="https://$1.github.com/"/>
</ruleset>
<ruleset name="Gitorious">
  <target host="gitorious.org" />
  <target host="*.gitorious.org" />

  <exclusion pattern="^http://(blog|en|status)\.gitorious\.org/"/>

  <rule from="^http://gitorious\.org/"
	  to="https://gitorious.org/"/>
  <rule from="^http://([^/:@]+)\.gitorious\.org/"
	  to="https://$1.gitorious.org/"/>
</ruleset><ruleset name="Give Kids the World">
	<target host="gktw.org" />
	<target host="www.gktw.org" />
	<target host="givekidstheworld.org" />
	<target host="www.givekidstheworld.org" />
	<target host="secure.gktw.org" />
	
	<target host="givekidstheworldstore.org" />
	<target host="www.givekidstheworldstore.org" />

	<rule from="^https?://(www\.)?(gktw|givekidstheworld)\.org/" to="https://secure.gktw.org/" />

	<rule from="^http://(www\.)?givekidstheworldstore\.org/" to="https://www.givekidstheworldstore.org/" />
</ruleset><ruleset name="Global Scale Technologies">
  <target host="globalscaletechnologies.com" />
  <target host="www.globalscaletechnologies.com" />

  <rule from="^http://(www\.)?globalscaletechnologies\.com/" to="https://www.globalscaletechnologies.com/" />
</ruleset>
<ruleset name="TheGlobeAndMail">
  <target host="www.theglobeandmail.com" />
  <target host="theglobeandmail.com" />

  <rule from="^http://theglobeandmail\.com/" to="https://www.theglobeandmail.com/"/>
  <rule from="^http://www\.theglobeandmail\.com/" to="https://www.theglobeandmail.com/"/>
</ruleset>

<ruleset name="Gnuheter.org" default_off="invalid certificate">
	<target host="gnuheter.org" />
	<target host="www.gnuheter.org" />
	<rule from="^http://www\.gnuheter\.org/" to="https://www.gnuheter.org/"/>
	<rule from="^http://gnuheter\.org/" to="https://gnuheter.org/"/>
</ruleset>
<ruleset name="GoDaddy">
  <target host="*.godaddy.com" />
  <target host="godaddy.com" />
  <target host="www.godaddymobile.com" />
  <target host="godaddymobile.com" />

  <rule from="^http://(www\.)?godaddy\.com/" to="https://www.godaddy.com/"/>
  <rule from="^http://(www\.)?godaddymobile\.com/" to="https://www.godaddymobile.com/"/>
  <rule from="^http://(community|shops|who)\.godaddy\.com/" to="https://$1.godaddy.com/"/>
</ruleset>
<ruleset name="Good.net">
  <target host="good.net" />
  <target host="goodnet.com" />
  <target host="this-download-would-be-faster-with-a-premium-account-at-good.net" />
  <target host="*.good.net" />
  <target host="*.goodnet.com" />
  <target host="*.this-download-would-be-faster-with-a-premium-account-at-good.net" />

  <rule from="^http://([^/]+)/" to="https://$1/" />
</ruleset>
<ruleset name="Google Search" match_rule="http:.*google\.">
  <target host="*.google.com" />
  <target host="google.com" />
  <target host="www.google.com.*" />
  <target host="google.com.*" />
  <target host="www.google.co.*" />
  <target host="google.co.*" />
  <target host="www.google.*" />
  <target host="google.*" />
  <!-- beyond clients1 these do not currently exist in the ccTLDs,
       but just in case... -->
  <target host="clients1.google.com.*" />
  <target host="clients2.google.com.*" />
  <target host="clients3.google.com.*" />
  <target host="clients4.google.com.*" />
  <target host="clients5.google.com.*" />
  <target host="clients1.google.co.*" />
  <target host="clients2.google.co.*" />
  <target host="clients3.google.co.*" />
  <target host="clients4.google.co.*" />
  <target host="clients5.google.co.*" />
  <target host="clients1.google.*" />
  <target host="clients2.google.*" />
  <target host="clients3.google.*" />
  <target host="clients4.google.*" />
  <target host="clients5.google.*" />

  <!-- Some Google pages can generate naive links back to the
       unencrypted version of encrypted.google.com, which is a
       301 but theoretically vulnerable to SSL stripping. -->

  <rule from="^http://encrypted\.google\.com/"
          to="https://encrypted.google.com/"/>

  <!-- The most basic case. -->

  <rule from="^http://(www\.)?google\.com/search"
          to="https://encrypted.google.com/search"/>

  <!-- A very annoying exception that we seem to need for the basic case -->

  <exclusion pattern="^http://(www\.)?google\.com/search.*tbs=shop" />
  <exclusion pattern="^http://clients[0-9]\.google\.com/.*client=products.*" />
  <exclusion pattern="^http://suggestqueries\.google\.com/.*client=.*" />

  <!-- This is necessary for image results links from web search results -->

  <exclusion pattern="^http://(www\.)?google\.com/search.*tbm=isch.*" />

  <!-- The /about stuff is not available in HTTPS as of 2011-07. -->

  <exclusion pattern="^http://(www\.)?google\.com/about" />

  <!-- There are two distinct cases for these firefox searches -->

  <rule from="^http://(www\.)?google(\.com?)?\.[a-z][a-z]/firefox/?$"
          to="https://encrypted.google.com/"/>

  <rule from="^http://(www\.)?google(\.com?)?\.[a-z][a-z]/firefox"
          to="https://encrypted.google.com/search"/>

  <rule from="^http://(www\.)?google\.com/webhp"
          to="https://encrypted.google.com/webhp"/>

  <rule from="^http://(www\.)?google\.com?\.[a-z][a-z]/webhp"
          to="https://encrypted.google.com/webhp"/>

  <rule from="^http://(www\.)?google\.[a-z][a-z]/webhp"
          to="https://encrypted.google.com/webhp"/>

  <rule from="^http://(www\.)?google\.com/squared"
          to="https://www.google.com/squared"/>

  <rule from="^http://codesearch\.google\.com/"
          to="https://codesearch.google.com/"/>

  <rule from="^http://(www\.)?google\.com/codesearch"
          to="https://www.google.com/codesearch"/>

  <rule from="^http://(www\.)?google\.com/#"
          to="https://encrypted.google.com/#"/>

  <rule from="^http://(www\.)?google\.com/$"
          to="https://encrypted.google.com/"/>

  <!-- most google international sites look like "google.fr" -->

  <rule
    from="^http://(www\.)?google\.[^/@:][^/@:]/(search\?|#)"
      to="https://encrypted.google.com/search?" />

  <!-- some look like "google.co.jp" -->
  <!-- and some crazy ones like "google.com.au" -->
  <rule
    from="^http://(www\.)?google\.com?\.[^/@:][^/@:]/(search\?|#)"
      to="https://encrypted.google.com/search?" />
  <!-- Completion urls look like this:

http://clients2.google.co.jp/complete/search?hl=ja&client=hp&expIds=17259,24660,24729,24745&q=m&cp=1 HTTP/1.1\r\n

   -->
  <rule from="^http://clients[0-9]\.google\.com/complete/search"
          to="https://clients1.google.com/complete/search"/>

  <rule from="^http://clients[0-9]\.google\.com?\.[^/:@][^/:@]/complete/search"
          to="https://clients1.google.com/complete/search"/>

  <rule from="^http://clients[0-9]\.google\.[^/:@][^/:@]/complete/search"
          to="https://clients1.google.com/complete/search"/>

  <rule from="^http://suggestqueries\.google\.com/complete/search"
          to="https://clients1.google.com/complete/search"/>

  <!-- We are trying a large collection of mappings from google country sites
       to https://encrypted.google.com/webhp?hl=<lang> where lang is the default
       language for that country.  The concern with that was that the hl=
       parameter would override any user preference for a particular language,
       which would be Bad, especially if people got bounced from
       http://google.com to google.cctld to https://google/webhp?hl=<constant>
       but since we actually prevent google from performing the first bounce,
       we don't have to worry about this so much!
       -->

  <rule
   from="^http://(www\.)?google\.(com?\.)?(au|ca|gh|ie|in|jm|ke|lk|my|na|ng|nz|pk|rw|sl|sg|ug|uk|za|zw)/?$"
     to="https://encrypted.google.com/" />

  <rule
   from="^http://(www\.)?google\.(com?\.)?(ar|bo|cl|co|cu|cr|ec|es|gt|mx|pa|pe|py|sv|uy|ve)/?$"
    to="https://encrypted.google.com/webhp?hl=es" />

  <rule
   from="^http://(www\.)?google\.(com\.)?(ae|bh|eg|jo|kw|lb|ly|om|qa|sa)/?$"
     to="https://encrypted.google.com/webhp?hl=ar" />

  <rule from="^http://(www\.)?google\.(at|ch|de)/?$"
          to="https://encrypted.google.com/webhp?hl=de" />

  <rule from="^http://(www\.)?google\.(fr|nl|it|pl|ru|bg|pt|ro|hr|fi|no)/?$"
          to="https://encrypted.google.com/webhp?hl=$2" />

  <rule from="^http://(www\.)?google\.com?\.(id|th|tr)/?$"
          to="https://encrypted.google.com/webhp?hl=$2" />

  <rule from="^http://(www\.)?google\.com\.il/?$"
          to="https://encrypted.google.com/webhp?hl=he" />

  <rule from="^http://(www\.)?google\.com\.kr/?$"
          to="https://encrypted.google.com/webhp?hl=ko" />

  <rule from="^http://(www\.)?google\.com\.kz/?$"
          to="https://encrypted.google.com/webhp?hl=kk" />

  <rule from="^http://(www\.)?google\.com\.jp/?$"
          to="https://encrypted.google.com/webhp?hl=ja" />

  <rule from="^http://(www\.)?google\.com\.vn/?$"
          to="https://encrypted.google.com/webhp?hl=vi" />

  <rule from="^http://(www\.)?google\.com\.br/?$"
          to="https://encrypted.google.com/webhp?hl=pt-BR" />

  <rule from="^http://(www\.)?google\.se/?$"
          to="https://encrypted.google.com/webhp?hl=sv" />

</ruleset>
<ruleset name="Google APIs">
  <target host="www.google-analytics.com" />
  <target host="ssl.google-analytics.com" />
  <target host="*.googleapis.com" />
  <target host="*.commondatastorage.googleapis.com"/>
  <target host="google.com" />
  <target host="www.google.com" />
  <target host="translate.google.com" />
  <target host="apis.google.com" />
  <target host="*.apis.google.com" />
  <target host="gstatic.com" />
  <target host="*.gstatic.com" />
  <target host="api.recaptcha.net" />
  <target host="gdata.youtube.com" />

  <rule from="^http://www\.google-analytics\.com/"
          to="https://ssl.google-analytics.com/"/>
  <rule from="^http://(ajax|chart|fonts|translate|www)\.googleapis\.com/"
          to="https://$1.googleapis.com/"/>
  <rule from="^http://commondatastorage\.googleapis\.com/"
	  to="https://commondatastorage.googleapis.com/"/>
  <rule from="^http://([^@:\./]+)\.commondatastorage\.googleapis\.com/"
	  to="https://$1.commondatastorage.googleapis.com/"/>
  <rule from="^http://translate\.google\.com/translate_a/element\.js"
	  to="https://translate.google.com/translate_a/element.js"/>

<!-- There is an interesting question about whether we should
     append &strip=1 to all cache URLs.  This causes them to load without
     images and styles, which is more secure but can look worse.  Without
     &strip=1, the images and styles from the cached pages still load from
     the original, typically unencrypted, page.  With &strip=1, the
     cached page will be text-only and will come exclusively from Google's
     HTTPS server. -->

  <rule from="^http://(www\.|ssl\.)?gstatic\.com/"
          to="https://ssl.gstatic.com/" />
  <rule from="^http://api\.recaptcha\.net/"
          to="https://www.google.com/recaptcha/api/"/>
  <rule from="^http://(www\.)?google\.com/recaptcha/"
          to="https://www.google.com/recaptcha/"/>
  <rule from="^http://www\.google\.com/calendar/embed"
          to="https://www.google.com/calendar/embed"/>
  <rule from="^http://(www\.)?google\.com/uds"
          to="https://www.google.com/uds"/>
  <rule from="^http://(www\.)?google\.com/chart"
          to="https://www.google.com/chart"/>
  <rule from="^http://apis\.google\.com/"
	  to="https://apis.google.com/"/>
  <rule from="^http://chart\.apis\.google\.com/chart"
          to="https://chart.googleapis.com/chart"/>

<!--  jsapi was causing problems on some sites that embed google maps:
      https://trac.torproject.org/projects/tor/ticket/2335
      Apparently now fixed; thanks, Google! -->

  <rule from="^http://www\.google\.com/jsapi"
          to="https://www.google.com/jsapi"/>

  <rule from="^http://(www\.)?google\.com/afsonline/"
          to="https://www.google.com/afsonline/"/>

  <rule from="^http://gdata\.youtube\.com/"
          to="https://gdata.youtube.com/"/>
</ruleset>
<ruleset name="Google Images">
  <target host="images.google.com" />
  <target host="www.google.com" />
  <target host="encrypted.google.com" /> <!-- only for applicable list purposes -->

  <rule from="^http://(images|www|encrypted)\.google\.com/(.*tbm=isch)" to="https://encrypted.google.com/$2"/>
</ruleset>
<ruleset name="GoogleMaps">
	<target host="maps.google.com" />
	<target host="maps.gstatic.com" />
	<target host="maps-api-ssl.google.com"/>
	<target host="maps.googleapis.com"/>
	<target host="maps.google.*"/>
	<target host="maps.google.com.*"/>
	<target host="maps.google.co.*"/>

	<securecookie host="^maps\.google\.(com?\.)?(au|ca|gh|ie|in|jm|ke|lk|my|na|ng|nz|pk|rw|sl|sg|ug|uk|za|zw)$" name=".*"/>
	<securecookie host="^maps\.(google|gstatic|googleapis)\.com$" name=".*"/>
	<securecookie host="^maps-api-ssl\.google\.com$" name=".*"/>

	<rule from="^http://maps\.(google|gstatic|googleapis)\.com/" to="https://maps.$1.com/"/>
	<rule from="^http://maps\.google\.([^/]+)/" to="https://maps.google.$1/"/>
	<rule from="^http://maps-api-ssl\.google\.com/" to="https://maps-api-ssl.google.com/"/>
</ruleset>

<!-- XXX: Needs more testing -->
<ruleset name="GoogleServices">
  <target host="google.*" />
  <target host="google.com" />
  <target host="*.google.com" />
  <target host="google.co.*" />
  <target host="google.com.*" />
  <target host="www.google.*" />
  <target host="www.google.co.*" />
  <target host="www.google.com.*" />
  <target host="groups.google.de" />
  <target host="gmail.com" />
  <target host="www.gmail.com" />
  <target host="googlecode.com" />
  <target host="*.googlecode.com" />
  <target host="news.google.co.*" />
  <target host="news.google.com.*" />
  <target host="news.google.*" />
  <target host="appspot.com" />
  <target host="*.appspot.com" />
  <target host="pagead2.googlesyndication.com" />
  <target host="partner.googleadservices.com" />
  <target host="googleusercontent.com" />
  <target host="*.googleusercontent.com" />

  <exclusion pattern="^http://(news\.)?google\.com/newspapers" />
  <exclusion pattern="^http://(news\.)?google\.com/archivesearch" />

  <rule from="^http://spreadsheets\.google\.com/"
          to="https://spreadsheets.google.com/"/>
  <rule from="^http://docs\.google\.com/"
          to="https://docs.google.com/"/>
  <rule from="^http://groups\.google\.com/"
          to="https://groups.google.com/"/>
  <rule from="^http://groups\.google\.de/"
          to="https://groups.google.de/"/>
  <rule from="^http://mail\.google\.com/"
          to="https://mail.google.com/"/>
  <rule from="^http://(www\.)?gmail\.com/"
          to="https://mail.google.com/"/>
  <rule from="^http://(www\.)?google\.com/reader/"
          to="https://www.google.com/reader/"/>
  <rule from="^http://(www\.)?google\.com/webfonts"
          to="https://www.google.com/webfonts"/>
  <rule from="^http://code\.google\.com/"
          to="https://code.google.com/"/>
  <rule from="^http://sites\.google\.com/"
          to="https://sites.google.com/"/>
  <rule from="^http://plus\.google\.com/"
          to="https://plus.google.com/"/>
  <rule from="^http://adwords\.google\.com/"
          to="https://adwords.google.com/"/>

  <!-- This worked for a while but seems to be unstable
  <rule from="^http://(www\.)?google((\.com?)?(\.[^/@:][^/@:])?)/products"
          to="https://www.google$2/products" />
   -->

  <rule from="^http://(www\.)?google((\.com?)?(\.[^/@:][^/@:])?)/profiles"
          to="https://www.google$2/profiles" />

  <rule from="^http://news\.google((\.com?)?(\.[^/@:][^/@:])?)/news"
          to="https://www.google.com/news" />

  <rule from="^http://news\.google((\.com?)?(\.[^/@:][^/@:])?)/newshp"
          to="https://www.google.com/news" />

  <rule from="^http://news\.google((\.com?)?(\.[^/@:][^/@:])?)/$"
          to="https://www.google.com/news" />

  <rule from="^http://(www\.)?googlecode\.com/$"
          to="https://code.google.com/" />
  <rule from="^http://([^/:@]+)\.googlecode\.com/$"
          to="https://code.google.com/p/$1/" />
  <rule from="^http://([^/:@]+)\.googlecode\.com/(.+)"
          to="https://$1.googlecode.com/$2" />

  <rule from="^http://(www\.)?google\.com/finance"
          to="https://www.google.com/finance"/>
  <rule from="^http://(www\.)?google\.co\.uk/finance"
          to="https://www.google.co.uk/finance"/>
  <rule from="^https?://finance\.google\.com/"
          to="https://www.google.com/finance/"/>
  <rule from="^https?://finance\.google\.co\.uk/"
          to="https://www.google.co.uk/finance/"/>
  <rule from="^http://(www\.)?google\.com/phone/"
          to="https://www.google.com/phone/"/>
  <rule from="^http://feedburner\.google\.com/"
          to="https://feedburner.google.com/"/>
  <rule from="^http://trends\.google\.com/"
          to="https://www.google.com/trends"/>
  <rule from="^http://pack\.google\.com/"
          to="https://pack.google.com/"/>
  <rule from="^http://appengine\.google\.com/"
          to="https://appengine.google.com/"/>
  <rule from="^http://([^@:\./]+\.)?appspot\.com/"
          to="https://$1appspot.com/"/>
  <rule from="^http://pagead2\.googlesyndication\.com/"
          to="https://pagead2.googlesyndication.com/"/>
  <rule from="^http://partner\.googleadservices\.com/"
          to="https://partner.googleadservices.com/"/>
  <rule from="^http://googleusercontent\.com/"
          to="https://www.googleusercontent.com/"/>
  <rule from="^http://([^@:\./]+)\.googleusercontent\.com/"
          to="https://$1.googleusercontent.com/"/>
  <rule from="^http://(www\.)?google\.com/buzz"
          to="https://www.google.com/buzz"/>

  <rule from="^http://(www\.)?google\.com/contacts"
          to="https://www.google.com/contacts"/>
  <rule from="^http://(www\.)?google\.co\.uk/contacts"
          to="https://www.google.co.uk/contacts"/>
  <rule from="^http://(www\.)?google\.co\.in/contacts"
          to="https://www.google.co.in/contacts"/>

  <rule from="^http://(www\.)?google(\.com?)?(\.[^/@:][^/@:])?/(adplanner|ads|css|intl|js|logos|tools|googleblogs|support|transparencyreport)/"
          to="https://www.google.com/$4/"/>
  <rule from="^http://(www\.)?google(\.com?)?(\.[^/@:][^/@:])?/(calendar|dictionary|trends|url)"
          to="https://www.google.com/$4"/>
  <rule from="^http://(www\.)?google(\.com?)?(\.[^/@:][^/@:])?/(cse|custom)"
          to="https://www.google.com/cse" />

  <rule from="^http://(www\.)?google\.com/newproducts/"
          to="https://www.google.com/newproducts/"/>
  <rule from="^http://(www\.)?google\.com/moderator/"
          to="https://www.google.com/moderator/"/>
  <rule from="^http://(www\.)?google\.com/accounts/"
          to="https://www.google.com/accounts/"/>

  <!-- Note: This rule is NOT for the Google Images service, which is
       available via a redirect from http://www.google.com/images
       (with no slash), but rather for images used internally by
       Google, within http://www.google.com/images/ (with a slash).
       This fixes the mixed content warning on Google Dictionary. -->
  <rule from="^http://(www\.)?google(\.com?)?(\.[^/@:][^/@:])?/images/"
          to="https://www.google.com/images/"/>
</ruleset>
<ruleset name="Governo Português">
  <target host="www.portugal.gov.pt" />
  <target host="portugal.gov.pt" />
  <target host="portaldocidadao.gov.pt" />
  <target host="www.portaldocidadao.gov.pt" />
  <target host="portaldaempresa.gov.pt" />
  <target host="www.portaldaempresa.gov.pt" />

  <exclusion pattern="^http://www\.portugal\.gov\.pt/PortalMovel/" />
  <rule from="^http://portaldocidadao\.pt/" to="https://www.portaldocidadao.pt/"/>
  <rule from="^http://www\.portaldocidadao\.pt/" to="https://www.portaldocidadao.pt/"/>
  <rule from="^http://portaldaempresa\.pt/" to="https://www.portaldaempresa.pt/"/>
  <rule from="^http://www\.portaldaempresa\.pt/" to="https://www.portaldaempresa.pt/"/>
  <rule from="^http://portugal\.gov\.pt/" to="https://www.portugal.gov.pt/"/>
  <rule from="^http://www\.portugal\.gov\.pt/" to="https://www.portugal.gov.pt/"/>
 </ruleset>
<ruleset name="Gowalla (partial)">
  <target host="gowalla.com" />
  <target host="www.gowalla.com" />

  <rule from="^http://(www\.)?gowalla\.com/"
	  to="https://gowalla.com/"/>
</ruleset><ruleset name="Gravatar">
  <target host="*.gravatar.com" />

  <rule from="^http://((www|en|s|secure|0|1|2)\.)?gravatar\.com/" to="https://secure.gravatar.com/"/>
</ruleset>
<ruleset name="Grepular">
  <target host="www.grepular.com" />
  <target host="secure.grepular.com" />
  <target host="grepular.com" />

  <rule from="^http://((www|secure)\.)?grepular\.com/" to="https://grepular.com/"/>
</ruleset>
<ruleset name="Groton.org">
  <target host="www.groton.org" />
  <target host="groton.org" />
  <rule from="^http://www\.groton\.org/" to="https://www.groton.org/"/>
  <rule from="^http://groton\.org/" to="https://www.groton.org/"/>
</ruleset>

<ruleset name="Groupon.se">
  <target host="groupon.se" />
  <rule from="^http://groupon\.se/" to="https://www.groupon.se/"/>
  <rule from="^http://www\.groupon\.se/" to="https://www.groupon.se/"/>
</ruleset>

<ruleset name="Groupon DE/UK">
  <target host="groupon.de" />
  <target host="*.groupon.de" />
  <target host="groupon.co.uk" />
  <target host="*.groupon.co.uk" />

  <exclusion pattern="^http://(news|jobs|blog)\.groupon\.co\.uk/"/>
  <exclusion pattern="^http://action\.groupon\.de/"/>
  <rule from="^http://groupon\.(de|co\.uk)/" to="https://www.groupon.$1/"/>
  <rule from="^http://([^/:@]*)\.groupon\.(de|co\.uk)/" to="https://$1.groupon.$2/"/>
</ruleset>
<!-- gsfacket is a swedish labour union -->
<ruleset name="Gsfacket.se">
	<target host="gsfacket.se" />
	<target host="www.gsfacket.se" />
	<rule from="^http://gsfacket\.se/" to="https://www.gsfacket.se/"/>
	<rule from="^http://www\.gsfacket\.se/" to="https://www.gsfacket.se/"/>
</ruleset>

<ruleset name="Guardian Project">
  <target host="guardianproject.info" />
  <target host="www.guardianproject.info" />

  <rule from="^http://(www\.)?guardianproject\.info/" to="https://guardianproject.info/"/>
</ruleset>

<ruleset name="GuideStar">
	<target host="guidestar.org" />
	<target host="www.guidestar.org" />
	<target host="www2.guidestar.org" />

	<rule from="^http://www2\.guidestar\.org/" to="https://www2.guidestar.org/" />
	<rule from="^http://(www\.)?guidestar\.org/?$" to="https://www2.guidestar.org/" />
</ruleset><ruleset name="Guifi.net" default_off="self-signed">
  <target host="guifi.net" />
  <target host="www.guifi.net" />

  <rule from="^http://(www\.)?guifi\.net/" to="https://guifi.net/"/>
</ruleset>
<ruleset name="Gulesider">
  <target host="gulesider.no" />
  <target host="www.gulesider.no" />

  <exclusion pattern="^http://kundesider\.gulesider\.no/"/>
  <rule from="^http://(www\.)?gulesider\.no/" to="https://www.gulesider.no/"/>
</ruleset>

<ruleset name="HD.se">
  <target host="hd.se" />
  <target host="*.hd.se" />
  <rule from="^http://hd\.se/" to="https://hd.se/"/>
  <rule from="^http://www\.hd\.se/" to="https://hd.se/"/>
</ruleset>

<ruleset name="Huntington's Disease Society of America">
	<target host="hdsa.org" />
	<target host="www.hdsa.org" />

	<!-- Invoking https://hdsa.org/ produces a certificate error,
	so redirect https://hdsa.org/ to https://www.hdsa.org/ -->
	<rule from="^https?://hdsa\.org/" to="https://www.hdsa.org/" />
	<rule from="^http://www\.hdsa\.org/" to="https://www.hdsa.org/" />
</ruleset><ruleset name="HGO.se">
	<target host="www.hgo.se" />
	<target host="hgo.se" />
	<target host="space.hgo.se" />
	<rule from="^http://hgo\.se/" to="https://www.hgo.se/"/>
	<rule from="^http://www\.hgo\.se/" to="https://www.hgo.se/"/>
	<rule from="^http://space\.hgo\.se/" to="https://space.hgo.se/"/>
</ruleset>

<ruleset name="HH.se">
	<target host="www.hh.se" />
	<target host="hh.se" />
	<rule from="^http://hh\.se/" to="https://www.hh.se/"/>
	<rule from="^http://www\.hh\.se/" to="https://www.hh.se/"/>
</ruleset>

<ruleset name="HIG.se">
	<target host="www.hig.se" />
	<target host="hig.se" />
	<rule from="^http://hig\.se/" to="https://www.hig.se/"/>
	<rule from="^http://www\.hig\.se/" to="https://www.hig.se/"/>
</ruleset>

<ruleset name="HIS.se">
	<target host="www.his.se" />
	<target host="his.se" />
	<rule from="^http://his\.se/" to="https://www.his.se/"/>
	<rule from="^http://www\.his\.se/" to="https://www.his.se/"/>
</ruleset>

<ruleset name="HKK">
<target host="www.hkk.de" />
<target host="hkk.de" />
<rule from="^http://(www\.)?hkk\.de/" to="https://www.hkk.de/"/>
</ruleset>
<ruleset name="Hm.com">
  <target host="www.hm.com" />
  <target host="hm.com" />
  <rule from="^http://www\.hm\.com/" to="https://www.hm.com/"/>
  <rule from="^http://hm\.com/" to="https://www.hm.com/"/>
</ruleset>

<ruleset name="HMV">
  <target host="www.hmv.com" />
  <target host="hmv.com" />
  <target host="hmv.co.uk" />
  <target host="www.hmv.co.uk" />
  <target host="www3.hmv.co.uk" />

  <rule from="^http://hmv\.com/" to="https://hmv.com/"/>
  <rule from="^http://www\.hmv\.com/" to="https://hmv.com/"/>
  <rule from="^http://hmv\.co\.uk/" to="https://hmv.com/"/>
  <rule from="^http://www\.hmv\.co\.uk/" to="https://hmv.com/"/>
  <rule from="^http://www3\.hmv\.co\.uk/" to="https://www3.hmv.co.uk/"/>
</ruleset>
<ruleset name="HON.ch (Health On the Net)" default_off="Some images broken">
	<target host="hon.ch" />
	<target host="www.hon.ch" />
	<target host="services.hon.ch" />
	<target host="healthonnet.org" />
	<target host="www.healthonnet.org" />

	<rule from="^http://(www\.)?hon\.ch/" to="https://www.hon.ch/" />
	<rule from="^http://services\.hon\.ch/" to="https://services.hon.ch/" />
	<rule from="^http://(www\.)?healthonnet\.org/" to="https://www.healthonnet.org/" />
</ruleset>
<ruleset name="HSBC">
  <target host="hsbc.*" />
  <target host="www.hsbc.*" />
  <target host="hsbc.co.*" />
  <target host="www.hsbc.co.*" />
  <target host="hsbc.com.*" />
  <target host="www.hsbc.com.*" />
  <target host="*.hsbctrinkaus.de" />
  <target host="hsbctrinkaus.de" />
  <target host="*.sabb.com" />
  <target host="sabb.com" />
  <target host="*.firstdirect.com" />
  <target host="firstdirect.com" />
  <target host="*.us.hsbc.com" />
  <target host="us.hsbc.com" />

  <!--
     Sites work with or without www, but ssl certs are for www only.
     The list of country sites comes from https://www.hsbc.com/1/2
     These do not work (no https service runs):
       www.hsbc.ie, www.kuwait.hsbc.com, www.hfcbank.co.uk, www.hsbc.co.za,
       www.hangseng.com, www.hsbc.co.id, www.hsbc.ge, www.hsbc.cz,
       www.hsbc.com.pa.
     These do not work (invalid ssl cert!):
       www.hsbc.co.nz, www.hsbc.com.tr, www.hsbc.com.uy.
  -->
  <rule from="^http://(?:www\.)?hsbc\.(com|co\.uk|com\.ar|am|com\.au|com\.bh|com\.bd|bm|com\.br|com\.bn|ca|ky|com\.cn|com\.co|com\.eg|fr|gr|com\.hk|co\.in|co\.jp|kz|jo|co\.kr|com\.lb|com\.mo|com\.my|com\.mt|co\.mu|com\.mx|co\.om|com\.pk|com\.py|com\.ph|pl|com\.qa|ru|com\.sg|lk|com\.tw|co\.th|ae|com\.vn)/"
        to="https://www.hsbc.$1/" />

  <!-- some odd regional sites not using hsbc.tld names -->
  <rule from="^http://(?:www\.)?hsbctrinkaus\.de/" to="https://www.hsbctrinkaus.de/" />
  <rule from="^http://(?:www\.)?sabb\.com/" to="https://www.sabb.com/" />
  <rule from="^http://(?:www\.)?firstdirect\.com/" to="https://www.firstdirect.com/" />
  <rule from="^http://(?:www\.)?us\.hsbc\.com/" to="https://www.us.hsbc.com/" />
</ruleset>
<ruleset name="Home School Legal Defense Association">
	<target host="hslda.org" />
	<target host="www.hslda.org" />
	<target host="secure.hslda.org" />

	<rule from="^http://(www\.)?hslda\.org/" to="https://www.hslda.org/" />
	<rule from="^http://secure\.hslda\.org/" to="https://secure.hslda.org/" />
</ruleset><!-- hogskoleverket -->
<ruleset name="HSV.se">
	<target host="www.hsv.se" />
	<target host="hsv.se" />
	<rule from="^http://hsv\.se/" to="https://www.hsv.se/"/>
	<rule from="^http://www\.hsv\.se/" to="https://www.hsv.se/"/>
</ruleset>

<ruleset name="HTC" default_off="displays error message">
  <target host="www.htc.com" />
  <target host="htc.com" />

  <rule from="^http://(www\.)?htc\.com/" to="https://www.htc.com/"/>
</ruleset>

<ruleset name="HTTPwatch.com">
	<target host="httpwatch.com" />
	<target host="blog.httpwatch.com" />
	<target host="www.httpwatch.com" />
	<rule from="^http://www\.httpwatch\.com/" to="https://www.httpwatch.com/"/>
	<rule from="^http://blog\.httpwatch\.com/" to="https://blog.httpwatch.com/"/>
	<rule from="^http://httpwatch\.com/" to="https://httpwatch.com/"/>
</ruleset>

<ruleset name="HUK Coburg">
  <target host="www.huk.de" />
  <target host="huk.de" />

  <rule from="^http://(www\.)?huk\.de/" to="https://www.huk.de/"/>
</ruleset>
<ruleset name="Hackinthebox.org">
  <target host="hackinthebox.org" />
  <target host="www.hackinthebox.org" />
  <target host="forum.hackinthebox.org" />

  <rule from="^http://forum\.hackinthebox\.org/" to="https://forum.hackinthebox.org/" />
  <rule from="^http://(www\.)?hackinthebox\.org/" to="https://www.hackinthebox.org/" />
</ruleset>
<ruleset name="Hakko.com">
  <target host="www.hakko.com" />
  <target host="hakko.com" />

  <rule from="^http://(www\.)?hakko\.com/" to="https://www.hakko.com/"/>
</ruleset>
<!-- already enforces https. adding to prevent sslstrips on port 80 -->
<ruleset name="Halebop.se">
	<target host="halebop.se" />
	<target host="www.halebop.se" />
	<rule from="^http://halebop\.se/" to="https://www.halebop.se/"/>
	<rule from="^http://www\.halebop\.se/" to="https://www.halebop.se/"/>
</ruleset>

<ruleset name="Heroku (buggy)" default_off="Not all Heroku apps have SSL enabled">
  <target host="heroku.com" />
  <target host="*.heroku.com" />

  <exclusion pattern="^http://(status|news)\.heroku\.com/"/>

  <rule from="^http://heroku\.com/" to="https://heroku.com/"/>
  <rule from="^http://([^/:@]*)\.heroku\.com/" to="https://$1.heroku.com/"/>
</ruleset>

<ruleset name="Hexagon">
  <target host="hexagon.cc" />
  <target host="www.hexagon.cc" />

  <rule from="^http://(www\.)?hexagon\.cc/" to="https://hexagon.cc/"/>
</ruleset>
<ruleset name="Hi">
  <target host="*.hi.nl" />
  
  <rule from="^http://(www\.)?hi\.nl/" to="https://www.hi.nl/"/>
  <rule from="^http://(shop|shop\.www)\.?hi\.nl/" to="https://shop.www.hi.nl/"/>
</ruleset><ruleset name="Hidemyass">
	<target host="hidemyass.com" />
	<target host="www.hidemyass.com" />
	<target host="1.hidemyass.com" />
	<target host="2.hidemyass.com" />
	<target host="3.hidemyass.com" />
	<target host="4.hidemyass.com" />
	<target host="5.hidemyass.com" />
	
	<securecookie host="^(.+\.)?hidemyass\.com$" name=".*"/>
	
	<rule from="^http://(www\.)?hidemyass\.com/" to="https://hidemyass.com/"/>
	<rule from="^http://(1|2|3|4|5)\.hidemyass\.com/" to="https://$1.hidemyass.com/"/>
</ruleset>
<!-- more adobe overture -->
<ruleset name="Ai.Hitbox.com">
  <target host="ai.hitbox.com" />
  <rule from="^http://ai\.hitbox\.com/" to="https://ai.hitbox.com/"/>
</ruleset>

<ruleset name="Homebase">
  <target host="www.homebase.com" />
  <target host="homebase.com" />
  <target host="www.homebase.co.uk" />
  <target host="homebase.co.uk" />

  <rule from="^http://homebase\.co\.uk/" to="https://www.homebase.co.uk/"/>
  <rule from="^http://www\.homebase\.co\.uk/" to="https://www.homebase.co.uk/"/>
  <rule from="^http://www\.homebase\.com/" to="https://www.homebase.co.uk/"/>
  <rule from="^http://homebase\.com/" to="https://www.homebase.co.uk/"/>
</ruleset>
<ruleset name="Hostican Web Hosting">
  <target host="www.hostican.com" />
  <target host="chat.hostican.com" />
  <target host="forum.hostican.com" />

  <rule from="^http://(www|chat|forum)\.hostican\.com/" to="https://$1.hostican.com/"/>
</ruleset>

<ruleset name="Hosts">
  <target host="www.hosts.co.uk" />
  <target host="admin.hosts.co.uk" />
  <target host="webmail.hosts.co.uk" />
  <target host="hosts.co.uk" />

  <rule from="^http://(www\.)?hosts\.co\.uk/" to="https://www.hosts.co.uk/"/>
  <rule from="^http://(admin|webmail)\.hosts\.co\.uk/" to="https://$1.hosts.co.uk/"/>
</ruleset>
<ruleset name="Hotfile">
  <target host="www.hotfile.com" />
  <target host="hotfile.com" />

  <rule from="^http://(www\.)?hotfile\.com/" to="https://hotfile.com/"/>
</ruleset>

<ruleset name="Human Rights Campaign (partial)">
	<target host="hrc.org" />
	<target host="www.hrc.org" />

	<rule from="^http://(www\.)?hrc\.org/" to="https://www.hrc.org/" />

	<!-- Invoking https://hrc.org/ produces a certificate error, so
	redirect https://hrc.org/ to https://www.hrc.org/ -->
	<rule from="^https://hrc\.org/" to="https://www.hrc.org/" />
</ruleset><ruleset name="Hungerhost">
  <target host="www.hungerhost.com" />
  <target host="hungerhost.com" />

  <rule from="^http://(www\.)?hungerhost\.com/" to="https://hungerhost.com/"/>
</ruleset>
<ruleset name="HurricaneElectric">
  <target host="he.net" />
  <target host="www.he.net" />
  <target host="ipv6.he.net" />
  <target host="admin.he.net" />
  <!-- bgp.he.net and faq.he.net are don't support SSL at the moment -->

  <rule from="^http://he\.net/" to="https://www.he.net/"/>
  <rule from="^http://([^/:@]*)\.he\.net/" to="https://$1.he.net/"/>
</ruleset>
<ruleset name="Hushmail">
  <target host="www.hushmail.com" />
  <target host="hushmail.com" />

  <rule from="^http://(www\.)?hushmail\.com/" to="https://www.hushmail.com/"/>
</ruleset>
<ruleset name="Hustler">
  <target host="www.hustlermagazine.com" />
  <target host="hustlermagazine.com" />
  <target host="www.hustlercanada.com" />
  <target host="hustlercanada.com" />

  <rule from="^http://(www\.)?hustlermagazine\.com/" to="https://www.hustlermagazine.com/"/>
  <rule from="^http://(www\.)?hustlercanada\.com/" to="https://www.hustlercanada.com/"/>
</ruleset>
<ruleset name="Hypovereinsbank">
  <target host="hvb.de"/>
  <target host="www.hvb.de"/>
  <target host="hypovereinsbank.de"/>
  <target host="www.hypovereinsbank.de"/>

  <securecookie host="^(.*\.)?hvb\.de$" name=".*" />
  <securecookie host="^(.*\.)?hypovereinsbank\.de$" name=".*" />

  <rule from="^http://(www\.)?hypovereinsbank\.de/" to="https://www.hypovereinsbank.de/"/>
  <rule from="^http://(www\.)?hvb\.de/" to="https://www.hypovereinsbank.de/"/>
</ruleset>
<ruleset name="I Do Foundation">
	<target host="idofoundation.org" />
	<target host="www.idofoundation.org" />

	<rule from="^http://(www\.)?idofoundation\.org/" to="https://www.idofoundation.org/" />
</ruleset><ruleset name="I2P" default_off="expired, CAcert">
  <target host="i2p2.de" />
  <target host="www.i2p2.de" />
  <target host="trac.i2p2.de" />
  <target host="docs.i2p2.de" />
  <target host="syndie.i2p2.de" />

  <rule from="^http://(www\.)?i2p2\.de/" to="https://www.i2p2.de/"/>
  <rule from="^http://trac\.i2p2\.de/" to="https://trac.i2p2.de/"/>
  <rule from="^http://docs\.i2p2\.de/" to="https://docs.i2p2.de/"/>
  <rule from="^http://syndie\.i2p2\.de/" to="https://syndie.i2p2.de/"/>
</ruleset>
<!-- ibm have lots of resources, besides software, also developerworks and 
redbooks. -->
<ruleset name="IBM">
	<target host="ibm.com" />
	<target host="www.ibm.com" />
	<target host="www.redbooks.ibm.com" />
	<rule from="^http://ibm\.com/" to="https://www.ibm.com/"/>
	<rule from="^http://www\.ibm\.com/" to="https://www.ibm.com/"/>
	<rule from="^http://www\.redbooks\.ibm\.com/" to="https://www.redbooks.ibm.com/"/>
</ruleset>

<ruleset name="ICA.se">
	<target host="www.ica.se" />
	<target host="ica.se" />
	<rule from="^http://ica\.se/" to="https://www.ica.se/"/>
	<rule from="^http://www\.ica\.se/" to="https://www.ica.se/"/>
</ruleset>

<ruleset name="ICMail">
  <target host="icmail.com" />
  <target host="www.icmail.com" />

  <rule from="^http://(www\.)?icmail\.net/" to="https://icmail.net/"/>
</ruleset>
<!-- idg does their best to make https tricky -->
<ruleset name="IDG.com.au">
	<target host="demo.idg.com.au" />
	<target host="cdn.idg.com.au" />
	<rule from="^http://demo\.idg\.com\.au/" to="https://demo.idg.com.au/"/>
	<rule from="^http://cdn\.idg\.com\.au/" to="https://cdn.idg.com.au/"/>
</ruleset>

<ruleset name="IDG.se">
  <target host="www.idg.se" />
  <target host="idg.se" />
  <rule from="^http://idg\.se/" to="https://idg.se/"/>
  <rule from="^http://www\.idg\.se/" to="https://www.idg.se/"/>
</ruleset>

<ruleset name="IEEE">
  <target host="ieee.org" />
  <target host="www.ieee.org" />

  <rule from="^http://(www\.)?ieee\.org/" to="https://origin.www.ieee.org/"/>
</ruleset>
<ruleset name="IELTS">
  <target host="ielts.org" />
  <target host="*.ielts.org" />

  <rule from="^http://(www\.|results\.)?ielts\.org/" to="https://$1ielts.org/"/>
</ruleset>
<ruleset name="IETF">
  <target host="ietf.org" />
  <target host="www.ietf.org" />
  <target host="tools.ietf.org" />
  <target host="datatracker.ietf.org" />

  <rule from="^http://(www\.)?ietf\.org/" to="https://www.ietf.org/"/>
  <rule from="^http://(tools|datatracker)\.ietf\.org/" to="https://$1.ietf.org/"/>
</ruleset>
<ruleset name="IFA.ch">
  <target host="ifa.ch"/>
  <target host="www.ifa.ch"/>
  <securecookie host="^(.*\.)?ifa\.ch$" name=".*" />

  <rule from="^http://(www\.)?ifa\.ch/" to="https://www.ifa.ch/"/>
</ruleset>
<ruleset name="IIS.net">
	<target host="iis.net" />
	<target host="www.iis.net" />
	<target host="learn.iis.net" />
	<rule from="^http://www\.iis\.net/" to="https://www.iis.net/"/>
	<rule from="^http://learn\.iis\.net/" to="https://learn.iis.net/"/>
	<rule from="^http://iis\.net/" to="https://www.iis.net/"/>
</ruleset>

<!-- IIS handles the swedish TLD, .se. -->
<ruleset name="IIS.se">
  <target host="iis.se" />
  <target host="www.iis.se" />
  <rule from="^http://iis\.se/" to="https://www.iis.se/"/>
  <rule from="^http://www\.iis\.se/" to="https://www.iis.se/"/>
</ruleset>

<ruleset name="IKK-Gesundplus">
<target host="www.ikk-gesundplus.de" />
<target host="ikk-gesundplus.de" />
<rule from="^http://(www\.)?ikk-gesundplus\.de/" to="https://www.ikk-gesundplus.de/"/>
</ruleset>
<ruleset name="IKK-Suedwest">
<target host="www.ikk-suedwest.de" />
<target host="ikk-suedwest.de" />
<rule from="^http://(www\.)?ikk-suedwest\.de/" to="https://www.ikk-suedwest.de/"/>
</ruleset>
<ruleset name="ILO.org">
	<target host="www.ilo.org" />
	<target host="ilo.org" />
	<rule from="^http://ilo\.org/" to="https://www.ilo.org/"/>
	<rule from="^http://www\.ilo\.org/" to="https://www.ilo.org/"/>
</ruleset>

<ruleset name="IMF.org">
  <target host="www.imf.org" />
  <target host="imf.org" />
  <rule from="^http://www\.imf\.org/" to="https://www.imf.org/"/>
  <rule from="^http://imf\.org/" to="https://www.imf.org/"/>
</ruleset>

<ruleset name="IPCC.ch">
	<target host="www.ipcc.ch" />
	<target host="ipcc.ch" />
	<rule from="^http://ipcc\.ch/" to="https://ipcc.ch/"/>
	<rule from="^http://www\.ipcc\.ch/" to="https://www.ipcc.ch/"/>
</ruleset>

<ruleset name="IRF.se">
	<target host="irf.se" />
	<target host="www.irf.se" />
	<rule from="^http://www\.irf\.se/" to="https://www.irf.se/"/>
	<rule from="^http://irf\.se/" to="https://www.irf.se/"/>
</ruleset>

<ruleset name="ISC">
  <target host="isc.org" />
  <target host="www.isc.org" />

  <rule from="^http://(www\.)?isc\.org/" to="https://www.isc.org/"/>
</ruleset>
<ruleset name="ISIS">
  <target host="isis.poly.edu" />

  <rule from="^http://isis\.poly\.edu/" to="https://isis.poly.edu/"/>
</ruleset>
<ruleset name="IceHeberg">
  <target host="iceheberg.fr" />
  <target host="www.iceheberg.fr" />

  <rule from="^http://(www\.)?iceheberg\.fr/" to="https://www.iceheberg.fr/"/>
</ruleset>
<ruleset name="Identica">
  <target host="www.identi.ca" />
  <target host="identi.ca" />

  <rule from="^http://(www\.)?identi\.ca/" to="https://identi.ca/"/>
</ruleset>
<ruleset name="IdentityTheft">
  <target host="identitytheft.org.uk"/>
  <target host="www.identitytheft.org.uk"/>

  <rule from="^http://(www\.)?identitytheft\.org\.uk/" to="https://www.identitytheft.org.uk/"/>
</ruleset>
<ruleset name="Imgur">
  <target host="imgur.com" />
  <target host="www.imgur.com" />
  <target host="i.imgur.com" />
  <target host="api.imgur.com" />

  <exclusion pattern="^http://(www\.)?imgur\.com/[a-zA-Z0-9]+\.[a-z]+$" />

  <rule from="^http://(www\.)?imgur\.com/" to="https://imgur.com/" />
  <rule from="^http://api\.imgur\.com/" to="https://api.imgur.com/" />

  <!-- i.imgur.com doesn't match the certificate, but *some* urls can be converted to imgur.com -->
  <rule from="^http://i\.imgur\.com/((images|include)(/.*)?)?$" to="https://imgur.com/$1" />
</ruleset>
<ruleset name="Immunityinc.com">
	<target host="immunityinc.com" />
	<target host="www.immunityinc.com" />
	<rule from="^http://immunityinc\.com/" to="https://immunityinc.com/"/>
	<rule from="^http://www\.immunityinc\.com/" to="https://www.immunityinc.com/"/>
</ruleset>

<ruleset name="Imrworldwide.com">
	<target host="secure-us.imrworldwide.com" />
	<target host="secure-dk.imrworldwide.com" />

	<rule from="^http://secure-us\.imrworldwide\.com/" to="https://secure-us.imrworldwide.com/" />
	<rule from="^http://secure-dk\.imrworldwide\.com/" to="https://secure-dk.imrworldwide.com/" />
</ruleset>
<ruleset
	name="Indymedia.org"
	match_rule="http:.*indymedia\.org(\.uk)?">
  <target host="indymedia.org" />
  <target host="*.indymedia.org" />
  <target host="www.*.indymedia.org" />
  <target host="indymedia.org.uk" />
  <target host="*.indymedia.org.uk" />
  <target host="www.*.indymedia.org.uk" />
  <target host="northern-indymedia.org" />
  <target host="*.northern-indymedia.org" />

<!--
 This is a ruleset for the https-everywhere extension for firefox.
 for more info see https://www.eff.org/https-everywhere

 to install install the extension put this file in
  ~/.mozilla/your.profile/HTTPSEverywhereUserRules
-->
<!-- 2010/07/14 Version 0.1 chekov(at-sign)riseup.net -->
<!--
 scope of this document:
  indymedia.org based imcs and infrastrucure
  it also includes the indymedia.org.uk and the northern-indymedia.org ans northernindymedia.org domains
  discuss this document at the im-tech list from lists.indymedia.org
  not including indymedia.us, indymedia.org.il and the like

 2010-06-23 report on tested sites:
 == working ==
 "global"
 volunteer, irc, chat, lists
 radio, docs, mir
 biotech, video, keys

 linksunten

 == failed ==
 ambazonia|austin|beirut|bergstedt|blackcat|bulgaria|canarias|chiapas|
 colorado|dc|dl1\.video|hm|hudsonmohawk|jakarta|korea|laplana|lille1|mail\.se
 |minneapolis|mke|nettlau|newsreal|nycap|old\.estrecho|ottawa|perth|pl|
 rochester|romania|rous|russia|shiva|sweden|twincities|victoria|wmass|worcester|www1\.mexico|mexico|www3\.ch

 print, satellite, translations
 india, italia
-->

  <!-- global -->
  <rule from="^http://indymedia\.org/" to="https://indymedia.org/"/>

  <!--
    <rule from="^http://www\.indymedia\.org/" to="https://www.indymedia.org/"/>
    see sites without www prefix
  -->

  <!-- exclusion for infrastructure -->
  <exclusion pattern="^http://(www\.)?(print|translations|satellite)\.indymedia\.org/"/>

  <!-- exclusion for imcs -->

  <exclusion pattern="^http://(www\.)?(de|pr|india|italia|beirut)\.indymedia\.org/"/>

  <exclusion pattern="^http://(ambazonia|austin|beirut|bergstedt|blackcat|bulgaria|canarias|chiapas|colorado|dc|dl1\.video|hm|hudsonmohawk|jakarta|korea|laplana|lille1|mail\.se|minneapolis|mke|nettlau|newsreal|nycap|old\.estrecho|ottawa|perth|pl|rochester|romania|rous|russia|shiva|sweden|twincities|victoria|wmass|worcester|(www(1)?\.)?mexico|www3\.ch)\.indymedia\.org/"/>
  <exclusion pattern="^http://(media[12]?\.argentina|buscador\.argentina)\.indymedia\.org/"/>
  <exclusion pattern="^http://((dev\.)?boston)\.indymedia\.org/"/>
  <exclusion pattern="^http://((www2?\.)?brasil|brazil)\.indymedia\.org/"/>
  <exclusion pattern="^http://(chicago|chicago2|www0\.chicago|dev\.chicago)\.indymedia\.org/"/>
  <exclusion pattern="^http://(de|media[12]?\.de|www[23]\.de|www[23]\.germany)\.indymedia\.org/"/>
  <exclusion pattern="^http://((www[12]\.)?istanbul|media2?\.istanbul|bagimsiz-istanbul|istanbul\.bbm)\.indymedia\.org/"/>
  <exclusion pattern="^http://((publish\.)?sandiego)\.indymedia\.org/"/>

  <!-- domains with www prefix -->
  <rule from="^http://www\.([^/:@]*)\.indymedia\.org/" to="https://www.$1.indymedia.org/"/>

  <!-- doamins without www as prefix -->
  <rule from="^http://([^/:@]*)\.indymedia\.org/" to="https://$1.indymedia.org/"/>

  <!-- indymedia.org.uk -->
  <rule from="^http://indymedia\.org\.uk/" to="https://indymedia.org.uk/"/>
  <rule from="^http://(london|notts|sheffield)\.indymedia\.org\.uk/" to="https://$1.indymedia.org.uk/"/>
  <rule from="^http://www\.(london|notts|sheffield)\.indymedia\.org\.uk/" to="https://www.$1.indymedia.org.uk/"/>

  <!-- northern-indymedia.org -->
<!--
https same as http: www.northern-indymedia.org, www.northern-indymedia.org , northern-indymedia.org, m.northern-indymedia.org
					mobi.northern-indymedia.org, mobile.northern-indymedia.org, wap.northern-indymedia.org
https differs http: mob.northern-indymedia.org, joinin.northern-indymedia.org, radio.northern-indymedia.org
					indyzines.northern-indymedia.org, sol.northern-indymedia.org, list.northern-indymedia.org
					lists.northern-indymedia.org, mailinglist.northern-indymedia.org
-->
  <rule from="^http://northern-indymedia\.org/" to="https://northern-indymedia.org/"/>
  <rule from="^http://(www|m|mobi|mobile|wap)\.northern-indymedia\.org/" to="https://$1.northern-indymedia.org/"/>
  <!-- northernindymedia.org -->
  <rule from="^http://(www\.)?northernindymedia\.org/" to="https://$1northern-indymedia.org/"/>

</ruleset>
<ruleset name="Inet.se">
  <target host="inet.se" />
  <target host="www.inet.se" />

  <rule from="^http://(www\.)?inet\.se/" to="https://www.inet.se/"/>
</ruleset>
<ruleset name="InfoWorld.com">
	<target host="infoworld.com" />
	<target host="www.infoworld.com" />
	<rule from="^http://infoworld\.com/" to="https://www.infoworld.com/"/>
	<rule from="^http://www\.infoworld\.com/" to="https://www.infoworld.com/"/>
</ruleset>

<ruleset name="Infragard.net">
  <target host="infragard.net" />
  <target host="www.infragard.net" />

  <rule from="^http://(www\.)?infragard\.net/" to="https://www.infragard.net/" />
</ruleset>
<ruleset name="Inria.fr">
	<target host="www.inria.fr" />
	<target host="inria.fr" />
	<target host="planete.inria.fr" />
	<rule from="^http://www\.inria\.fr/" to="https://www.inria.fr/"/>
	<rule from="^http://inria\.fr/" to="https://www.inria.fr/"/>
	<rule from="^http://planete\.inria\.fr/" to="https://planete.inria.fr/"/>
</ruleset>
<ruleset name="Inschrijven.nl">
  <target host="www.inschrijven.nl" />
  <target host="inschrijven.nl" />

  <rule from="^http://(?:www\.)?inschrijven\.nl/" to="https://www.inschrijven.nl/"/>
</ruleset>
<ruleset name="Insight">
  <target host="insight.com" />
  <target host="*.insight.com" />

  <securecookie host="^(.+\.)?insight\.com$" name=".*"/>

  <rule from="^http://insight\.com/" to="https://www.insight.com/"/>
  <rule from="^http://(www|uk)\.insight\.com/" to="https://$1.insight.com/"/>
  <rule from="^http://(i|img|images|imagesqa)(\d+)\.insight\.com/" to="https://$1$2.insight.com/"/>
</ruleset>
<ruleset name="Instapaper">
  <target host="www.instapaper.com"/>
  <target host="instapaper.com"/>

  <rule from="^http://(www\.)?instapaper\.com/" to="https://www.instapaper.com/"/>
</ruleset>
<ruleset name="InterNetworX">
  <target host="*.inwx.de" />
  <target host="inwx.de" />

  <securecookie host="^(.*\.)?inwx\.de$" name=".*" />

  <rule from="^http://(www\.)?inwx\.de/" to="https://www.inwx.de/" />
</ruleset>
<ruleset name="Interpol">
  <target host="interpol.int"/>
  <target host="www.interpol.int"/>

  <rule from="^http://(www\.)?interpol\.int/" to="https://www.interpol.int/"/>
</ruleset>
<ruleset name="Irish Broadband">
  <target host="irishbroadband.ie" />
  <target host="*.irishbroadband.ie" />

  <rule from="^http://irishbroadband\.ie/" to="https://www.irishbroadband.ie/"/>
  <rule from="^http://([^/:@]*)\.irishbroadband\.ie/" to="https://$1.irishbroadband.ie/"/>
</ruleset>
<ruleset name="IsoHunt">
    <target host="isohunt.com" />
    <target host="www.isohunt.com" />

    <rule from="^http://(www\.)?isohunt\.com/" to="https://isohunt.com/"/>
</ruleset>
<ruleset name="ItsLearning">
  <target host="www.itslearning.com" />
  <target host="itslearning.com" />

  <rule from="^http://(www\.)?itslearning\.com/"
          to="https://www.itslearning.com/"/>
</ruleset>
<ruleset name="Ixquick">
  <target host="ixquick.com" />
  <target host="*.ixquick.com" />
  <target host="startpage.com" />
  <target host="*.startpage.com" />
  <target host="startingpage.com" />
  <target host="*.startingpage.com" />
  <target host="*.ixquick-proxy.com" />

  <rule from="^http://ixquick\.com/" to="https://ixquick.com/"/>
  <rule from="^http://([^@/:]*)\.ixquick\.com/" to="https://$1.ixquick.com/"/>
  <rule from="^http://([^@/:]*)\.ixquick-proxy\.com/" to="https://$1.ixquick-proxy.com/" />

  <!-- Ixquick and Startpage appear to be basically the same -->

  <rule from="^http://startpage\.com/" to="https://startpage.com/"/>
  <rule from="^http://([^@/:]*)\.startpage\.com/" to="https://$1.startpage.com/"/>

  <!-- Startingpage is basically a Google-only version of Startpage -->

  <rule from="^http://startingpage\.com/" to="https://startingpage.com/"/>
  <rule from="^http://([^@/:]*)\.startingpage\.com/" to="https://$1.startingpage.com/"/>
</ruleset>
<ruleset name="Izquierda-unida.es" default_off="Cert warning">
  <target host="izquierda-unida.es" />
  <target host="www.izquierda-unida.es" />

  <rule from="^http://(www\.)?izquierda-unida\.es/" to="https://www.izquierda-unida.es/" />
</ruleset>
<ruleset name="JANET">
  <target host="ja.net" />
  <target host="www.ja.net" />

  <rule from="^http://(www\.)?ja\.net/" to="https://www.ja.net/"/>
</ruleset>
<ruleset name="JPG Magazine">
  <target host="jpgmag.com" />
  <rule from="^http://(www\.)?jpgmag\.com/" to="https://jpgmag.com/"/>
</ruleset>
<ruleset name="JAKO-O">
  <target host="jako-o.de" />
  <target host="www.jako-o.de" />

  <target host="jako-o.at" />
  <target host="www.jako-o.at" />

  <target host="jako-o.lu" />
  <target host="www.jako-o.lu" />

  <target host="jako-o.eu" />
  <target host="www.jako-o.eu" />

  <target host="jako-o.com" />
  <target host="www.jako-o.com" />

  <!--
  <securecookie host="^http://(www\.)?jako-o\.de$" name="bbuserid" />
  <securecookie host="^http://(www\.)?jako-o\.de$" name="bbpassword" />
  -->

  <rule from="^http://(www\.)?jako-o\.de/" to="https://www.jako-o.de/"/>
  <rule from="^http://(www\.)?jako-o\.at/" to="https://www.jako-o.at/"/>
  <rule from="^http://(www\.)?jako-o\.lu/" to="https://www.jako-o.lu/"/>
  <rule from="^http://(www\.)?jako-o\.eu/" to="https://www.jako-o.eu/"/>
  <rule from="^http://(www\.)?jako-o\.com/" to="https://www.jako-o.com/"/>
</ruleset>
<ruleset name="D.S.V. Sint Jansbrug">
  <target host="www.sintjansbrug.nl" />
  <target host="www.jansbrug.nl" />

	<rule from="^http://www\.(sint)?jansbrug\.nl/" to="https://www.sintjansbrug.nl/"/>
</ruleset>
<ruleset name="Jappix">
  <target host="jappix.com" />
  <target host="www.jappix.com" />

  <rule from="^http://(www\.)?jappix\.com/" to="https://www.jappix.com/"/>
</ruleset>

<ruleset name="Java">
  <target host="java.com" />
  <target host="www.java.com" />

  <rule from="^http://(www\.)?java\.com/" to="https://www.java.com/"/>
</ruleset>
<ruleset name="Jobscout24">
  <target host="jobscout24.de" />
  <target host="www.jobscout24.de" />

  <rule from="^http://(www\.)?jobscout24\.de/" to="https://www.jobscout24.de/"/>
</ruleset>
<ruleset name="Joker">
  <target host="*.joker.com" />
  <target host="joker.com" />

  <rule from="^http://([^/:@]*\.)?joker\.com/" to="https://$1joker.com/"/>
</ruleset>
<ruleset name="Joslin Diabetes Center">
	<target host="joslin.org" />
	<target host="www.joslin.org" />

	<rule from="^http://(www\.)?joslin\.org/" to="https://www.joslin.org/" />

	<!-- Invoking https://joslin.org/ produces a certificate error, so
	redirect https://joslin.org/ to https://www.joslin.org/ -->
	<rule from="^https://joslin\.org/" to="https://www.joslin.org/" />
</ruleset><ruleset name="Jottit">
  <target host="jottit.com" />
  <target host="*.jottit.com" />

  <rule from="^http://jottit\.com/" to="https://jottit.com/"/>
  <rule from="^http://([^/:@]*)\.jottit\.com/" to="https://$1.jottit.com/"/>
</ruleset>
<ruleset name="Juniper Networks">
  <target host="www.juniper.net" />
  <target host="juniper.net" />

  <rule from="^http://(www\.)?juniper\.net/" to="https://www.juniper.net/"/>
</ruleset>
<!-- jusek is a swedish labour union -->
<ruleset name="Jusek.se">
	<target host="jusek.se" />
	<target host="www.jusek.se" />
	<rule from="^http://jusek\.se/" to="https://www.jusek.se/"/>
	<rule from="^http://www\.jusek\.se/" to="https://www.jusek.se/"/>
</ruleset>

<ruleset name="JustGive">
	<target host="justgive.org" />
	<target host="www.justgive.org" />
	<target host="ido.justgive.org" />

	<rule from="^http://justgive\.org/" to="https://www.justgive.org/" />
	<rule from="^http://(www|ido)\.justgive\.org/" to="https://$1.justgive.org/" />
</ruleset><ruleset name="JustTomatoes.com">
  <target host="justtomatoes.com" />
  <target host="www.justtomatoes.com" />

  <rule from="^http://(www\.)?justtomatoes\.com/" to="https://www.justtomatoes.com/" />
</ruleset>
<!-- Karlstad university -->
<ruleset name="KAU.se">
	<target host="www.kau.se" />
	<target host="kau.se" />
	<rule from="^http://kau\.se/" to="https://www.kau.se/"/>
	<rule from="^http://www\.kau\.se/" to="https://www.kau.se/"/>
</ruleset>

<ruleset name="KDE Bugtracker">
  <target host="bugs.kde.org" />
  <target host="mail.kde.org" />

	<rule from="^http://(bugs|mail)\.kde\.org/" to="https://$1.kde.org/"/>
</ruleset>
<ruleset name="KEMI.se">
	<target host="kemi.se" />
	<target host="www.kemi.se" />
	<rule from="^http://www\.kemi\.se/" to="https://www.kemi.se/"/>
	<rule from="^http://kemi\.se/" to="https://kemi.se/"/>
</ruleset>

<ruleset name="KI.se">
  <target host="bibliometrics.ki.se" />
  <target host="cas.ki.se" />
  <target host="cwaa.ki.se" />
  <target host="child3.ki.se" />
  <target host="exjobb.meb.ki.se" />
  <target host="fonder.ki.se" />
  <target host="kib.ki.se" />
  <target host="metasearch.kib.ki.se" />
  <rule from="^http://bibliometrics\.ki\.se/" to="https://bibliometrics.ki.se/"/>
  <rule from="^http://cas\.ki\.se/" to="https://cas.ki.se/"/>
  <rule from="^http://cwaa\.ki\.se/" to="https://cwaa.ki.se/"/>
  <rule from="^http://child3\.ki\.se/" to="https://child3.ki.se/"/>
  <rule from="^http://exjobb\.meb\.ki\.se/" to="https://exjobb.meb.ki.se/"/>
  <rule from="^http://fonder\.ki\.se/" to="https://fonder.ki.se/"/>
  <rule from="^http://kib\.ki\.se/" to="https://kib.ki.se/"/>
  <rule from="^http://metasearch\.kib\.ki\.se/" to="https://metasearch.kib.ki.se/"/>
</ruleset>

<ruleset name="KKH-Allianz">
<target host="www.kkh-allianz.de" />
<target host="kkh-allianz.de" />
<rule from="^http://(www\.)?kkh-allianz\.de/" to="https://www.kkh-allianz.de/"/>
</ruleset>
<ruleset name="KKH.se">
	<target host="www.kkh.se" />
	<target host="kkh.se" />
	<rule from="^http://kkh\.se/" to="https://kkh.se/"/>
	<rule from="^http://www\.kkh\.se/" to="https://www.kkh.se/"/>
</ruleset>

<ruleset name="KLM">
  <!-- Rule created by Jeroen van der Gun -->

  <target host="www.klm.com" />
  <target host="klm.com" />

  <rule from="^http://(www\.)?klm\.com/" to="https://www.klm.com/"/>
</ruleset>
<ruleset name="KMH.se">
	<target host="www.kmh.se" />
	<target host="kmh.se" />
	<rule from="^http://kmh\.se/" to="https://www.kmh.se/"/>
	<rule from="^http://www\.kmh\.se/" to="https://www.kmh.se/"/>
</ruleset>

<ruleset name="KPN">
  <target host="*.kpn.com" />

  <rule from="^http://(www\.)?kpn\.(com|nl)/" to="https://www.kpn.com/"/>
</ruleset><ruleset name="KPT.ch">
        <target host="kpt.ch" />
        <target host="www.kpt.ch" />
        <securecookie host="^(.*\.)?kpt\.ch$" name=".*" />

        <rule from="^http://(www\.)?kpt\.ch/" to="https://www.kpt.ch/"/>
</ruleset>
<ruleset name="KTH.se">
  <target host="kth.se" />
  <target host="www.kth.se" />
  <target host="intra.kth.se" />
  <rule from="^http://kth\.se/" to="https://www.kth.se/"/>
  <rule from="^http://www\.kth\.se/" to="https://www.kth.se/"/>
  <rule from="^http://intra\.kth\.se/" to="https://intra.kth.se/"/>
</ruleset>

<ruleset name="Kabel Deutschland">
  <target host="kabeldeutschland.de" />
  <target host="www.kabeldeutschland.de" />

  <rule from="^http://(www\.)?kabeldeutschland\.de/" to="https://www.kabeldeutschland.de/"/>
</ruleset>
<ruleset name="Karagarga">
  <target host="karagarga.net" />
  <target host="www.karagarga.net" />

  <rule from="^http://(www\.)?karagarga\.net/" to="https://karagarga.net/"/>
</ruleset>
<ruleset name="Kayak">
  <target host="kayak.com" />
  <target host="www.kayak.com" />

  <rule from="^http://(www\.)?kayak\.com/" to="https://www.kayak.com/"/>
</ruleset>

<ruleset name="Kernel.org">
  <target host="kernel.org" />
  <target host="*.kernel.org" />
  <target host="*.git.kernel.org" />
  <target host="*.wiki.kernel.org" />

  <rule from="^http://kernel\.org/" to="https://www.kernel.org/"/>
  <!-- subdomain-only certificates -->
  <rule from="^http://((www|ftp|pub|all|eu|boot|accounts|patchwork|bugzilla|userweb)\.kernel\.org)/" to="https://$1/"/>
  <!-- sub-subdomain certificates -->
  <rule from="^http://(([a-zA-Z0-9-]+\.)?(git|wiki)\.kernel\.org)/" to="https://$1/"/>
  <!--
  As of 2010-08-13, known unprotected domains are:
  wireless.kernel.org
  planet.kernel.org
  mirrors.kernel.org
  archive.kernel.org
  vger.kernel.org
  -->
</ruleset>
<ruleset name="Kismetwireless.net">
	<target host="kismetwireless.net" />
	<target host="www.kismetwireless.net" />
	<rule from="^http://(www\.)?kismetwireless\.net/" to="https://kismetwireless.net/"/>
</ruleset>
<ruleset name="Knappschaft-Bahn-See">
<target host="www.kbs.de" />
<target host="kbs.de" />
<rule from="^http://(www\.)?kbs\.de/" to="https://www.kbs.de/"/>
</ruleset>
<!-- kommunal is a swedish labour union -->
<ruleset name="Kommunal.se">
	<target host="kommunal.se" />
	<target host="www.kommunal.se" />
	<rule from="^http://kommunal\.se/" to="https://www.kommunal.se/"/>
	<rule from="^http://www\.kommunal\.se/" to="https://www.kommunal.se/"/>
</ruleset>

<ruleset name="Komplett.no">
  <target host="komplett.no" />
  <target host="www.komplett.no" />

	<rule from="^http://(www\.)?komplett\.no/" to="https://www.komplett.no/"/>
</ruleset>
<ruleset name="Konami.com">
	<target host="konami.com" />
	<target host="www.konami.com" />
	<rule from="^http://konami\.com/" to="https://www.konami.com/"/>
	<rule from="^http://www\.konami\.com/" to="https://www.konami.com/"/>
</ruleset>

<ruleset name="Konstfack.se">
	<target host="www.konstfack.se" />
	<target host="konstfack.se" />
	<rule from="^http://konstfack\.se/" to="https://www.konstfack.se/"/>
	<rule from="^http://www\.konstfack\.se/" to="https://www.konstfack.se/"/>
</ruleset>

<ruleset name="Kotex">
	<target host="kotex.com" />
	<target host="www.kotex.com" />
	<target host="dare.kotex.com" />

	<rule from="^http://(www\.)?kotex\.com/" to="https://www.kotex.com/" />
	<rule from="^http://dare\.kotex\.com/" to="https://dare.kotex.com/" />
</ruleset>
<!-- only enterprice.krebsonsecurity.com seems to have ssl :( -->
<ruleset name="krebsonsecurity.com">
	<target host="krebsonsecurity.com" />
	<target host="www.krebsonsecurity.com" />
	<rule from="^http://www\.krebsonsecurity\.com/" to="https://krebsonsecurity.com/"/>
	<rule from="^http://krebsonsecurity\.com/" to="https://krebsonsecurity.com/"/>
</ruleset>

<ruleset name="KriminalVarden.se">
	<target host="kriminalvarden.se" />
	<target host="www.kriminalvarden.se" />
	<rule from="^http://www\.kriminalvarden\.se/" to="https://www.kriminalvarden.se/"/>
	<rule from="^http://kriminalvarden\.se/" to="https://www.kriminalvarden.se/"/>
</ruleset>

<ruleset name="kuro5hin.org">
	<target host="kuro5hin.org" />
	<target host="www.kuro5hin.org" />
	<rule from="^http://kuro5hin\.org/" to="https://www.kuro5hin.org/"/>
	<rule from="^http://www\.kuro5hin\.org/" to="https://www.kuro5hin.org/"/>
</ruleset>

<!-- Linkoping university -->
<!-- lots of subdomains lack ssl, -->
<ruleset name="LIU.se">
	<target host="www.liu.se" />
	<target host="liu.se" />
	<target host="www.hu.liu.se" />
	<target host="www.imh.liu.se" />
	<target host="www.ibl.liu.se" />
	<target host="www.isv.liu.se" />
	<target host="www.isak.liu.se" />
	<target host="www.lith.liu.se" />
	<target host="www.student.liu.se" />
	<target host="www.tema.liu.se" />
	<rule from="^http://liu\.se/" to="https://www.liu.se/"/>
	<rule from="^http://www\.liu\.se/" to="https://www.liu.se/"/>
	<rule from="^http://www\.imh\.liu\.se/" to="https://www.imh.liu.se/"/>
	<rule from="^http://www\.ibl\.liu\.se/" to="https://www.ibl.liu.se/"/>
	<rule from="^http://www\.isv\.liu\.se/" to="https://www.isv.liu.se/"/>
	<rule from="^http://www\.hu\.liu\.se/" to="https://www.hu.liu.se/"/>
	<rule from="^http://www\.isak\.liu\.se/" to="https://www.isak.liu.se/"/>
	<rule from="^http://www\.lith\.liu\.se/" to="https://www.lith.liu.se/"/>
	<rule from="^http://www\.student\.liu\.se/" to="https://www.student.liu.se/"/>
	<rule from="^http://www\.tema\.liu\.se/" to="https://www.tema.liu.se/"/>
</ruleset>

<ruleset name="LKML">
	<target host="lkml.org" />
	<target host="www.lkml.org" />
	<rule from="^http://(www\.)?lkml\.org/"
		to="https://lkml.org/" />
</ruleset>
<ruleset name="LM Uni Muenchen">
  <target host="uni-muenchen.de"/>
  <target host="*.uni-muenchen.de"/>

  <securecookie host="^(.*\.)?uni-muenchen\.de$" name=".*" />

  <rule from="^http://(www\.)?uni-muenchen\.de/" to="https://www.uni-muenchen.de/"/>
  <rule from="^http://uni-muenchen\.de/" to="https://www.uni-muenchen.de/"/>
</ruleset>
<ruleset name="LWN">
  <target host="lwn.net" />
  <target host="www.lwn.net" />

  <rule from="^http://(www\.)?lwn\.net/" to="https://lwn.net/"/>
</ruleset>

<ruleset name="La Caixa">
  <target host="lacaixa.es" />
  <target host="*.lacaixa.es" />

  <rule from="^http://lacaixa\.es/" to="https://lacaixa.es/"/>
  <rule from="^http://([^/:@]*)\.lacaixa\.es/" to="https://$1.lacaixa.es/"/>
</ruleset>
<!-- This is a swedish insurance company -->
<ruleset name="Lansforsakringar.se">
	<target host="lansforsakringar.se" />
	<target host="www.lansforsakringar.se" />
	<target host="www1.lansforsakringar.se" />
	<rule from="^http://www\.lansforsakringar\.se/" to="https://www.lansforsakringar.se/"/>
	<rule from="^http://www1\.lansforsakringar\.se/" to="https://www1.lansforsakringar.se/"/>
	<rule from="^http://lansforsakringar\.se/" to="https://www.lansforsakringar.se/"/>
</ruleset>

<ruleset name="Lantmateriet.se">
	<target host="lantmateriet.se" />
	<target host="www.lantmateriet.se" />
	<rule from="^http://www\.lantmateriet\.se/" to="https://www.lantmateriet.se/"/>
	<rule from="^http://lantmateriet\.se/" to="https://www.lantmateriet.se/"/>
</ruleset>

<ruleset name="LastPass">
  <target host="lastpass.com" />
  <target host="www.lastpass.com" />

  <securecookie host="^(.+\.)?lastpass\.com$" name=".*"/>

  <rule from="^http://(www\.)?lastpass\.com/" to="https://lastpass.com/"/>
</ruleset>
<ruleset name="Lastminute.com">
  <target host="www.lastminute.com" />
  <target host="lastminute.com" />

  <rule from="^http://(www\.)?lastminute\.com/" to="https://www.lastminute.com/"/>
</ruleset>
<ruleset name="Lavabit">
  <target host="lavabit.com" />
  <target host="www.lavabit.com" />
  <target host="click.lavabit.com" />
  <target host="hosting.lavabit.com" />

  <securecookie host="^(.+\.)?lavabit\.com$" name=".*"/>

  <rule from="^http://(www\.)?lavabit\.com/" to="https://lavabit.com/"/>
  <rule from="^http://(click|hosting)\.lavabit\.com/" to="https://$1.lavabit.com/"/>
</ruleset>
<ruleset name="Lavasoft">
	<target host="lavasoft.com" />
	<target host="www.lavasoft.com" />
	<rule from="^http://lavasoft\.com/" to="https://secure.lavasoft.com/"/>
	<rule from="^http://www\.lavasoft\.com/" to="https://secure.lavasoft.com/"/>
</ruleset>

<ruleset name="Lawblog.de" default_off="CACert">
  <target host="www.lawblog.de" />
  <target host="lawblog.de" />

  <rule from="^http://(www\.)?lawblog\.de/" to="https://www.lawblog.de/" />
</ruleset>
<ruleset name="LboroAcUk">
  <target host="*.lboro.ac.uk"/>

  <securecookie host="^(bestmaths|dspace|email(admin)?|engskills|lists|luis|lorls|oss|pdwww|wfa)\.lboro\.ac\.uk$" name=".*"/>
  <rule  from="^http://(bestmaths|dspace|email(admin)?|engskills|lists|luis|lorls|oss|pdwww|wfa)\.lboro\.ac\.uk/" to="https://$1.lboro.ac.uk/"/>
</ruleset>
<ruleset name="leadback.advertising.com">
  <target host="leadback.advertising.com" />
  <rule from="^http://leadback\.advertising\.com/" to="https://secure.leadback.advertising.com/"/>
</ruleset>

<ruleset name="LegitScript">
  <target host="www.legitscript.com" />
  <target host="legitscript.com" />

  <rule from="^http://(www\.)?legitscript\.com/" to="https://secure.legitscript.com/"/>
</ruleset><ruleset name="Legtux" default_off="self-signed certificate">
  <target host="legtux.org" />
  <target host="www.legtux.org" />

  <rule from="^http://(www\.)?legtux\.org/" to="https://www.legtux.org/"/>
</ruleset>
<ruleset name="Lelo.com">
        <target host="lelo.com" />
        <target host="*.lelo.com" />
        <rule from="^http://lelo\.com/" to="https://lelo.com/"/>
        <rule from="^http://([^/:@]*)\.lelo\.com/" to="https://$1.lelo.com/"/>
</ruleset>
<ruleset name="Lenovo">
  <target host="lenovo.com" />
  <target host="www.lenovo.com" />
  <target host="shop.lenovo.com" />
  <target host="lenovo.co.uk" />
  <target host="www.lenovo.co.uk" />

  <securecookie host="^(.+\.)?lenovo\.com$" name=".*"/>

  <exclusion pattern="^http://lenovo\.com/friendsandfamily$"/>
  <exclusion pattern="^http://shop\.lenovo\.com/us(/.*)?$"/>

  <rule from="^http://(www\.)?lenovo\.com/epp$" to="https://www.lenovo.com/epp/"/>

  <rule from="^http://lenovo\.com/" to="https://www.lenovo.com/"/>
  <rule from="^http://(www|shop)\.lenovo\.com/" to="https://$1.lenovo.com/"/>
  
  <rule from="^http://(www\.)?lenovo\.co\.uk/?$" to="https://www.lenovo.com/uk/en/"/>
</ruleset>
<ruleset name="LensRentals.com">
  <target host="www.lensrentals.com" />
  <target host="lensrentals.com" />

	<rule from="^http://(www\.)?lensrentals\.com/" to="https://www.lensrentals.com/"/>
</ruleset>
<ruleset name="Library Anywhere">
	<target host="www.libanywhere.com"/>
	<target host="libanywhere.com"/>
	<target host="syndetics.com"/>
	<target host="www.syndetics.com"/>
	<target host="secure.syndetics.com"/>

	<rule from="^http://(www\.)?libanywhere\.com/" to="https://www.libanywhere.com/"/>
	<rule from="^http://(www\.)?syndetics\.com/" to="https://secure.syndetics.com/"/>
</ruleset>
<ruleset name="LibraryThing">
  <target host="pics.librarything.com" />
  <target host="static.librarything.com" />
  <target host="www.librarything.com" />
  <target host="librarything.com" />

  <securecookie host="^(.*\.)?librarything\.com$" name=".*" />

  <rule from="^http://(www\.)?librarything\.com/" to="https://www.librarything.com/"/>
  <rule from="^http://(pics|static)?\.librarything\.com/" to="https://$1.librarything.com/"/>
</ruleset>
<ruleset name="LibreOffice">

	<target host="www.libreoffice.org" />
	<target host="libreoffice.org" />

	<rule from="^http://(www\.)?libreoffice\.org/" to="https://www.libreoffice.org/"/>
</ruleset><ruleset name="LibreOffice-Box">
<target host="libreofficebox.org" />
<target host="www.libreofficebox.org" />
<rule from="^http://(www\.)?libreofficebox\.org/" to="https://www.libreofficebox.org/"/>
</ruleset>
<!-- cdn.www.liferay.com lacks ssl :( -->
<!-- liferay.org lives under liferay.com. should be fixable. -->
<ruleset name="Liferay.com">
  <target host="www.liferay.com" />
  <target host="liferay.com" />
  <rule from="^http://www\.liferay\.com/" to="https://www.liferay.com/"/>
  <rule from="^http://liferay\.com/" to="https://liferay.com/"/>
</ruleset>

<ruleset name="LiftShare">
  <target host="liftshare.com"/>
  <target host="www.liftshare.com"/>
  <target host="images.liftshare.com"/>
  <target host="scripts.liftshare.com"/>

  <securecookie host="^(.+\.)?liftshare\.com$" name=".*"/>

  <rule from="^http://liftshare\.com/" to="https://liftshare.com/"/>
  <rule from="^http://(images|www|scripts)\.liftshare\.com/" to="https://$1.liftshare.com/"/>
</ruleset>
<ruleset name="Lighttpd.net" default_off="CACert">
	<target host="lighttpd.net" />
	<target host="www.lighttpd.net" />
	<target host="blog.lighttpd.net" />
	<target host="redmine.lighttpd.net" />
	<rule from="^http://www\.lighttpd\.net/" to="https://www.lighttpd.net/"/>
	<rule from="^http://lighttpd\.net/" to="https://www.lighttpd.net/"/>
	<rule from="^http://blog\.lighttpd\.net/" to="https://blog.lighttpd.net/"/>
	<rule from="^http://redmine\.lighttpd\.net/" to="https://redmine.lighttpd.net/"/>
</ruleset>

<ruleset name="Lindt USA">
  <target host="www.lindtusa.com" />
  <target host="lindtusa.com" />

  <rule from="^http://(www\.)?lindtusa\.com/" to="https://www.lindtusa.com/"/>
</ruleset>
<ruleset name="Link+ Catalog">
	<target host="csul.iii.com" />

	<rule from="^http://csul\.iii\.com/" to="https://csul.iii.com/" />
</ruleset>
<ruleset name="LinkedIn (minimal)">
	<target host="platform.linkedin.com" />

	<rule from="^http://platform\.linkedin\.com/" to="https://platform.linkedin.com/" />
</ruleset>
<ruleset name="Linkomanija" default_off="self-signed">
  <target host="www.linkomanija.net" />
   <rule from="^http://(www\.)linkomanija\.net/" 
          to="https://www.linkomanija.net/"/>
</ruleset>
<ruleset name="Linode">
  <target host="linode.com" />
  <target host="www.linode.com" />
  <target host="stats.linode.com" />
  <target host="manager.linode.com" />

  <securecookie host="^(.+\.)?linode\.com$" name=".*"/>

  <rule from="^http://(www\.)?linode\.com/" to="https://www.linode.com/"/>
  <rule from="^http://(stats|manager)\.linode\.com/" to="https://$1.linode.com/"/>
</ruleset>
 <ruleset name="Linux.com">
   <target host="linux.com" />
   <target host="store.linux.com" />
   <target host="www.linux.com" />
 
   <rule from="^http://(www\.)?linux\.com/" to="https://www.linux.com/"/>
   <rule from="^http://store\.linux\.com/" to="https://store.linux.com/"/>
 </ruleset>
<ruleset name="DaLinuxFrenchPage">
  <target host="linuxfr.org" />
  <target host="www.linuxfr.org" />

  <rule from="^http://(www\.)?linuxfr\.org/" to="https://linuxfr.org/"/>
</ruleset>

<ruleset name="LinuxFoundation">
  <target host="*.linuxfoundation.org" />

  <rule from="^http://([^/:@]*)\.linuxfoundation\.org/" to="https://$1.linuxfoundation.org/"/>
</ruleset>

<ruleset name="LinuxQuestions">
  <target host="linuxquestions.org" />
  <target host="www.linuxquestions.org" />

  <securecookie host="^(.+\.)?linuxquestions\.org$" name=".*"/>

  <rule from="^http://(www\.)?linuxquestions\.org/" to="https://www.linuxquestions.org/"/>
</ruleset>
<ruleset name="Hotmail / Live">
  <target host="*.live.com" />
  <target host="*.hotmail.com" />
  <target host="hotmail.com" />
  <!-- target host is * because Live URLs can contain multiple unpredictable
       components, like http://snXXXw.sntXXX.mail.live.com/default.aspx
       In the current target host syntax, a wildcard can match only one
       hostname element, not two, and only one wildcard per target host
       is permitted. -->

  <!-- Microsoft itself protects the login this way but we can prevent
       against SSL stripping. -->
  <rule from="^http://(login|onecare|mail)\.live\.com/" to="https://$1.live.com/"/>

  <!-- Both of these appear to trigger two good things: (1) the user is
       prompted to make HTTPS the default; (2) even if the user decides
       not to, the remainder of that mail-reading session is automatically
       HTTPS-only. -->
  <rule from="^http://(www\.)hotmail\.com/" to="https://www.hotmail.com/"/>
  <rule from="^http://([^@:/]+)\.([^@:/]+)\.mail\.live\.com/" to="https://$2.mail.live.com/"/>
  <!-- example:
       http://sn133w.snt133.mail.live.com/default.aspx?wa=wsignin1.0 >>>
       https://snt133.mail.live.com/default.aspx?wa=wsignin1.0  -->
</ruleset>
<!-- NOTE: In its current form and with the current site configuration,
this rule protects login passwords but prevents the user from reading
other users' journals! -->

<ruleset name="LiveJournal" default_off="breaks for non-logged-in users">
  <target host="livejournal.com" />
  <target host="www.livejournal.com" />

  <rule from="^http://(?:www\.)?livejournal\.com/" to="https://www.livejournal.com/"/>
</ruleset>
<ruleset name="LoadImpact.com">
	<target host="loadimpact.com" />
	<target host="www.loadimpact.com" />
	<rule from="^http://www\.loadimpact\.com/" to="https://www.loadimpact.com/"/>
	<rule from="^http://loadimpact\.com/" to="https://loadimpact.com/"/>
</ruleset>

<ruleset name="Local.ch">
	<target host="local.ch" />
	<target host="www.local.ch" />
	<target host="auto.local.ch" />
	<target host="blog.local.ch" />
	<target host="developer.local.ch" />
	<target host="guide.local.ch" />
	<target host="id.local.ch" />
	<target host="immo.local.ch" />
	<target host="info.local.ch" />
	<target host="map.local.ch" />
	<target host="market.local.ch" />
	<target host="my.local.ch" />
	<target host="news.local.ch" />
	<target host="tel.local.ch" />
	<target host="yellow.local.ch" />

	<rule from="^http://(www\.)?local\.ch/" to="https://www.local.ch/"/>
	<rule from="^http://auto\.local\.ch/" to="https://auto.local.ch/"/>
	<rule from="^http://blog\.local\.ch/" to="https://blog.local.ch/"/>
	<rule from="^http://developer\.local\.ch/" to="https://developer.local.ch/"/>
	<rule from="^http://guide\.local\.ch/" to="https://guide.local.ch/"/>
	<rule from="^http://id\.local\.ch/" to="https://id.local.ch/"/>
	<rule from="^http://immo\.local\.ch/" to="https://immo.local.ch/"/>
	<rule from="^http://info\.local\.ch/" to="https://info.local.ch/"/>
	<rule from="^http://map\.local\.ch/" to="https://map.local.ch/"/>
	<rule from="^http://market\.local\.ch/" to="https://market.local.ch/"/>
	<rule from="^http://my\.local\.ch/" to="https://my.local.ch/"/>
	<rule from="^http://news\.local\.ch/" to="https://news.local.ch/"/>
	<rule from="^http://tel\.local\.ch/" to="https://tel.local.ch/"/>
	<rule from="^http://yellow\.local\.ch/" to="https://yellow.local.ch/"/>
</ruleset>
<ruleset name="Loopt">
  <target host="loopt.com" />
  <target host="www.loopt.com" />

  <rule from="^http://(www\.)?loopt\.com/" to="https://www.loopt.com/"/>
</ruleset>
<ruleset name="LoveFilm">
  <target host="lovefilm.com" />
  <target host="*.lovefilm.com" />

  <rule from="^http://(www\.)?lovefilm\.com/" to="https://www.lovefilm.com/"/>
  <rule from="^http://(static|images[0-9]*)\.lovefilm\.com/" to="https://$1.lovefilm.com/"/>
</ruleset>
<ruleset name="M86security">
<target host="www.m86security.com" />
<target host="m86security.com" />
<rule from="^http://(www\.)?m86security\.com/" to="https://www.m86security.com/"/>
</ruleset>
<ruleset name="MAH.se">
	<target host="www.mah.se" />
	<target host="mah.se" />
	<rule from="^http://mah\.se/" to="https://www.mah.se/"/>
	<rule from="^http://www\.mah\.se/" to="https://www.mah.se/"/>
</ruleset>

<ruleset name="MDH.se">
	<target host="www.mdh.se" />
	<target host="mdh.se" />
	<rule from="^http://mdh\.se/" to="https://www.mdh.se/"/>
	<rule from="^http://www\.mdh\.se/" to="https://www.mdh.se/"/>
</ruleset>

<!-- Mitt universitetet -->
<!-- Mid sweden university -->
<ruleset name="MIUN.se">
	<target host="www.miun.se" />
	<target host="portal.miun.se" />
	<target host="miun.se" />
	<rule from="^http://miun\.se/" to="https://www.miun.se/"/>
	<rule from="^http://www\.miun\.se/" to="https://www.miun.se/"/>
	<rule from="^http://portal\.miun\.se/" to="https://portal.miun.se/"/>
</ruleset>

<ruleset name="MSN" default_off="certificate mismatch">
  <target host="my.msn.com" />

  <rule from="^http://my\.msn\.com/" to="https://my.msn.com/"/>
</ruleset>
<ruleset name="MacWorld">
  <target host="www.macworld.com" />

  <rule from="^http://www\.macworld\.com/" to="https://www.macworld.com/"/>

</ruleset>
<ruleset name="Magento">
  <target host="magentocommerce.com" />
  <target host="www.magentocommerce.com" />

  <rule from="^http://(www\.)?magentocommerce\.com/" to="https://www.magentocommerce.com/"/>
</ruleset>

<ruleset name="Magnatune">
  <target host="magnatune.com" />
  <target host="www.magnatune.com" />

	<rule from="^http://(www\.)?magnatune\.com/" to="https://magnatune.com/"/>
</ruleset>
<ruleset name="Magnet.ie">
  <!-- cert valid only for www. -->
  <target host="magnet.ie" />
  <target host="www.magnet.ie" />

  <rule from="^http://(www\.)?magnet\.ie/" to="https://www.magnet.ie/"/>
</ruleset>
<ruleset name="Mail.com">
  <target host="www.mail.com" />
  <target host="mail.com" />
  <target host="service.mail.com" />
  <securecookie host="^(.*\.)?mail.com$" name=".*" />

  <rule from="^http://(www\.)?mail\.com/" to="https://www.mail.com/"/>
  <rule from="^http://service\.mail\.com/" to="https://service.mail.com/"/>
</ruleset>
<ruleset name="Make-A-Wish Foundation of Michigan">
	<target host="wishmich.org" />
	<target host="www.wishmich.org" />

	<rule from="^http://(www\.)?wishmich\.org/" to="https://www.wishmich.org/" />
</ruleset><ruleset name="Malwarebytes">
  <target host="www.malwarebytes.org" />
  <target host="malwarebytes.org" />
  <target host="store.malwarebytes.org" />
  <target host="forums.malwarebytes.org" />

  <rule from="^http://(www\.)?malwarebytes\.org/" to="https://malwarebytes.org/"/>
<rule from="^http://(www\.)?forums\.malwarebytes\.org/" to="https://forums.malwarebytes.org/"/>
<rule from="^http://(www\.)?store\.malwarebytes\.org/" to="https://store.malwarebytes.org/"/>
</ruleset>
<ruleset name="MarksandSpencer">
  <target host="marksandspencer.com" />
  <target host="www.marksandspencer.com" />

  <securecookie host="^(.*\.)?marksandspencer\.com$" name=".*" />

  <rule from="^http://(www\.)?marksandspencer\.com/" to="https://www.marksandspencer.com/"/>
</ruleset><ruleset name="Mandriva.com">
	<target host="mandriva.com" />
	<target host="www.mandriva.com" />
	<target host="webapps.mandriva.com" />
	<rule from="^http://mandriva\.com/" to="https://mandriva.com/"/>
	<rule from="^http://www\.mandriva\.com/" to="https://www.mandriva.com/"/>
	<rule from="^http://webapps\.mandriva\.com/" to="https://webapps.mandriva.com/"/>
</ruleset>

<ruleset name="MapQuest">
  <target host="mapquest.com" />
  <target host="www.mapquest.com" />
  <target host="mapquestapi.com" />
  <target host="www.mapquestapi.com" />
  <target host="mapquesthelp.com" />
  <target host="www.mapquesthelp.com" />

  <rule from="^http://(www\.)?mapquest\.com/" to="https://www.mapquest.com/"/>
  <rule from="^http://developer\.mapquest\.com/" to="https://developer.mapquest.com/"/>
  <rule from="^http://(www\.)?mapquestapi\.com/" to="https://www.mapquestapi.com/"/>
  <rule from="^http://(www\.)?mapquesthelp\.com/" to="https://www.mapquesthelp.com/"/>
</ruleset>
<ruleset name="Marxists Internet Archive" default_off="Self signed">
  <target host="marxists.org" />
  <target host="www.marxists.org" />
  <target host="marx.org" />
  <target host="www.marx.org" />

  <rule from="^(http|https)://(www\.)?marxists\.org/" to="https://www.marxists.org/"/>
  <rule from="^(http|https)://(www\.)?marx\.org/" to="https://www.marxists.org/"/>
</ruleset>
<ruleset name="Massage Magazine">
        <target host="massagemag.com" />
        <target host="www.massagemag.com" />
        <securecookie host="^(.*\.)?massagemag\.com$" name=".*" />

        <rule from="^http://(www\.)?massagemag\.com/" to="https://www.massagemag.com/"/>
</ruleset>

<ruleset name="Materiel.net">
  <target host="*.materiel.net" />
  <target host="materiel.net" />

  <rule from="^http://materiel\.net/" to="https://www.materiel.net/" />
  <rule from="^http://([^@/:]*)\.materiel\.net/" to="https://$1.materiel.net/" />
</ruleset>
<ruleset name="Mathtag.com">
	<target host="pixel.mathtag.com" />
	<target host="action.mathtag.com" />

	<rule from="^http://(pixel|action)\.mathtag\.com/" to="https://$1.mathtag.com/" />
</ruleset><ruleset name="MaxMind">
  <target host="maxmind.com" />
  <target host="www.maxmind.com" />

  <rule from="^http://(www\.)?maxmind\.com/" to="https://www.maxmind.com/" />
</ruleset>
<ruleset name="May First/People Link">
  <target host="id.mayfirst.org" />
  <target host="support.mayfirst.org" />
  <target host="members.mayfirst.org" />
  <target host="lists.mayfirst.org" />

  <rule from="^http://(id|support|members|lists)\.mayfirst\.org/" to="https://$1.mayfirst.org/"/>
</ruleset>
<!-- Av vendor. promos.mcafee.com lacks https -->
<ruleset name="McAfee">
	<target host="mcafee.com" />
	<target host="www.mcafee.com" />
	<target host="blogs.mcafee.com" />
	<target host="home.mcafee.com" />
	<target host="images.mcafee.com" />
	<target host="images.scanalert.com"/>
	<target host="mcafeesecure.com" />
	<target host="www.mcafeesecure.com" />
	<target host="secureimages.mcafee.com" />
	<target host="shop.mcafee.com" />
	<rule from="^http://(www\.)?mcafee\.com/" to="https://www.mcafee.com/"/>
	<rule from="^http://blogs\.mcafee\.com/" to="https://blogs.mcafee.com/"/>
	<rule from="^http://home\.mcafee\.com/" to="https://home.mcafee.com/"/>
	<rule from="^http://shop\.mcafee\.com/" to="https://shop.mcafee.com/"/>
	<rule from="^http://images\.mcafee\.com/" to="https://images.mcafee.com/"/>
	<rule from="^http://images\.scanalert\.com/" to="https://images.scanalert.com/"/>
	<rule from="^http://secureimages\.mcafee\.com/" to="https://secureimages.mcafee.com/"/>
	<rule from="^http://www\.mcafeesecure\.com/" to="https://www.mcafeesecure.com/"/>
</ruleset>
<ruleset name="MedicAlert">
	<target host="medicalert.org" />
	<target host="www.medicalert.org" />

	<rule from="^http://(www\.)?medicalert\.org/" to="https://www.medicalert.org/" />
</ruleset><ruleset name="Medikamente-Per-Klick">
  <target host="www.medikamente-per-klick.de"/>
  <target host="medikamente-per-klick.de"/>
  <target host="shop.medikamente-per-klick.de"/>
  <target host="www.kosmetik-per-klick.de"/>
  <target host="kosmetik-per-klick.de"/>
  <target host="www.ernaehrung-per-klick.de"/>
  <target host="ernaehrung-per-klick.de"/>

  <rule from="^http://((www|shop)\.)?medikamente-per-klick\.de/" to="https://www.medikamente-per-klick.de/"/>
  <rule from="^http://(www\.)?kosmetik-per-klick\.de/" to="https://www.kosmetik-per-klick.de/"/>
  <rule from="^http://(www\.)?ernaehrung-per-klick\.de/" to="https://www.ernaehrung-per-klick.de/"/>
</ruleset>
<!-- pharmacy. medical info should be private -->
<ruleset name="Medstop.se">
	<target host="medstop.se" />
	<target host="www.medstop.se" />
	<rule from="^http://medstop\.se/" to="https://www.medstop.se/"/>
	<rule from="^http://www\.medstop\.se/" to="https://www.medstop.se/"/>
</ruleset>

<ruleset name="Meebo">
  <target host="www.meebo.com" />
  <target host="meebo.com" />

  <rule from="^http://(www\.)?meebo\.com/" to="https://www.meebo.com/"/>
</ruleset>
<ruleset name="Meego">
  <target host="www.meego.com" />
  <target host="meego.com" />

  <rule from="^http://(www\.)?meego\.com/" to="https://www.meego.com/"/>
</ruleset>
<ruleset name="meinVZ" default_off="Certificate mismatch">
  <target host="www.meinvz.net" />

  <rule from="^http://www\.meinvz\.net/" to="https://www.meinvz.net/"/>
</ruleset>
<!-- These guys are included from some of the UN sites. -->
<ruleset name="Meltwaternews.con">
	<target host="www.meltwaternews.com" />
	<target host="meltwaternews.com" />
	<rule from="^http://meltwaternews\.com/" to="https://meltwaternews.com/"/>
	<rule from="^http://www\.meltwaternews\.com/" to="https://www.meltwaternews.com/"/>
</ruleset>

<ruleset name="Mibbit">
  <target host="*.mibbit.com"/>
  <target host="*.chat.mibbit.com"/>

  <securecookie host="^(.*\.)?mibbit.com$" name=".*" />

  <!-- Forcing SSL on homepage would redirect to Mibbit chat page -->
  <rule from="^http://chat\.mibbit\.com/" to="https://chat.mibbit.com/"/>
  <rule from="^http://data\.mibbit\.com/" to="https://data.mibbit.com/"/>
  <rule from="^http://02\.chat\.mibbit\.com/" to="https://02.chat.mibbit.com/"/>
  <rule from="^http://widgetmanager\.mibbit\.com/" to="https://widgetmanager.mibbit.com/"/>
</ruleset>
<ruleset name="Microchip.com">
  <target host="www.microchip.com" />
  <target host="microchip.com" />

  <rule from="^http://(www\.)?microchip\.com/" to="https://www.microchip.com/"/>
</ruleset>
<ruleset name="Microsoft">
  <target host="*.microsoft.com" />
  <target host="microsoft.com" />
  <target host="blogs.msdn.com" />
  <target host="*.technet.microsoft.com" />
  <target host="*.windowsupdate.microsoft.com" />
  
  <exclusion pattern="^http://www\.microsoft\.com/.*FamilyID" />
  <!-- ironic -->
  <exclusion pattern="^http://www\.microsoft\.com/security/" />

  <rule from="^http://(www\.)?microsoft\.com/"
	  to="https://www.microsoft.com/"/>
  <rule from="^http://(adcenter|advertising|ajax|connect|go|ie|office|office365|office2010|onlinehelp|research|signature|snackbox|social|store|profile|msdn|(?:social\.)?technet|windowsupdate)\.microsoft\.com/"
          to="https://$1.microsoft.com/"/>
  <rule from="^http://(v4|v5)\.windowsupdate\.microsoft\.com/"
          to="https://$1.windowsupdate.microsoft.com/" />
  <rule from="^http://blogs\.msdn\.com/"
	  to="https://blogs.msdn.com/"/>
</ruleset>
<ruleset name="Mijn ING">
  <target host="mijn.ing.nl" />
  <rule from="^http://mijn\.ing\.nl/" to="https://mijn.ing.nl/"/>
</ruleset>
<ruleset name="Miles-and-more.com">
  <target host="miles-and-more.com"/>
  <target host="www.miles-and-more.com"/>
  <securecookie host="^(.*\.)?miles-and-more.com$" name=".*" />

  <rule from="^http://(www\.)?miles-and-more\.com/" to="https://www.miles-and-more.com/"/>
</ruleset>
<ruleset name="MilkAndMore">
  <target host="milkandmore.co.uk" />
  <target host="www.milkandmore.co.uk" />

  <securecookie host="^([^@:/]+\.)?milkandmore\.co\.uk$" name=".*"/>

  <rule from="^http://(www\.)?milkandmore\.co\.uk/" to="https://www.milkandmore.co.uk/"/>
</ruleset>
<ruleset name="lists.mindrot.org">
  <target host="lists.mindrot.org" />

  <rule from="^http://lists\.mindrot\.org/" to="https://lists.mindrot.org/" />
</ruleset>
<ruleset name="Mint">
  <target host="www.mint.com" />
  <target host="mint.com" />

  <rule from="^http://(www\.)?mint\.com/" to="https://www.mint.com/"/>
</ruleset><ruleset name="Miranda-IM">
  <target host="miranda-im.org" />
  <target host="*.miranda-im.org" />

  <rule from="^http://([^/:@]*)\.miranda-im\.org/" to="https://$1.miranda-im.org/"/>
</ruleset>

<ruleset name="Mitsubishi.com">
  <target host="www.mitsubishi.com" />
  <target host="mitsubishi.com" />

  <rule from="^http://(www\.)?mitsubishi\.com/" to="https://www.mitsubishi.com/"/>
</ruleset>
<!-- uses content from http://c0658142.cdn.cloudfiles.rackspacecloud.com which does not use https. -->
<!-- blog.mixx.com doesnt use https -->
<!-- help.mixx.com doesnt use https -->
<!-- engineroom.mixx.com doesnt use https -->
<ruleset name="mixx.com">
	<target host="mixx.com" />
	<target host="www.mixx.com" />
	<rule from="^http://mixx\.com/" to="https://mixx.com/"/>
	<rule from="^http://www\.mixx\.com/" to="https://www.mixx.com/"/>
</ruleset>

<ruleset name="ModSecurity">
  <target host="modsecurity.org" />
  <target host="www.modsecurity.org" />

  <rule from="^http://(www\.)?modsecurity\.org/" to="https://modsecurity.org/"/>
</ruleset>
<ruleset name="Moneybookers">
  <target host="moneybookers.com" />
  <target host="www.moneybookers.com" />

  <rule from="^http://(www\.)?moneybookers\.com/" to="https://www.moneybookers.com/"/>
</ruleset>
<ruleset name="Mookie1.com">
	<target host="t.mookie1.com" />
	<target host="b3-uk.mookie1.com" />
	<target host="b3.mookie1.com" />
	<target host="dna1.mookie1.com" />

	<rule from="^http://(t|b3-uk|b3|dna1)\.mookie1\.com/" to="https://$1.mookie1.com/" />
</ruleset><ruleset name="MoonPig">
  <target host="moonpig.com" />
  <target host="www.moonpig.com" />
  <target host="moonpig.com.au" />
  <target host="www.moonpig.com.au" />

  <securecookie host="^(.+\.)?moonpig\.com(\.au)?$" name=".*"/>

  <rule from="^http://(www\.)?moonpig\.com/"     to="https://moonpig.com/"/>
  <rule from="^http://(www\.)?moonpig\.com\.au/" to="https://www.moonpig.com.au/"/>
</ruleset>
<!-- dating sites. included on lots of other sites -->
<ruleset name="Motesplatsen.se">
	<target host="www.motesplatsen.se" />
	<rule from="^http://www\.motesplatsen\.se/" to="https://www.motesplatsen.se/"/>
</ruleset>

<ruleset name="Mountyhall" default_off="self-signed">
  <target host="games.mountyhall.com" />

  <rule from="^http://games\.mountyhall\.com/" to="https://games.mountyhall.com/" />
</ruleset>
<ruleset name="MoveOn">
	<target host="www.moveon.org" />
	<target host="pol.moveon.org" />
	<target host="civic.moveon.org" />
	<target host="civ.moveon.org" />
	<target host="moveonpac.org" />
	<target host="www.moveonpac.org" />

	<!-- For a URL such as http://www.moveon.org/press where
	there is no trailing slash, add a trailing slash when
	changing the URL to HTTPS (the previous URL becomes
	https://www.moveon.org/press/ for instance.) -->
	<rule from="^https?://(www\.)?moveon\.org/([a-z0-9]+)$" to="https://www.moveon.org/$2/" />
	<rule from="^https?://(pol|civic|civ)\.moveon\.org/([a-z0-9]+)$" to="https://$1.moveon.org/$2/" />

	<!-- As of April 23, 2011, the URL https://www.moveon.org/keepmeposted/ redirects to the
	https://civic.moveon.org/keepmeposted// URL. This is probably an error-the correct URL
	should be https://civic.moveon.org/keepmeposted/ instead. The rule that comes next tries
	to correct this error by adjusting certain URLs that end with two or more slashes. -->
	<rule from="^https?://civic\.moveon\.org/([a-z0-9]+){1}/{2,}" to="https://civic.moveon.org/$1/" />

	<!-- Change URLs that start with http://www.moveon.org/r? to start with
	https://www.moveon.org/r/? instead. -->
	<rule from="^http://(www\.)?moveon\.org/r\?" to="https://www.moveon.org/r/?" />

	<!-- Handle URLs that do not fall within the previously mentioned
	special cases. -->
	<rule from="^http://(www\.)?moveon\.org/(([^a-z0-9]+)|([a-z0-9]{2,}\?)|([a-qs-z0-9]\?)|([a-z0-9]+[^a-z0-9?]+)){1}" to="https://www.moveon.org/$2" />
	<rule from="^http://(pol|civ)\.moveon\.org/([^a-z0-9]+|([a-z0-9]+[^a-z0-9]+)|$){1}" to="https://$1.moveon.org/$2" />
	<rule from="^http://civic\.moveon\.org/(([^a-z0-9]+)|([a-z0-9]+[^a-z0-9/]+)|([a-z0-9]+/($|[^/]+))|$){1}" to="https://civic.moveon.org/$1" />

	<!-- Handle URLs for the moveonpac.org domain. -->
	<rule from="^http://(www\.)?moveonpac\.org/" to="https://www.moveonpac.org/" />
</ruleset>
<ruleset name="Movelia">
  <target host="movelia.es" />
  <target host="www.movelia.es" />

  <rule from="^http://(www\.)?movelia\.es/" to="https://www.movelia.es/" />
</ruleset>
<ruleset name="Mozdev">
  <target host="mozdev.org"/>
  <target host="hg.mozdev.org"/>
  <target host="www.mozdev.org"/>

  <rule from="^http://mozdev\.org/" to="https://mozdev.org/"/>
  <rule from="^http://(hg|www)\.mozdev\.org/" to="https://$1.mozdev.org/"/>
</ruleset><!-- BOOOO: Firefox.com (which some download links pass through) is in
     HTTP only... -->

<ruleset name="Mozilla">
  <target host="mozilla.org" />
  <target host="*.mozilla.org" />
  <target host="mozilla.com" />
  <target host="*.mozilla.com" />
  <target host="mozillalabs.com" />
  <target host="*.mozillalabs.com" />
  <target host="mozillamessaging.com" />
  <target host="www.mozillamessaging.com" />
  <target host="planet.mozillamessaging.com" />

  <rule from="^http://mozilla\.org/" to="https://www.mozilla.org/"/>
  <rule from="^http://(addons|bzr|communitystore|creative|developer|directory|donate|education|firefoxlive|ftp|intlstore|krakenbenchmark|lists|l10n|localize|hacks|hg|labs|mail|mpl|mxr|nightly|planet|studentreps|quality|wiki|www|www-archive)\.mozilla\.org/" to="https://$1.mozilla.org/"/>

  <rule from="^http://mozilla\.com/" to="https://www.mozilla.com/"/>
  <rule from="^http://(blog|input|people|support|www)\.mozilla\.com/" to="https://$1.mozilla.com/"/>

  <rule from="^http://(www\.)?mozillalabs\.com/" to="https://mozillalabs.com/"/>
  <rule from="^http://(apps|bespin|bespinplugins|gaming|heatmap|jetpack|testpilot)\.mozillalabs\.com/" to="https://$1.mozillalabs.com/"/>

  <rule from="^http://mozillamessaging\.com/" to="https://mozillamessaging.com/"/>
  <rule from="^http://(planet|www)\.mozillamessaging\.com/" to="https://$1.mozillamessaging.com/"/>
</ruleset>
<ruleset name="Mozy">
  <target host="mozy.com" />
  <target host="mozy.co.uk" />
  <target host="www.mozy.com" />
  <target host="www.mozy.co.uk" />

  <securecookie host="^(.+\.)?mozy\.com$" name=".*"/>
  <securecookie host="^(.+\.)?mozy\.co\.uk$" name=".*"/>

  <rule from="^http://(www\.)?mozy\.com/" to="https://mozy.com/"/>
  <rule from="^http://(www\.)?mozy\.co\.uk/" to="https://mozy.co.uk/"/>
</ruleset>
<ruleset name="Mpx">
  <target host="mpx.no" />
  <target host="www.mpx.no" />

  <rule from="^http://(www\.)?mpx\.no/" to="https://www.mpx.no/"/>
</ruleset>

<ruleset name="Mullet.se">
	<target host="mullet.se" />
	<target host="www.mullet.se" />
	<rule from="^http://www\.mullet\.se/" to="https://www.mullet.se/"/>
	<rule from="^http://mullet\.se/" to="https://mullet.se/"/>
</ruleset>

<ruleset name="Mullvad.net">
	<target host="mullvad.net" />
	<target host="www.mullvad.net" />
	<rule from="^http://mullvad\.net/" to="https://mullvad.net/"/>
	<rule from="^http://www\.mullvad\.net/" to="https://www.mullvad.net/"/>
</ruleset>

<!-- musikerforbundet is a swedish labour union -->
<ruleset name="Musikerforbundet.se">
	<target host="musikerforbundet.se" />
	<target host="www.musikerforbundet.se" />
	<rule from="^http://musikerforbundet\.se/" to="https://www.musikerforbundet.se/"/>
	<rule from="^http://www\.musikerforbundet\.se/" to="https://www.musikerforbundet.se/"/>
</ruleset>

<ruleset name="My-files.de">
  <target host="w01.my-files.de" />
  <rule from="^http://w01\.my-files\.de/" to="https://w01.my-files.de/"/>
</ruleset>
<ruleset name="MyCharity.ie">
  <!-- cert valid only for www. -->
  <target host="mycharity.ie" />
  <target host="www.mycharity.ie" />

  <rule from="^http://(www\.)?mycharity\.ie/" to="https://www.mycharity.ie/"/>
</ruleset>
<ruleset name="MyPoints">
  <target host="mypoints.com" />
  <target host="www.mypoints.com" />

  <rule from="^http://(www\.)?mypoints\.com/" to="https://www.mypoints.com/"/>
</ruleset>
<ruleset name="MySQL">
  <target host="mysql.com" />
  <target host="*.mysql.com" />

  <exclusion pattern="^http://dev\.mysql\.com/" />
  <exclusion pattern="^http://bugs\.mysql\.com/" />
  <exclusion pattern="^http://wb\.mysql\.com/" />
  <exclusion pattern="^http://lists\.mysql\.com/" />
  <exclusion pattern="^http://planet\.mysql\.com/" />

  <rule from="^http://mysql\.com/" to="https://www.mysql.com/"/>
  <rule from="^http://([^/:@]*)\.mysql\.com/" to="https://$1.mysql.com/"/>
</ruleset>
<ruleset name="MyTUM.de">
  <target host="portal.mytum.de"/>

  <securecookie host="portal.mytum\.de$" name=".*" />

  <rule from="^http://portal\.mytum\.de/" to="https://portal.mytum.de/"/>
</ruleset>
<ruleset name="MyUHC">
  <target host="myuhc.com" />
  <target host="www.myuhc.com" />

  <rule from="^http://(www\.)?myuhc\.com/" to="https://www.myuhc.com/"/>
</ruleset>

<ruleset name="MyWOT">
  <target host="mywot.com" />
  <target host="www.mywot.com" />

  <rule from="^http://(www\.)?mywot\.com/" to="https://www.mywot.com/"/>
</ruleset>
<ruleset name="NL Politiek">
  <!-- Rule created by Jeroen van der Gun -->

  <target host="cda.nl" />
  <target host="www.cda.nl" />
  <target host="d66.nl" />
  <target host="www.d66.nl" />
  <target host="groenlinks.nl" />
  <target host="www.groenlinks.nl" />
  <target host="sp.nl" />
  <target host="www.sp.nl" />

  <rule from="^http://(?:www\.)?(cda|d66|sp)\.nl/" to="https://www.$1.nl/" />
  <rule from="^http://(?:www\.)?(groenlinks)\.nl/" to="https://$1.nl/" />
</ruleset>
<ruleset name="National Lawyers Guild">
  <target host="nlg.org" />
  <target host="www.nlg.org" />

  <rule from="^http://(www\.)?nlg\.org/" to="https://www.nlg.org/" />
</ruleset>
<!-- media.npr.org lacks ssl. -->
<ruleset name="NPR.org">
  <target host="www.npr.org" />
  <target host="npr.org" />
  <rule from="^http://www\.npr\.org/" to="https://www.npr.org/"/>
  <rule from="^http://npr\.org/" to="https://www.npr.org/"/>
</ruleset>

<ruleset name="NSF.gov">
  <target host="www.nsf.gov" />
  <target host="nsf.gov" />
  <rule from="^http://www\.nsf\.gov/" to="https://www.nsf.gov/"/>
  <rule from="^http://nsf\.gov/" to="https://www.nsf.gov/"/>
</ruleset>

<ruleset name="Nttdocomo.com">
  <target host="www.nttdocomo.com" />
  <target host="nttdocomo.com" />
  <rule from="^http://www\.nttdocomo\.com/" to="https://www.nttdocomo.com/"/>
  <rule from="^http://nttdocomo\.com/" to="https://www.nttdocomo.com/"/>
</ruleset>

<ruleset name="NTU">
  <target host="ntu.ac.uk" />
  <target host="www.ntu.ac.uk" />
  <target host="ntualumni.org.uk" />
  <target host="www.ntualumni.org.uk" />

  <rule from="^http://(www\.)?ntu\.ac\.uk/" to="https://www.ntu.ac.uk/"/>
  <rule from="^http://(www\.)?ntualumni\.org\.uk/" to="https://www.ntualumni.org.uk/"/>
</ruleset>
<ruleset name="NYDailyNews">
  <target host="nydailynews.com" />
  <target host="www.nydailynews.com" />
  <target host="classifiedads.dailynews.com" />

  <securecookie host="^([^@:/]+\.)?nydailynews\.com$" name=".*"/>

  <rule from="^http://(www\.)?nydailynews\.com/" to="https://www.nydailynews.com/"/>
  <rule from="^http://(classifiedads)\.nydailynews\.com/" to="https://$1.nydailynews.com/"/>
</ruleset>
<ruleset name="NYTimes">
  <target host="*.nytimes.com" />
  <target host="nytimes.com" />

  <exclusion pattern="^http://(www\.)?nytimes\.com/roomfordebate"/>
  <exclusion pattern="^http://(www\.)?nytimes\.com/(1[89]\d\d|200[0-4])/"/>
  <exclusion pattern="^http://(www\.)?nytimes\.com/info/"/>
  <exclusion pattern="^http://(www\.)?nytimes\.com/services/xml/rss/index.html"/>

  <rule from="^http://(www\.)?nytimes\.com/" to="https://www.nytimes.com/"/>
  <rule from="^http://global\.nytimes\.com/" to="https://global.nytimes.com/"/>
</ruleset>
<ruleset name="NZBIndex.nl">
  <target host="nzbindex.nl" />
  <target host="www.nzbindex.nl" />

  <rule from="^http://(www\.)?nzbindex\.nl/" to="https://nzbindex.nl/"/>
</ruleset>

<ruleset name="NameCheap">
  <target host="namecheap.com" />
  <target host="www.namecheap.com" />
  <target host="files.namecheap.com" />

  <rule from="^http://(www\.)?namecheap\.com/" to="https://www.namecheap.com/"/>
  <rule from="^http://files\.namecheap\.com/" to="https://files.namecheap.com/"/>
</ruleset>
<ruleset name="Names">
  <target host="names.co.uk" />
  <target host="www.names.co.uk" />
  <target host="admin.names.co.uk" />
  <target host="webmail4.names.co.uk" />

  <rule from="^http://(www\.)?names\.co\.uk/" to="https://www.names.co.uk/"/>
  <rule from="^http://(admin|webmail4?)\.names\.co\.uk/" to="https://$1.names.co.uk/"/>
</ruleset>
<ruleset name="NationalArchivesGovUK">
  <target host="nationalarchives.gov.uk"/>
  <target host="www.nationalarchives.gov.uk"/>

  <securecookie host="^(.+\.)?nationalarchives\.gov\.uk$" name=".*"/>

  <rule from="^http://(www\.)?nationalarchives\.gov\.uk/" to="https://www.nationalarchives.gov.uk/"/>
</ruleset>
<ruleset name="NationalLottery">
  <target host="national-lottery.co.uk" />
  <target host="www.national-lottery.co.uk" />

  <securecookie host="^(.+\.)?national-lottery\.co\.uk$" name=".*"/>

  <rule from="^http://(www\.)?national-lottery\.co\.uk/" to="https://www.national-lottery.co.uk/"/>
</ruleset>
<ruleset name="Nattstad.se">
	<target host="nattstad.se" />
	<target host="www.nattstad.se" />
	<rule from="^http://www\.nattstad\.se/" to="https://www.nattstad.se/"/>
	<rule from="^http://nattstad\.se/" to="https://www.nattstad.se/"/>
</ruleset>

<ruleset name="Naturvardsverket.se">
	<target host="naturvardsverket.se" />
	<target host="www.naturvardsverket.se" />
	<rule from="^http://www\.naturvardsverket\.se/" to="https://www.naturvardsverket.se/"/>
	<rule from="^http://naturvardsverket\.se/" to="https://naturvardsverket.se/"/>
</ruleset>

<ruleset name="NL Overheid">
  <!-- Ruleset created by Jeroen van der Gun

       This large ruleset secures a large amount of websites
       of governmental organizations in the Netherlands.
       Note that it only applies one, simple, general rule to them,
       so the sites might not be fully covered.
       Feel free to contact me for questions.

       NOT included are:
       * Sites that use HTTPS automatically
       * Sites that redirect back to HTTP
       -->

  <!-- Diversen -->
  <target host="digid.nl" /><target host="www.digid.nl" />
  <target host="overheid.nl" /><target host="www.overheid.nl" />
  <target host="internetconsultatie.nl" /><target host="www.internetconsultatie.nl" />
  <target host="werkenbijdeoverheid.nl" /><target host="www.werkenbijdeoverheid.nl" />
  <target host="nationaleombudsman.nl" /><target host="www.nationaleombudsman.nl" />
  <target host="govcert.nl" /><target host="www.govcert.nl" />

  <!-- Politie -->
  <target host="politie.nl" /><target host="www.politie.nl" />
  <target host="depolitiezoekt.nl" /><target host="www.depolitiezoekt.nl" />

  <!-- Ministeries -->
  <target host="minbzk.nl" /><target host="www.minbzk.nl" />
  <target host="waarschuwingsdienst.nl" /><target host="www.waarschuwingsdienst.nl" />
  <target host="bprbzk.nl" /><target host="www.bprbzk.nl" />
  <target host="minfin.nl" /><target host="www.minfin.nl" />
  <target host="domeinenrz.nl" /><target host="www.domeinenrz.nl" />
  <target host="justitie.nl" /><target host="www.justitie.nl" />
  <target host="cjib.nl" /><target host="www.cjib.nl" />
  <target host="wodc.nl" /><target host="www.wodc.nl" />
  <target host="forensischinstituut.nl" /><target host="www.forensischinstituut.nl" />
  <target host="hetlnvloket.nl" /><target host="www.hetlnvloket.nl" />
  <target host="donorregister.nl" /><target host="www.donorregister.nl" />

  <!-- Provincies (alfabetisch) -->
  <target host="brabant.nl" /><target host="www.brabant.nl" />
  <target host="overijssel.nl" /><target host="www.overijssel.nl" />
  <target host="zeeland.nl" /><target host="www.zeeland.nl" />

  <!-- Gemeenten (alfabetisch) -->
  <target host="aaenhunze.nl" /><target host="www.aaenhunze.nl" />
  <target host="amersfoort.nl" /><target host="www.amersfoort.nl" />
  <target host="amstelveen.nl" /><target host="www.amstelveen.nl" />
  <target host="amsterdam.nl" /><target host="www.amsterdam.nl" />
  <target host="bergenopzoom.nl" /><target host="www.bergenopzoom.nl" />
  <target host="gemeenteberkelland.nl" /><target host="www.gemeenteberkelland.nl" />
  <target host="gemeentebest.nl" /><target host="www.gemeentebest.nl" />
  <target host="boarnsterhim.nl" /><target host="www.boarnsterhim.nl" />
  <target host="borne.nl" /><target host="www.borne.nl" />
  <target host="coevorden.nl" /><target host="www.coevorden.nl" />
  <target host="doesburg.nl" /><target host="www.doesburg.nl" />
  <target host="duiven.nl" /><target host="www.duiven.nl" />
  <target host="elburg.nl" /><target host="www.elburg.nl" />
  <target host="geldermalsen.nl" /><target host="www.geldermalsen.nl" />
  <target host="haaksbergen.nl" /><target host="www.haaksbergen.nl" />
  <target host="haarlemmermeer.nl" /><target host="www.haarlemmermeer.nl" />
  <target host="heerenveen.nl" /><target host="www.heerenveen.nl" />
  <target host="s-hertogenbosch.nl" /><target host="www.s-hertogenbosch.nl" />
  <target host="heusden.nl" /><target host="www.heusden.nl" />
  <target host="hilversum.nl" /><target host="www.hilversum.nl" />
  <target host="hoorn.nl" /><target host="www.hoorn.nl" />
  <target host="horstaandemaas.nl" /><target host="www.horstaandemaas.nl" />
  <target host="houten.nl" /><target host="www.houten.nl" />
  <target host="huizen.nl" /><target host="www.huizen.nl" />
  <target host="lochem.nl" /><target host="www.lochem.nl" />
  <target host="maarssen.nl" /><target host="www.maarssen.nl" />
  <target host="maastricht.nl" /><target host="www.maastricht.nl" />
  <target host="meerssen.nl" /><target host="www.meerssen.nl" />
  <target host="middelburg.nl" /><target host="www.middelburg.nl" />
  <target host="middendrenthe.nl" /><target host="www.middendrenthe.nl" />
  <target host="moerdijk.nl" /><target host="www.moerdijk.nl" />
  <target host="gemeentenoordenveld.nl" /><target host="www.gemeentenoordenveld.nl" />
  <target host="noordwijkerhout.nl" /><target host="www.noordwijkerhout.nl" />
  <target host="oldebroek.nl" /><target host="www.oldebroek.nl" />
  <target host="opsterland.nl" /><target host="www.opsterland.nl" />
  <target host="oss.nl" /><target host="www.oss.nl" />
  <target host="pijnacker-nootdorp.nl" /><target host="www.pijnacker-nootdorp.nl" />
  <target host="renkum.nl" /><target host="www.renkum.nl" />
  <target host="rheden.nl" /><target host="www.rheden.nl" />
  <target host="rijswijk.nl" /><target host="www.rijswijk.nl" />
  <target host="schiedam.nl" /><target host="www.schiedam.nl" />
  <target host="schijndel.nl" /><target host="www.schijndel.nl" />
  <target host="sittard-geleen.nl" /><target host="www.sittard-geleen.nl" />
  <target host="smallingerland.nl" /><target host="www.smallingerland.nl" />
  <target host="stedebroec.nl" /><target host="www.stedebroec.nl" />
  <target host="steenwijkerland.nl" /><target host="www.steenwijkerland.nl" />
  <target host="terneuzen.nl" /><target host="www.terneuzen.nl" />
  <target host="teylingen.nl" /><target host="www.teylingen.nl" />
  <target host="tubbergen.nl" /><target host="www.tubbergen.nl" />
  <target host="uden.nl" /><target host="www.uden.nl" />
  <target host="utrecht.nl" /><target host="www.utrecht.nl" />
  <target host="vlagtwedde.nl" /><target host="www.vlagtwedde.nl" />
  <target host="vlissingen.nl" /><target host="www.vlissingen.nl" />
  <target host="wageningen.nl" /><target host="www.wageningen.nl" />
  <target host="weert.nl" /><target host="www.weert.nl" />
  <target host="gemeentewesterveld.nl" /><target host="www.gemeentewesterveld.nl" />
  <target host="gemeentewestland.nl" /><target host="www.gemeentewestland.nl" />
  <target host="wierden.nl" /><target host="www.wierden.nl" />
  <target host="wijchen.nl" /><target host="www.wijchen.nl" />
  <target host="winterswijk.nl" /><target host="www.winterswijk.nl" />
  <target host="zaltbommel.nl" /><target host="www.zaltbommel.nl" />
  <target host="zandvoort.nl" /><target host="www.zandvoort.nl" />
  <target host="zeist.nl" /><target host="www.zeist.nl" />
  <target host="zutphen.nl" /><target host="www.zutphen.nl" />
  <target host="zwijndrecht.nl" /><target host="www.zwijndrecht.nl" />

  <!-- And, of course, The Rule -->
  <rule from="^http://(?:www\.)?([\w-]+)\.nl/" to="https://www.$1.nl/" />
</ruleset>
<ruleset name="Neelwafurat.com">
  <target host="neelwafurat.com" />
  <target host="www.neelwafurat.com" />

  <rule from="^http://(www\.)?neelwafurat\.com/" to="https://$1neelwafurat.com/" />
</ruleset><ruleset name="Nelly.com">
  <target host="www.nelly.com" />
  <target host="nelly.com" />
  <rule from="^http://www\.nelly\.com/" to="https://nelly.com/"/>
  <rule from="^http://nelly\.com/" to="https://nelly.com/"/>
</ruleset>

<ruleset name="net-security.org">
	<target host="www.net-security.org" />
	<target host="net-security.org" />
	<rule from="^http://www\.net-security\.org/" to="https://www.net-security.org/"/>
	<rule from="^http://net-security\.org/" to="https://net-security.org/"/>
</ruleset>

<ruleset name="Netdoktor.se">
  <target host="www.netdoktor.se" />
  <target host="netdoktor.se" />
  <rule from="^http://www\.netdoktor\.se/" to="https://www.netdoktor.se/"/>
  <rule from="^http://netdoktor\.se/" to="https://www.netdoktor.se/"/>
</ruleset>

<ruleset name="Netflix">
  <target host="netflix.com" />
  <target host="*.netflix.com" />
  <exclusion pattern="^http://blog.netflix.com/" />
  <exclusion pattern="^http://developer.netflix.com/" />
  <exclusion pattern="^http://ir.netflix.com/" />
  <exclusion pattern="^http://techblog.netflix.com/" />

  <rule from="^http://([^/:@]*)\.netflix\.com/" to="https://$1.netflix.com/"/>
</ruleset>
<ruleset name="Nettica">
  <target host="nettica.com" />
  <target host="www.netteca.com" />

  <rule from="^http://(www\.)?nettica\.com/" to="https://www.nettica.com/" />
</ruleset>
<ruleset name="NetworkWorld">
  <target host="networkworld.com"/>
  <target host="www.networkworld.com"/>

  <securecookie host="^(.+\.)?networkworld\.com$" name=".*"/>

  <rule from="^http://(www\.)networkworld\.com/" to="https://www.networkworld.com/"/>
</ruleset>
<ruleset name="Netzpolitik.org">
  <target host="netzpolitik.org" />
  <target host="www.netzpolitik.org" />

	<rule from="^http://(www\.)?netzpolitik\.org/" to="https://netzpolitik.org/"/>
</ruleset>
<ruleset name="NewIT">
  <target host="newit.co.uk" />
  <target host="www.newit.co.uk" />

  <securecookie host="^(.+\.)?newit\.co\.uk$" name=".*"/>

  <rule from="^http://(www\.)?newit\.co\.uk/" to="https://newit.co.uk/"/>
</ruleset>
<ruleset name="NewsGator">
	<target host="newsgator.com" />
	<target host="www.newsgator.com" />

	<rule from="^http://(www\.)?newsgator\.com/" to="https://www.newsgator.com/" />
</ruleset><!-- www.polls.newsvine.com uses akamai -->
<!-- i.newsvine.com lacks ssl. -->
<ruleset name="newsvine.com">
	<target host="newsvine.com" />
	<rule from="^http://newsvine\.com/" to="https://www.newsvine.com/"/>
	<rule from="^http://www\.newsvine\.com/" to="https://www.newsvine.com/"/>
</ruleset>

<ruleset name="Next">
  <target host="next.co.uk" />
  <target host="www.next.co.uk" />

  <securecookie host="^(.+\.)?next\.co\.uk$" name=".*"/>

  <rule from="^http://(www\.)?next\.co\.uk/" to="https://www.next.co.uk/"/>
</ruleset>
<ruleset name="NextBus">
	<target host="nextbus.com" />
	<target host="www.nextbus.com" />
	<rule from="^http://(www\.)?nextbus\.com/"
		to="https://www.nextbus.com/" />
</ruleset>
<ruleset name="Nicotine Anonymous">
	<target host="nicotine-anonymous.org" />
	<target host="www.nicotine-anonymous.org" />

	<rule from="^http://(www\.)?nicotine-anonymous\.org/" to="https://nicotine-anonymous.org/" />

	<!-- Invoking https://www.nicotine-anonymous.org/ produces a
	certificate error, so redirect https://www.nicotine-anonymous.org/
	to https://nicotine-anonymous.org/ -->
	<rule from="^https://www\.nicotine-anonymous\.org/" to="https://nicotine-anonymous.org/" />
</ruleset><ruleset name="Ninite">
  <target host="ninite.com" />
  <target host="www.ninite.com" />

  <securecookie host="^(.+\.)?ninite\.com$" name=".*"/>

  <rule from="^http://(www\.)?ninite\.com/" to="https://ninite.com/"/>
</ruleset><ruleset name="Nintendo.com">
	<target host="nintendo.com" />
	<target host="www.nintendo.com" />
	<rule from="^http://nintendo\.com/" to="https://nintendo.com/"/>
	<rule from="^http://www\.nintendo\.com/" to="https://www.nintendo.com/"/>
</ruleset>

<ruleset name="Noisebridge">
  <target host="www.noisebridge.net" />
  <target host="noisebridge.net" />

  <rule from="^http://(www\.)?noisebridge\.net/" to="https://www.noisebridge.net/"/>
</ruleset>
<ruleset name="Nokia">
  <target host="nokia.com" />
  <target host="www.nokia.com" />
  <target host="nokiausa.com" />
  <target host="www.nokiausa.com" />
  <target host="nokia.co.uk" />
  <target host="www.nokia.co.uk" />
  <target host="nokia.ca" />
  <target host="www.nokia.ca" />
  <target host="nokia.fr" />
  <target host="www.nokia.fr" />
  <target host="nokia.de" />
  <target host="www.nokia.de" />
  <target host="qt.nokia.com" />

  <rule from="^http://(www\.)?nokia\.com/" to="https://www.nokia.com/"/>
  <rule from="^http://(www\.)?nokiausa\.com/" to="https://www.nokiausa.com/"/>
  <rule from="^http://(www\.)?nokia\.co\.uk/" to="https://www.nokia.co.uk/"/>
  <rule from="^http://(www\.)?nokia\.ca/" to="https://www.nokia.ca/"/>
  <rule from="^http://(www\.)?nokia\.fr/" to="https://www.nokia.fr/"/>
  <rule from="^http://(www\.)?nokia\.de/" to="https://www.nokia.de/"/>
  <rule from="^http://qt\.nokia\.com/" to="https://qt.nokia.com/"/>
</ruleset>
<ruleset name="Nordea">
  <target host="www.nordea.*" />
  <target host="nordea.*" />

  <!-- .lt: bad cert, .lu: no SSL -->
  <rule from="^http://(www\.)?nordea\.(com|dk|ee|fi|lv|no|se)/"
          to="https://www.nordea.$2/"/>
</ruleset>
<!-- already enforces SSL. adding to prevent ssl strip attacks -->
<ruleset name="Nordnet.se">
  <target host="www.nordnet.se" />
  <target host="nordnet.se" />
  <rule from="^http://www\.nordnet\.se/" to="https://www.nordnet.se/"/>
  <rule from="^http://nordnet\.se/" to="https://www.nordnet.se/"/>
</ruleset>

<ruleset name="Nordu.net">
	<target host="nordu.net" />
	<target host="www.nordu.net" />
	<rule from="^http://www\.nordu\.net/" to="https://www.nordu.net/"/>
	<rule from="^http://nordu\.net/" to="https://www.nordu.net/"/>
</ruleset>

<ruleset name="Norman.com">
	<target host="norman.com" />
	<target host="www.norman.com" />
	<rule from="^http://www\.norman\.com/" to="https://www.norman.com/"/>
	<rule from="^http://norman\.com/" to="https://norman.com/"/>
</ruleset>

<ruleset name="Norwegian.com">
  <target host="www.norwegian.com" />
  <target host="norwegian.com" />
  <rule from="^http://www\.norwegian\.com/" to="https://www.norwegian.com/"/>
  <rule from="^http://norwegian\.com/" to="https://www.norwegian.com/"/>
</ruleset>

<ruleset name="NottinghamAC">
  <target host="nottingham.ac.uk" />
  <target host="www.nottingham.ac.uk" />
  <target host="jobs.nottingham.ac.uk" />
  <target host="email.nottingham.ac.uk" />
  <target host="owa.nottingham.ac.uk" />

  <rule from="^http://((www|jobs|email|owa|jobs)\.)?nottingham\.ac\.uk/" to="https://$1nottingham.ac.uk/"/>
</ruleset>
<ruleset name="NutriCentre">
  <target host="nutricentre.com" />
  <target host="www.nutricentre.com" />

  <securecookie host="^(.*\.)?nutricentre\.com$" name=".*" />

  <rule from="^http://(www\.)?nutricentre\.com/" to="https://www.nutricentre.com/"/>
</ruleset><ruleset name="O2online.de">
  <target host="o2online.de"/>
  <target host="*.o2online.de"/>

  <securecookie host="^(.*\.)?o2online\.de$" name=".*" />

  <rule from="^http://(www\.)?o2online\.de/" to="https://www.o2online.de/"/>
  <rule from="^http://o2online\.de/" to="https://www.o2online.de/"/>
</ruleset>
<ruleset name="OKCupid.com" default_off="Broken">
  <target host="okcupid.com" />
  <target host="www.okcupid.com" />

  <rule from="^http://(www\.)?okcupid\.com/" to="https://www.okcupid.com/" />
</ruleset>
<ruleset name="US OSHA.gov">
	<target host="osha.gov" />
	<target host="www.osha.gov" />

	<rule from="^http://(www\.)?osha\.gov/" to="https://www.osha.gov/" />

	<!-- Invoking https://osha.gov/ produces a certificate error, so
	redirect https://osha.gov/ to https://www.osha.gov/ -->
	<rule from="^https://osha\.gov/" to="https://www.osha.gov/" />
</ruleset><!-- officersforbundet is a swedish labour union -->
<ruleset name="Officersforbundet.se">
	<target host="officersforbundet.se" />
	<target host="www.officersforbundet.se" />
	<rule from="^http://officersforbundet\.se/" to="https://www.officersforbundet.se/"/>
	<rule from="^http://www\.officersforbundet\.se/" to="https://www.officersforbundet.se/"/>
</ruleset>

<ruleset name="Olark">
  <target host="olark.com" />
  <target host="*.olark.com" />

  <securecookie host="^(.+\.)?olark\.com$" name=".*"/>

  <rule from="^http://(www\.)?olark\.com/" to="https://www.olark.com/" />
  <rule from="^http://(assets|static|[0-9]+-async|)\.olark\.com/" to="https://$1.olark.com/" />
</ruleset>
<ruleset name="OmniGroup.com">
	<target host="omnigroup.com" />
	<target host="www.omnigroup.com" />
	<rule from="^http://omnigroup\.com/" to="https://www.omnigroup.com/"/>
	<rule from="^http://www\.omnigroup\.com/" to="https://www.omnigroup.com/"/>
</ruleset>

<ruleset name="Omron.com">
  <target host="www.omron.com" />
  <target host="omron.com" />

  <rule from="^http://(www\.)?omron\.com/" to="https://www.omron.com/"/>
</ruleset>
<ruleset name="one.com">
  <target host="one.com" />
  <rule from="^http://one\.com/" to="https://www.one.com/"/>
  <rule from="^http://www\.one\.com/" to="https://www.one.com/"/>
</ruleset>

<ruleset name="Onehub.com">
  <target host="onehub.com" />
  <target host="www.onehub.com" />

  <rule from="^http://(www\.)?onehub\.com/" to="https://onehub.com/"/>
</ruleset>
<ruleset name="Online.nl">
  <target host="*.online.nl" />

  <rule from="^http://(www\.)?online\.nl/" to="https://www.online.nl/"/>
  <rule from="^http://registratie\.online\.nl/" to="https://registratie.online.nl/"/>
</ruleset>
<ruleset name="Ontario Lung Association">
	<target host="on.lung.ca" />
	<target host="www.on.lung.ca" />

	<rule from="^http://(www\.)?on\.lung\.ca/" to="https://www.on.lung.ca/" />

	<!-- Invoking https://on.lung.ca/ produces a certificate error, so
	redirect https://on.lung.ca/ to https://www.on.lung.ca/ -->
	<rule from="^https://on\.lung\.ca/" to="https://www.on.lung.ca/" />
</ruleset><ruleset name="OomphMe" default_off="Cert warning">
  <target host="www.oomphme.com" />
  <target host="oomphme.com" />

  <rule from="^http://(www\.)?oomphme\.com/" to="https://www.oomphme.com/"/>
</ruleset>
<ruleset name="Open-Mesh">
  <target host="open-mesh.com" />
  <target host="www.open-mesh.com" />
  <target host="dashboard.open-mesh.com" />

  <rule from="^http://(www\.)?open-mesh\.com/" to="https://www.open-mesh.com/"/>
  <rule from="^http://dashboard\.open-mesh\.com/" to="https://dashboard.open-mesh.com/"/>
</ruleset>
<ruleset name="OpenDNS">
  <target host="opendns.com" />
  <target host="*.opendns.com" />

  <!-- https://trac.torproject.org/projects/tor/ticket/3734 -->
  <exclusion pattern="^http://screenshots\.opendns\.com/" />
<!-- more breakage reported by OpenDNS users --> 
  <exclusion pattern="^http://phish\.opendns\.com/" /> 
  <exclusion pattern="^http://block\.opendns\.com/" /> 
  <exclusion pattern="^http://guide\.opendns\.com/" /> 
	 

  <rule from="^http://(www\.)?opendns\.com/" to="https://www.opendns.com/"/>
  <rule from="^http://([^/:@]*)\.opendns\.com/" to="https://$1.opendns.com/"/>
</ruleset>
<ruleset name="OpenID">
  <target host="openid.net" />
  <target host="www.openid.net" />

  <rule from="^http://(www\.)?openid\.net/" to="https://openid.net/"/>
</ruleset>
<ruleset name="OpenLeaks">
  <target host="openleaks.org" />
  <target host="www.openleaks.org" />

  <rule from="^http://(www\.)?openleaks\.org/" to="https://$1openleaks.org/"/>
</ruleset>
<ruleset name="OpenSSL" default_off="different content between HTTP and HTTPS">
  <target host="openssl.org" />
  <target host="www.openssl.org" />

  <rule from="^http://(www\.)?openssl\.org/" to="https://www.openssl.org/"/>
</ruleset>

<ruleset name="OpenStreetMap Wiki">
  <target host="wiki.openstreetmap.org" />

	<rule from="^http://wiki\.openstreetmap\.org/" to="https://wiki.openstreetmap.org/"/>
</ruleset>
<ruleset name="The Open University">
<!--
        The OU has myriads of domains, most of which do not support https.
        Specifically, it appears that all department and faculty websites
        do not support it.

        However this ruleset does cover the general website, the prospectuses
        (undergraduate, graduate and research), StudentHome, TutorHome,
        OpenLearn/LearningSpace, LabSpace, and the OU Alumni website.

        Notable exceptions: www2.open.ac.uk, www8.open.ac.uk, library.open.ac.uk,
                            voyager.open.ac.uk, discuss2.open.ac.uk, www.open2.net

        Unknown: intranet.open.ac.uk, intranet-gw.open.ac.uk

        This ruleset does not include mail.google.com as that is already covered
        by the GoogleServices ruleset.
-->
  <target host="css2.open.ac.uk" />
  <target host="labspace.open.ac.uk" />
  <target host="learn.open.ac.uk" />
  <target host="msds.open.ac.uk" />
  <target host="openlearn.open.ac.uk" />
  <target host="www.open.ac.uk" />
  <target host="www3.open.ac.uk" />

<!--	The OU forwards www.openuniversity.ac.uk to www.open.ac.uk,
        but www.openuniversity.ac.uk does not support https. So we rewrite
        http://www.openuniversity.ac.uk directly to https://www.open.ac.uk
-->
  <target host="www.openuniversity.ac.uk" />

<!--
        The OU Worldwide offers lots of OU module materials
-->
  <target host="www.ouw.co.uk" />

<!--
        The OU Students Association, and their webshop
-->
  <target host="www.ousa.org.uk" />
  <target host="rsm2.rsmsecure.com" />

  <rule from="^http://([^@:/]+)\.open\.ac\.uk/" to="https://$1.open.ac.uk/"/>
  <rule from="^http://www\.openuniversity\.ac\.uk/" to="https://www.open.ac.uk/"/>
  <rule from="^http://www\.ouw\.co\.uk/" to="https://www.ouw.co.uk/"/>
  <rule from="^http://rsm2\.rsmsecure\.com/ousacart/webstore/" to="https://rsm2.rsmsecure.com/ousacart/webstore/"/>
  <rule from="^http://www\.ousa\.org\.uk/" to="https://www.ousa.org.uk/"/>
</ruleset>
<ruleset name="OpenVPN">
  <target host="openvpn.net" />
  <target host="www.openvpn.net" />

  <securecookie host="^(www\.)?openvpn\.net$" name=".*"/>

  <rule from="^http://(www\.)?openvpn\.net/" to="https://www.openvpn.net/"/>
</ruleset>
<ruleset name="Opera" default_off="very buggy">
  <target host="opera.com" />
  <target host="*.opera.com" />
  <target host="myopera.com" />
  <target host="*.myopera.com" />

  <rule from="^http://opera\.com/" to="https://opera.com/" />
  <rule from="^http://([^/:@]*)\.opera\.com/" to="https://$1.opera.com/" />
  <rule from="^http://myopera\.com/" to="https://myopera.com/" />
  <rule from="^http://([^/:@]*)\.myopera\.com/" to="https://$1.myopera.com/" />
</ruleset><!-- Although shop.orange.co.uk supports ssl but on some page it keeps
falling back to http -->

<ruleset name="Orange">
  <target host="orange.co.uk" />
  <target host="www.orange.co.uk" />
  <target host="www.orange.co.il" />
  <target host="orange.co.il" />

  <rule from="^http://(www\.)?orange\.co\.uk/" to="https://www.orange.co.uk/"/>
  <rule from="^http://(www\.)?orange\.co\.il/" to="https://www.orange.co.il/"/>
</ruleset>
<ruleset name="OverClockers">
  <target host="overclockers.co.uk" />
  <target host="www.overclockers.co.uk" />

  <rule from="^http://(www\.)?overclockers\.co\.uk/" to="https://www.overclockers.co.uk/"/>
</ruleset>
<ruleset name="OVH">
  <target host="ovh.com"/>
  <target host="www.ovh.com"/>
  <target host="ovh.co.uk"/>
  <target host="www.ovh.co.uk"/>
  <target host="ovh.de"/>
  <target host="www.ovh.de"/>

  <securecookie host="^(.*\.)?ovh.com$" name=".*" />
  <securecookie host="^(.*\.)?ovh.co.uk$" name=".*" />
  <securecookie host="^(.*\.)?ovh.de$" name=".*" />

  <rule from="^http://(www\.)?ovh\.com/" to="https://www.ovh.com/"/>
  <rule from="^http://(www\.)?ovh\.co\.uk/" to="https://www.ovh.co.uk/"/>
  <rule from="^http://(www\.)?ovh\.de/" to="https://www.ovh.de/"/>
</ruleset>
<ruleset name="Oxfam Unwrapped">
  <target host="oxfamirelandunwrapped.com" />
  <target host="www.oxfamirelandunwrapped.com" />
  <target host="netbel.oxfamireland.org" />

  <!-- Republic Of Ireland -->
  <rule from="^http://(www\.)?oxfamirelandunwrapped\.com/" to="https://www.oxfamirelandunwrapped.com/"/>
  <!-- Northern Ireland -->
  <rule from="^http://netbel\.oxfamireland\.org/" to="https://netbel.oxfamireland.org/"/>
</ruleset>
<ruleset name="OzBargain">
  <target host="ozbargain.com.au" />
  <target host="www.ozbargain.com.au" />

  <rule from="^(http|https)://(www\.)?ozbargain\.com\.au/" to="https://www.ozbargain.com.au/"/>
</ruleset>
<ruleset name="PBA Galleries">
  <target host="pbagalleries.com" />
  <target host="www.pbagalleries.com" />

  <rule from="^http://(www\.)?pbagalleries\.com/" to="https://www.pbagalleries.com/" />
</ruleset><ruleset name="PCCaseGear">
  <target host="pccasegear.com" />
  <target host="www.pccasegear.com" />
  <target host="pccasegear.com.au" />
  <target host="www.pccasegear.com.au" />

  <rule from="^(http|https)://(www\.)?pccasegear\.(com|com\.au)/" to="https://www.pccasegear.com/"/>
</ruleset>
<ruleset name="PC World">
  <target host="www.pcworld.com" />

  <rule from="^http://www\.pcworld\.com/" to="https://www.pcworld.com/"/>

</ruleset>
<ruleset name="PGP">
  <target host="pgp.com" />
  <target host="www.pgp.com" />
  <target host="sstats.pgp.com" />
  <target host="*.store.pgp.com" />

  <rule from="^http://(www\.)?pgp\.com/" to="https://www.pgp.com/"/>
  <rule from="^http://(sstats)\.pgp\.com/" to="https://$1.pgp.com/"/>
  <rule from="^http://([^/:@]+)\.store\.pgp\.com/" to="https://$1.store.pgp.com/"/>
</ruleset>
<ruleset name="prq.se">
	<target host="webmail.prq.se" />
	<target host="kundcenter.prq.se" />
	<rule from="^http://webmail\.prq\.se/" to="https://webmail.prq.se/"/>
	<rule from="^http://kundcenter\.prq\.se/" to="https://kundcenter.prq.se/"/>
</ruleset>

<ruleset name="PRV.se">
	<target host="prv.se" />
	<target host="www.prv.se" />
	<rule from="^http://www\.prv\.se/" to="https://www.prv.se/"/>
	<rule from="^http://prv\.se/" to="https://www.prv.se/"/>
</ruleset>

<ruleset name="PageKite">
  <target host="www.pagekite.net" />
  <target host="pagekite.net" />

  <rule from="^http://(www\.)?pagekite\.net/" to="https://pagekite.net/"/>
</ruleset>

<ruleset name="Panasonic.com">
  <target host="www.panasonic.com" />
  <target host="www2.panasonic.com" />
  <target host="panasonic.com" />

  <rule from="^http://(www\.)?panasonic\.com/" to="https://www.panasonic.com/"/>
  <rule from="^http://www2\.panasonic\.com/" to="https://www2.panasonic.com/"/>
</ruleset>
<ruleset name="Pandora">
  <target host="pandora.com" />
  <target host="www.pandora.com" />

  <rule from="^http://(www\.)?pandora\.com/" to="https://www.pandora.com/"/>
</ruleset>
<ruleset name="partypoker">
	<target host="partypoker.com" />
	<target host="*.partypoker.com" />
	<target host="p.iivt.com" />
	<rule from="^http://partypoker\.com/" to="https://www.partypoker.com/"/>
	<rule from="^http://www\.partypoker\.com/" to="https://www.partypoker.com/"/>
	<rule from="^http://p\.iivt\.com/" to="https://p.iivt.com/"/>
</ruleset>

<ruleset name="PassThePopcorn">
  <target host="passthepopcorn.me" />

  <rule from="^http://passthepopcorn\.me/" to="https://passthepopcorn.me/"/>
</ruleset>
<ruleset name="PasswordCard">
  <target host="passwordcard.org" />
  <target host="www.passwordcard.org" />

  <rule from="^http://(www\.)?passwordcard\.org/" to="https://www.passwordcard.org/"/>
</ruleset>
<!-- Site may be down entirely now. -->
<ruleset name="Pastebin.ca">
  <target host="pastebin.ca" />
  <target host="www.pastebin.ca" />

  <rule from="^http://(www\.)?pastebin\.ca/" to="https://pastebin.ca/"/>
</ruleset>

<ruleset name="Pastebin.com" default_off="No public HTTPS support">
  <target host="pastebin.com" />
  <target host="www.pastebin.com" />

  <rule from="^http://(www\.)?pastebin\.com/" to="https://pastebin.com/"/>
</ruleset>

<ruleset name="Pastee.org">
  <target host="pastee.org" />
  <target host="www.pastee.org" />

  <rule from="^http://(www\.)?pastee\.org/" to="https://pastee.org/" />
</ruleset>
<ruleset name="PayPal">
  <target host="www.paypal.com" />
  <target host="paypal.com" />

  <rule from="^http://(www\.)?paypal\.com/" to="https://www.paypal.com/"/>
</ruleset>
<!-- Should this really always go to www8?  Some other numbers work too. -->

<ruleset name="PearsonVue">
  <target host="vue.com" />
  <target host="www.vue.com" />
  <target host="pearsonvue.com" />
  <target host="www.pearsonvue.com" />

  <rule from="^http://(www\.)?vue\.com/" to="https://www8.pearsonvue.com/"/>
  <rule from="^http://(www\.)?pearsonvue\.com/" to="https://www8.pearsonvue.com/"/>
</ruleset>
<ruleset name="Regional Municipality of Peel, Canada">
	<target host="peelregion.ca" />
	<target host="www.peelregion.ca" />

	<rule from="^http://(www\.)?peelregion\.ca/" to="https://www.peelregion.ca/" />

	<!-- Invoking https://peelregion.ca/ produces a certificate error, so redirect
	https://peelregion.ca/ to https://www.peelregion.ca/ -->
	<rule from="^https://peelregion\.ca/" to="https://www.peelregion.ca/" />
</ruleset><ruleset name="PensionsMyndigheten.se">
	<target host="pensionsmyndigheten.se" />
	<target host="www.pensionsmyndigheten.se" />
	<rule from="^http://www\.pensionsmyndigheten\.se/" to="https://secure.pensionsmyndigheten.se/"/>
	<rule from="^http://pensionsmyndigheten\.se/" to="https://secure.pensionsmyndigheten.se/"/>
</ruleset>

<ruleset name="PhishTank">

<target host="phishtank.com" />
<target host="www.phishtank.com" />
<target host="data.phishtank.com" />
   
<rule from="^http://(www\.)?phishtank\.com/" to="https://www.phishtank.com/"/>
<rule from="^http://(www\.)?data\.phishtank\.com/" to="https://data.phishtank.com/"/>
</ruleset><!-- This should probably be merged into the general Google Services rule. -->

<ruleset name="Picasa Web Albums">
  <target host="picasaweb.google.com"/>
  <rule from="^http://picasaweb\.google\.com/"
        to="https://picasaweb.google.com/"/>
</ruleset>
<ruleset name="Picplz">
	<target host="picplz.com" />
	<target host="www.picplz.com" />
	
	<securecookie host="^(.+\.)?picplz\.com$" name=".*"/>
	
	<rule from="^http://(www\.)?picplz\.com/" to="https://picplz.com/"/>
</ruleset>
<ruleset name="Ping.fm">
  <target host="ping.fm" />
  <target host="www.ping.fm" />

    <rule from="^http://(www\.)?ping\.fm/" to="https://ping.fm/"/>
</ruleset>

<ruleset name="Pipex">
  <target host="pipex.co.uk" />
  <target host="www.pipex.co.uk" />

  <rule from="^http://(www\.)?pipex\.co\.uk/" to="https://www.pipex.co.uk/"/>
</ruleset>
<ruleset name="ThePirateBay">
  <target host="thepiratebay.org" />
  <target host="www.thepiratebay.org" />
  <target host="rss.thepiratebay.org" />
  <target host="static.thepiratebay.org" />
  <target host="torrents.thepiratebay.org" />

  <rule from="^http://(rss|static|torrents)\.thepiratebay\.org/" to="https://$1.thepiratebay.org/"/>
  <rule from="^(http|https)://(www\.)?thepiratebay\.org/" to="https://thepiratebay.org/"/>
</ruleset>
<ruleset name="PirateParty">
  <target host="partidopirata.es" />
  <target host="www.partidopirata.es" />
  <target host="pirateparty.ca" />
  <target host="www.pirateparty.ca" />
  <target host="pirateparty.org.au" />
  <target host="www.pirateparty.org.au" />
  <target host="pirateparty.org.uk" />
  <target host="www.pirateparty.org.uk" />
  <target host="piraattipuolue.fi" />
  <target host="www.piraattipuolue.fi" />
  <target host="piratenpartei.de"/>
  <target host="www.piratenpartei.de"/>
  <target host="wiki.piratenpartei.de"/>

  <rule from="^http://(www\.)?partidopirata\.es/" to="https://www.partidopirata.es/"/>
  <rule from="^http://(www\.)?pirateparty\.(ca|org\.(au|uk))/" to="https://www.pirateparty.$2/"/>
  <rule from="^http://(www\.)?piraattipuolue\.fi/" to="https://www.piraattipuolue.fi/"/>
  <rule from="^http://(www\.)?piratenpartei\.de/" to="https://www.piratenpartei.de/"/>
  <rule from="^http://wiki\.piratenpartei\.de/" to="https://wiki.piratenpartei.de/"/>
</ruleset>
<ruleset name="Piscatus.se">
	<target host="piscatus.se" />
	<target host="www.piscatus.se" />
	<rule from="^http://www\.piscatus\.se/" to="https://www.piscatus.se/"/>
	<rule from="^http://piscatus\.se/" to="https://piscatus.se/"/>
</ruleset>

<ruleset name="Pivotal Tracker">
  <target host="pivotaltracker.com" />
  <target host="www.pivotaltracker.com" />

  <rule from="^http://(www\.)?pivotaltracker\.com/" to="https://www.pivotaltracker.com/" />
</ruleset>
<ruleset name="Pizzahut UK">
  <target host="pizzahut.co.uk" />
  <target host="www.pizzahut.co.uk" />
  <target host="delivery.pizzahut.co.uk" />

  <rule from="^http://(www\.)?pizzahut\.co\.uk/" to="https://www.pizzahut.co.uk/"/>
  <rule from="^http://(delivery)\.pizzahut\.co\.uk/" to="https://$1.pizzahut.co.uk/"/>
</ruleset>
<ruleset name="PlanetRomeo">
  <target host="www.planetromeo.com" />
  <target host="planetromeo.com" />
  <target host="www.gayromeo.com" />
  <target host="gayromeo.com" />

  <rule from="^http://(www\.)?planetromeo\.com/" to="https://www.planetromeo.com/"/>
  <rule from="^http://(www\.)?gayromeo\.com/" to="https://www.gayromeo.com/"/>
</ruleset>
<ruleset name="Playboy">
  <target host="playboy.com" />
  <target host="www.playboy.com" />

  <rule from="^http://(www\.)?playboy\.com/" to="https://www.playboy.com/"/>
</ruleset>
<ruleset name="Pledgie">
  <target host="pledgie.com" />
  <target host="www.pledgie.com" />

  <rule from="^http://(www\.)?pledgie\.com/"
          to="https://pledgie.com/"/>
</ruleset><ruleset name="PlentyOfFish">
  <target host="plentyoffish.com" />
  <target host="www.plentyoffish.com" />

  <rule from="^https?://(www\.)?plentyoffish\.com/" to="https://www.plentyoffish.com/"/>
</ruleset>
<ruleset name="Pliktverket.se">
	<target host="pliktverket.se" />
	<target host="www.pliktverket.se" />
	<rule from="^http://www\.pliktverket\.se/" to="https://www.pliktverket.se/"/>
	<rule from="^http://pliktverket\.se/" to="https://pliktverket.se/"/>
</ruleset>

<ruleset name="Plone.org">
	<target host="plone.org" />
	<target host="www.plone.org" />
	<!-- products does not display over https. returns error 500. -->
	<exclusion pattern="^http://(www\.)?plone\.org/products"/>
	<rule from="^http://www\.plone\.org/" to="https://www.plone.org/"/>
	<rule from="^http://plone\.org/" to="https://plone.org/"/>
</ruleset>

<ruleset name="Plus.net">
  <target host="plus.net" />
  <target host="www.plus.net" />
  <target host="portal.plus.net" />
  <target host="webmail.plus.net" />
  <target host="community.plus.net" />

  <securecookie host="^(.+\.)?plus\.net$" name=".*"/>

  <rule from="^http://(www\.)?plus\.net/" to="https://www.plus.net/"/>
  <rule from="^http://(portal|webmail|community)\.plus\.net/" to="https://$1.plus.net/"/>
</ruleset>

<ruleset name="Plusgirot.se">
	<target host="plusgirot.se" />
	<target host="www.plusgirot.se" />
	<rule from="^http://www\.plusgirot\.se/" to="https://www.plusgirot.se/"/>
	<rule from="^http://plusgirot\.se/" to="https://www.plusgirot.se/"/>
</ruleset>

<!-- only enterprice.podomatic.com seems to have ssl :( -->
<ruleset name="PodOmatic.com">
	<target host="enterprise.podomatic.com" />
	<rule from="^http://enterprise\.podomatic\.com/" to="https://enterprise.podomatic.com/"/>
</ruleset>

<ruleset name="Pogo">
  <target host="pogo.com" />
  <target host="www.pogo.com" />
  <target host="help.pogo.com" />

  <rule from="^http://(www\.)?pogo\.com/" to="https://www.pogo.com/"/>
  <rule from="^http://help\.pogo\.com/" to="https://help.pogo.com/"/>
</ruleset>
<!-- polarnopyret.se sells clothes for small children. -->
<ruleset name="PolarnoPyret.se">
	<target host="polarnopyret.se" />
	<target host="www.polarnopyret.se" />
	<rule from="^http://www\.polarnopyret\.se/" to="https://www.polarnopyret.se/"/>
	<rule from="^http://polarnopyret\.se/" to="https://www.polarnopyret.se/"/>
</ruleset>

<ruleset name="Policia.es" default_off="Cert warning">
  <target host="policia.es" />
  <target host="www.policia.es" />

  <rule from="^http://(www\.)?policia\.es/" to="https://www.policia.es/" />
</ruleset>
<!-- polisforbundet is a swedish labour union -->
<ruleset name="Polisforbundet.se">
	<target host="polisforbundet.se" />
	<target host="www.polisforbundet.se" />
	<rule from="^http://polisforbundet\.se/" to="https://www.polisforbundet.se/"/>
	<rule from="^http://www\.polisforbundet\.se/" to="https://www.polisforbundet.se/"/>
</ruleset>

<ruleset name="politisktinkorrekt.info">
  <target host="politisktinkorrekt.info" />
  <rule from="^http://politisktinkorrekt\.info/" to="https://politisktinkorrekt.info/"/>
  <rule from="^http://www\.politisktinkorrekt\.info/" to="https://politisktinkorrekt.info/"/>
</ruleset>

<ruleset name="Polldaddy">
  <target host="polldaddy.com" />
  <target host="www.polldaddy.com" />
  <target host="i0.poll.fm" />

  <exclusion pattern="^http://i\.polldaddy\.com/"/>
  <rule from="^http://(?:www\.)?polldaddy\.com/"
          to="https://polldaddy.com/"/>
  <rule from="^http://i0\.poll\.fm/"
	  to="https://polldaddy.com/"/>
</ruleset>
<ruleset name="Post.ch">
        <target host="post.ch" />
        <target host="www.post.ch" />
        <target host="posta.ch" />
        <target host="www.posta.ch" />
        <target host="poste.ch" />
        <target host="www.poste.ch" />
        <target host="swisspost.com" />
        <target host="www.swisspost.com" />
        <target host="tntswisspost.com" />
        <target host="www.tntswisspost.com" />
        <target host="swisspost.ch" />
        <target host="www.swisspost.ch" />
        <target host="swisspost-gls.ch" />
        <target host="www.swisspost-gls.ch" />
        <target host="swisspostbox.com" />
        <target host="www.swisspostbox.com" />
        <target host="secure.swisspostbox.com" />
        <target host="incamail.ch" />
        <target host="www.incamail.ch" />
        <target host="im.post.ch" />
        <target host="postauto.ch" />
        <target host="www.postauto.ch" />
        <target host="postbus.ch" />
        <target host="mypostbusiness.ch" />
        <target host="www.mypostbusiness.ch" />
        <target host="postfinance.ch"/>
        <target host="www.postfinance.ch"/>
        <target host="postsuisseid.ch" />
        <target host="www.postsuisseid.ch" />
        <target host="swisssign.com" />
        <target host="www.swisssign.com" />
        <target host="press-shop.ch" />
        <target host="www.press-shop.ch" />
        <target host="press-shop-deutschland.de" />
        <target host="www.press-shop-deutschland.de" />
        <target host="press-shop-france.fr" />
        <target host="www.press-shop-france.fr" />
        <target host="press-shop-oesterreich.at" />
        <target host="www.press-shop-oesterreich.at" />
        <target host="press-shop-international.com" />
        <target host="www.press-shop-international.com" />
        <target host="mds-media.ch" />
        <target host="www.mds-media.ch" />
        <target host="admin.omgpm.com" />

       <rule from="^http://(www\.)?post\.ch/" to="https://www.post.ch/"/>
       <rule from="^http://(www\.)?posta\.ch/" to="https://www.posta.ch/"/>
       <rule from="^http://(www\.)?poste\.ch/" to="https://www.poste.ch/"/>
       <rule from="^http://(www\.)?swisspost\.com/" to="https://www.swisspost.com/"/>
       <rule from="^http://(www\.)?tntswisspost\.com/" to="https://www.tntswisspost.com/"/>
       <rule from="^http://(www\.)?swisspost\.ch/" to="https://www.swisspost.ch/"/>
       <rule from="^http://(www\.)?swisspost-gls\.ch/" to="https://www.swisspost-gls.ch/"/>
       <rule from="^http://(www\.)?swisspostbox\.com/" to="https://swisspostbox.com/"/>
       <rule from="^http://(secure\.)?swisspostbox\.com/" to="https://secure.swisspostbox.com/"/>
       <rule from="^http://(www\.)?incamail\.ch/" to="https://www.incamail.ch/"/>
       <rule from="^http://(im\.)?post\.ch/" to="https://im.post.ch/"/>
       <rule from="^http://(www\.)?postauto\.ch/" to="https://www.postauto.ch/"/>
       <rule from="^http://(www\.)?postbus\.ch/" to="https://www.postbus.ch/"/>
       <rule from="^http://(www\.)?mypostbusiness\.ch/" to="https://www.mypostbusiness.ch/"/>
       <rule from="^http://(www\.)?postfinance\.ch/" to="https://www.postfinance.ch/"/>
       <rule from="^http://(www\.)?postsuisseid\.ch/" to="https://postsuisseid.ch/"/>
       <rule from="^http://(www\.)?swisssign\.com/" to="https://swisssign.com/"/>
       <rule from="^http://(www\.)?press-shop\.ch/" to="https://www.press-shop.ch/"/>
       <rule from="^http://(www\.)?press-shop-deutschland\.de/" to="https://www.press-shop-deutschland.de/"/>
       <rule from="^http://(www\.)?press-shop-france\.fr/" to="https://www.press-shop-france.fr/"/>
       <rule from="^http://(www\.)?press-shop-oesterreich\.at/" to="https://www.press-shop-oesterreich.at/"/>
       <rule from="^http://(www\.)?press-shop-international\.com/" to="https://www.press-shop-international.com/"/>
       <rule from="^http://(www\.)?mds-media\.ch/" to="https://www.mds-media.ch/"/>
       <rule from="^http://(admin\.)?omgpm\.com/" to="https://admin.omgpm.com/"/>
</ruleset>
<ruleset name="Postbank">
  <target host="postbank.de"/>
  <target host="www.postbank.de"/>

  <securecookie host="^(.*\.)?postbank\.de$" name=".*" />

  <rule from="^http://(www\.)?postbank\.de/" to="https://www.postbank.de/"/>
</ruleset>
<ruleset name="Poste.it">
  <target host="poste.it" />
  <target host="www.poste.it" />

  <rule from="^http://(www\.)?poste\.it/" to="https://www.poste.it/" />
</ruleset>
<ruleset name="Posten.se">
  <target host="posten.se" />
  <rule from="^http://posten\.se/" to="https://www.posten.se/"/>
  <rule from="^http://www\.posten\.se/" to="https://www.posten.se/"/>
</ruleset>

<ruleset name="Powells.com">
  <target host="powells.com" />
  <target host="www.powells.com" />

  <rule from="^http://(www\.)?powells\.com/" to="https://www.powells.com/" />
  <rule from="^http://content-[0-9]\.powells\.com/" to="https://www.powells.com/" />
</ruleset>
<ruleset name="PreyProject">
  <target host="control.preyproject.com" />

  <securecookie host="^control\.preyproject\.com$" name=".*"/>

  <rule from="^http://control\.preyproject\.com/" to="https://control.preyproject.com/"/>
</ruleset>
<ruleset name="Princeton.edu">
	<target host="princeton.edu" />
	<target host="www.princeton.edu" />
	<rule from="^http://www\.princeton\.edu/" to="https://www.princeton.edu/"/>
	<rule from="^http://princeton\.edu/" to="https://www.princeton.edu/"/>
</ruleset>

<ruleset name="Privacy International">
	<target host="privacyinternational.org" />
	<target host="www.privacyinternational.org" />

	<rule from="^http://(www\.)?privacyinternational\.org/" to="https://www.privacyinternational.org/" />
</ruleset><ruleset name="PrivacyBox">
  <target host="privacybox.de" />
  <target host="www.privacybox.de" />

  <rule from="^http://(www\.)?privacybox\.de/" to="https://privacybox.de/"/>
</ruleset>
<ruleset name="Privacy Rights Clearinghouse">
  <target host="privacyrights.org" />
  <target host="www.privacyrights.org" />

  <rule from="^http://(www\.)?privacyrights\.org/" to="https://www.privacyrights.org/" />
</ruleset>
<ruleset name="PrivatePaste">
  <target host="privatepaste.com" />
  <target host="www.privatepaste.com" />

  <rule from="^http://privatepaste\.com/" to="https://privatepaste.com/"/>
  <rule from="^http://www\.privatepaste\.com/" to="https://www.privatepaste.com/"/>
</ruleset>
<ruleset name="ProPublica.org">
	<target host="propublica.org" />
	<target host="www.propublica.org" />
	<rule from="^http://propublica\.org/" to="https://www.propublica.org/"/>
	<rule from="^http://www\.propublica\.org/" to="https://www.propublica.org/"/>
</ruleset>

<ruleset name="ProjectHoneypot">
  <target host="projecthoneypot.org" />
  <target host="www.projecthoneypot.org" />

  <securecookie host="^(www\.)?projecthoneypot\.org$" name=".*"/>

  <rule from="^http://(www\.)?projecthoneypot\.org/" to="https://www.projecthoneypot.org/" />
</ruleset>
<ruleset name="Prometric">
  <target host="prometric.com" />
  <target host="www.prometric.com" />

  <securecookie host="^(.*\.)?prometric.com$" name=".*" />

  <rule from="^http://(www\.)?prometric\.com/" to="https://www.prometric.com/"/>

</ruleset>
<ruleset name="Proxify">
  <target host="proxify.com" />
  <target host="www.proxify.com" />

  <rule from="^https?://(www\.)?proxify\.com/" to="https://proxify.com/"/>
</ruleset>
<ruleset name="Proxy.org">
  <target host="www.proxy.org" />
  <target host="proxy.org" />

  <rule from="^http://(www\.)?proxy\.org/" to="https://proxy.org/"/>
</ruleset>
<ruleset name="Public Citizen">
	<target host="citizen.org" />
	<target host="www.citizen.org" />
	<target host="action.citizen.org" />

	<rule from="^http://(www\.)?citizen\.org/" to="https://www.citizen.org/" />
	<rule from="^http://action\.citizen\.org/" to="https://action.citizen.org/" />
</ruleset><ruleset name="Puma.com">
  <target host="www.puma.com" />
  <target host="assets.puma.com" />
  <target host="is.puma.com" />
  <target host="puma.com" />
  <rule from="^http://www\.puma\.com/" to="https://www.puma.com/"/>
  <rule from="^http://puma\.com/" to="https://www.puma.com/"/>
  <rule from="^http://assets\.puma\.com/" to="https://assets.puma.com/"/>
  <rule from="^http://is\.puma\.com/" to="https://is.puma.com/"/>
</ruleset>

<ruleset name="QIP">
  <target host="qip.ru" />
  <target host="www.qip.ru" />

  <rule from="^http://(www\.)?qip\.ru/" to="https://qip.ru/"/>
</ruleset>
<ruleset name="Qualys">
  <target host="qualys.com" />
  <target host="www.qualys.com" />
  <target host="community.qualys.com" />

  <rule from="^http://(www\.)?qualys\.com/" to="https://www.qualys.com/"/>
  <rule from="^http://community\.qualys\.com/" to="https://community.qualys.com/"/>
</ruleset>
<ruleset name="quantserve.com">
	<target host="quantserve.com" />
	<target host="*.quantserve.com" />
	<rule from="^http://quantserve\.com/" to="https://quantserve.com/"/>
	<rule from="^http://www\.quantserve\.com/" to="https://quantserve.com/"/>
   <rule from="^http://([^/:@]*)\.quantserve\.com/" to="https://$1.quantserve.com/"/>
</ruleset>

<ruleset name="Quora" default_off="https:quora only supports chunked encoding??????">
  <target host="quora.com" />
  <target host="www.quora.com" />

  <rule from="^http://(www\.)?quora\.com/" to="https://www.quora.com/"/>
</ruleset>
<ruleset name="Quorks" default_off="Cert warning">
  <target host="quorks.ath.cx" />

  <rule from="^http://quorks\.ath\.cx/login\.php$"
          to="https://quorks.ath.cx/login.php"/>
</ruleset>
<ruleset name="Qxl">
  <target host="qxl.no" />
  <target host="www.qxl.no" />
  <target host="qxl.dk" />
  <target host="www.qxl.dk" />

  <rule from="^http://(www\.)?qxl\.no/" to="https://www.qxl.no/"/>
  <rule from="^http://(www\.)?qxl\.dk/" to="https://www.qxl.dk/"/>
</ruleset>

<ruleset name="RAC">
  <target host="rac.co.uk" />
  <target host="www.rac.co.uk" />

  <securecookie host="^(.+\.)?rac\.co\.uk$" name=".*"/>

  <rule from="^http://(www\.)?rac\.co\.uk/" to="https://www.rac.co.uk/"/>
</ruleset>
<ruleset name="Reformed Church">
  <target host="rca.org" />
  <target host="www.rca.org" />

  <rule from="^http://(www\.)?rca\.org/" to="https://www.rca.org/" />
</ruleset>
<ruleset name="RFC-Editor">
  <target host="rfc-editor.org" />
  <target host="www.rfc-editor.org" />

  <rule from="^http://(www\.)?rfc-editor\.org/" to="https://www.rfc-editor.org/"/>
</ruleset>
<ruleset name="ROBOXchange">
  <target host="roboxchange.com" />
  <target host="www.roboxchange.com" />

  <rule from="^http://(www\.)?roboxchange\.com/" to="https://roboxchange.com/"/>
</ruleset>
<ruleset name="RSA">
  <target host="rsa.com" />
  <target host="www.rsa.com" />

  <rule from="^http://(www\.)?rsa\.com/" to="https://www.rsa.com/" />
</ruleset>
<ruleset name="RT.ru">
	<target host="rt.ru" />
	<target host="www.rt.ru" />
	<rule from="^http://rt\.ru/" to="https://rt.ru/"/>
	<rule from="^http://www\.rt\.ru/" to="https://www.rt.ru/"/>
</ruleset>

<ruleset name="Rabobank">
  <!-- Rule created by Jeroen van der Gun -->

  <target host="www.rabobank.nl" />
  <target host="rabobank.nl" />
  <target host="bankieren.rabobank.nl" />

  <rule from="^http://(www\.)?rabobank\.nl/" to="https://www.rabobank.nl/"/>
  <rule from="^http://bankieren\.rabobank\.nl/" to="https://bankieren.rabobank.nl/"/>
</ruleset>
<!-- Most requests sent back to HTTP. -->
<ruleset name="RadioShack">
  <target host="radioshack.com" />
  <target host="www.radioshack.com" />

  <rule from="^http://(www\.)?radioshack\.com/" to="https://www.radioshack.com/"/>
</ruleset>
<ruleset name="Raiffeisen.ch">
        <target host="raiffeisen.ch" />
        <target host="www.raiffeisen.ch" />
        <target host="tb.raiffeisendirect.ch" />
        <securecookie host="^(.*\.)?raiffeisen\.ch$" name=".*" />
        <securecookie host="^(.*\.)?raiffeisendirect\.ch$" name=".*" />

        <rule from="^http://(www\.)?raiffeisen\.ch/" to="https://www.raiffeisen.ch/"/>
        <rule from="^http://(tb\.)?raiffeisendirect\.ch/" to="https://tb.raiffeisendirect.ch/"/>
</ruleset>
<ruleset name="Random.org">
  <target host="www.random.org" />
  <target host="random.org" />

  <rule from="^http://(www\.)?random\.org/" to="https://www.random.org/"/>
</ruleset>
<ruleset name="RapidSSL">
  <target host="rapidssl.com" />
  <target host="www.rapidssl.com" />

  <rule from="^http://(www\.)?rapidssl\.com/" to="https://www.rapidssl.com/"/>
</ruleset>
<ruleset name="ReadSpeaker">
	<target host="readspeaker.com" />
	<target host="www.readspeaker.com" />
	<target host="app.readspeaker.com" />
	<target host="media.readspeaker.com" />
	<target host="vttts.readspeaker.com" />
	<target host="lqttswr.readspeaker.com" />
	<target host="docreader.readspeaker.com" />
	<target host="asp.readspeaker.net" />

	<rule from="^http://(www\.)readspeaker\.com/" to="https://www.readspeaker.com/" />
	<rule from="^http://(app|media|vttts|lqttswr|docreader)\.readspeaker\.com/" to="https://$1.readspeaker.com/" />

	<rule from="^http://asp\.readspeaker\.net/" to="https://asp.readspeaker.net/" />
</ruleset><ruleset name="ReadWriteWeb">
  <target host="readwriteweb.com" />
  <target host="www.readwriteweb.com" />

  <rule from="^http://(www\.)?readwriteweb\.com/" to="https://www.readwriteweb.com/"/>
</ruleset>
<ruleset name="Reco.se">
	<target host="reco.se" />
	<target host="www.reco.se" />
	<rule from="^http://www\.reco\.se/" to="https://www.reco.se/"/>
	<rule from="^http://reco\.se/" to="https://www.reco.se/"/>
</ruleset>

<ruleset name="RedHat">
  <target host="redhat.com" />
  <target host="www.redhat.com" />
  <securecookie host="^(.*\.)?redhat\.com$" name=".*" />

  <rule from="^http://(www\.)?redhat\.com/" to="https://www.redhat.com/"/>
</ruleset>
<ruleset name="Redbox.com">
  <target host="redbox.com" />
  <target host="www.redbox.com" />
  <target host="images.redbox.com" />

  <rule from="^http://(www\.)?redbox\.com/" to="https://www.redbox.com/" />
  <rule from="^http://images\.redbox\.com/" to="https://images.redbox.com/" />
</ruleset>
<!-- I modified the normal Reddit ruleset to work for redditmedia.
	While no confidential data is passed on this domain (that I
	know of) I just wanted to have as much of Reddit.com encrypted
	as possible, also my work place doesn't filter https sites.
 -->
<ruleset name="Reddit+" default_off="cert mismatch">
  <target host="redditmedia.com"/>
  <target host="www.redditmedia.com"/>

  <rule from="^http://(www\.)?redditmedia\.com/" to="https://www.redditmedia.com/"/>
</ruleset>
<!-- This ruleset (a) caused a lot of confusion because of the redirect to
the "pay" subdomain, and (b) sometimes caused cert warnings because of
server-side CDN issues, so it's off for the time being -->
<ruleset name="Reddit (hackish)" default_off="via pay.reddit.com">
  <target host="reddit.com" />
  <target host="*.reddit.com" />
  <target host="redd.it" />

  <rule from="^http://(www\.)?reddit\.com/"
    to="https://pay.reddit.com/"/>
  <rule from="^http://(sp|static|thumbs)\.reddit\.com/"
    to="https://s3.amazonaws.com/$1.reddit.com/"/>
  <rule from="^http://redd\.it/$"
    to="https://pay.reddit.com/"/>
  <rule from="^http://redd\.it/"
    to="https://pay.reddit.com/tb/"/>
</ruleset>

<ruleset name="RememberTheMilk">
  <target host="rememberthemilk.com" />
  <target host="www.rememberthemilk.com" />

  <rule from="^http://(www\.)?rememberthemilk\.com/" to="https://www.rememberthemilk.com/"/>
</ruleset>

<ruleset name="Revsci.net">
	<target host="ads.revsci.net" />

	<rule from="^http://ads\.revsci\.net/" to="https://ads.revsci.net/" />
</ruleset><ruleset name="Ricardo.ch">
        <target host="ricardo.ch" />
        <target host="www.ricardo.ch" />
        <securecookie host="^(.*\.)?ricardo\.ch$" name=".*" />

        <rule from="^http://(www\.)?ricardo\.ch/" to="https://www.ricardo.ch/"/>
</ruleset>

<ruleset name="Riga">
  <target host="riga.lv" />
  <target host="*.riga.lv" />
  <target host="eriga.lv" />
  <target host="www.eriga.lv" />

  <rule from="^http://riga\.lv/" to="https://riga.lv/"/>
  <rule from="^http://([^/:@]*)\.riga\.lv/" to="https://$1.riga.lv/"/>
  <rule from="^http://eriga\.lv/" to="https://eriga.lv/"/>
  <rule from="^http://www\.eriga\.lv/" to="https://www.eriga.lv/"/>
</ruleset>
<!-- already enforces https. adding to prevent sslstrips on port 80 -->
<ruleset name="Riksgalden.se">
	<target host="riksgalden.se" />
	<target host="www.riksgalden.se" />
	<rule from="^http://riksgalden\.se/" to="https://www.riksgalden.se/"/>
	<rule from="^http://www\.riksgalden\.se/" to="https://www.riksgalden.se/"/>
</ruleset>

<ruleset name="ripe.net">
	<target host="ripe.net" />
	<target host="www.ripe.net" />

	<rule from="^http://ripe\.net/" to="https://ripe.net/"/>
	<rule from="^http://www\.ripe\.net/" to="https://www.ripe.net/"/>
</ruleset>

<ruleset name="Riseup">
  <target host="riseup.net" />
  <target host="*.riseup.net" />

  <rule from="^http://riseup\.net/" to="https://riseup.net/"/>
  <rule from="^http://([^/:@]*)\.riseup\.net/" to="https://$1.riseup.net/"/>
</ruleset>
<ruleset name="RoadRunner">
  <target host="rr.com" />
  <target host="www.rr.com" />
  <target host="hercules.rr.com" />

  <rule from="^http://(www\.)?rr\.com/" to="https://www.rr.com/"/>
  <rule from="^http://hercules\.rr\.com/" to="https://hercules.rr.com/"/>
</ruleset>
<ruleset name="Robeco">
  <!-- Rule created by Jeroen van der Gun -->

  <target host="www.robeco.nl" />
  <target host="robeco.nl" />

  <rule from="^http://(www\.)?robeco\.nl/" to="https://www.robeco.nl/"/>
</ruleset>
<ruleset name="Roiservice.com">
	<target host="track.roiservice.com" />

	<rule from="^http://track\.roiservice\.com/" to="https://track.roiservice.com/" />
</ruleset><!-- romab.com is the developers of the ironsuite mac applications --> 
<ruleset name="romab.com">
	<target host="romab.com" />
	<target host="romab.se" />
	<target host="www.romab.com" />
	<target host="www.romab.se" />
	<rule from="^http://www\.romab\.com/" to="https://www.romab.com/"/>
	<rule from="^http://www\.romab\.se/" to="https://www.romab.com/"/>
	<rule from="^http://romab\.se/" to="https://romab.com/"/>
	<rule from="^http://romab\.com/" to="https://romab.com/"/>
</ruleset>

<ruleset name="RoyalGovUK">
  <target host="royal.gov.uk"/>
  <target host="www.royal.gov.uk"/>

  <securecookie host="^(.+\.)?royal\.gov\.uk$" name=".*"/>

  <rule from="^http://(www\.)?royal\.gov\.uk/" to="https://www.royal.gov.uk/"/>
</ruleset>
<ruleset name="RubyGems.org">
	<target host="rubygems.org" />
	<rule
		from="^http://(www\.)?rubygems\.org/"
		to="https://rubygems.org/"
	/>
	<securecookie host="^(www\.)?rubygems.org" name=".*" />
</ruleset>
<ruleset name="redmine.ruby-lang.org">
  <target host="redmine.ruby-lang.org" />

  <rule from="^http://redmine\.ruby-lang\.org/"
        to="https://redmine.ruby-lang.org/" />
</ruleset>
<ruleset name="Rutgers">
	<target host="rutgers.edu" />
	<target host="*.rutgers.edu" />
	<target host="www.*.rutgers.edu" />

	<rule from="^http://(www\.)?rutgers\.edu/"
		to="https://www.rutgers.edu/" />
	<rule from="^http://(www\.)?(acs|cs|eden|nbcs|physics|rci)\.rutgers\.edu/"
		to="https://www.$2.rutgers.edu/" />
	<rule from="^http://(www\.)?(comminfo|food|gobble|math|njaes|rhshope|ruinfo|ruoffcampus|search|studentabc|uhr|ur)\.rutgers\.edu/"
		to="https://$2.rutgers.edu/" />
	<rule from="^http://(parktran|rudots)\.rutgers\.edu/"
		to="https://gobble.rutgers.edu/" />

	<!-- Not working: studentaid.rutgers.edu: broken left menu -->
</ruleset>
<ruleset name="Ryanair.com">
  <target host="www.ryanair.com" />
  <target host="ryanair.com" />
  <rule from="^http://www\.ryanair\.com/" to="https://www.ryanair.com/"/>
  <rule from="^http://ryanair\.com/" to="https://www.ryanair.com/"/>
</ruleset>

<ruleset name="SANS">
	<target host="isc.sans.edu" />
	<target host="isc.sans.org" />
	<target host="sans.org" />
	<target host="www.sans.org" />
	<rule from="^http://isc\.sans\.org/" to="https://isc.sans.org/"/>
	<rule from="^http://isc\.sans\.edu/" to="https://isc.sans.edu/"/>
	<rule from="^http://www\.sans\.org/" to="https://www.sans.org/"/>
	<rule from="^http://sans\.org/" to="https://sans.org/"/>
</ruleset>

<ruleset name="SBB.ch">
  <target host="sbb.ch"/>
  <target host="*.sbb.ch"/>

  <rule from="^http://(?:www\.)?sbb\.ch/" to="https://www.sbb.ch/"/>
  <rule from="^http://mct\.sbb\.ch/" to="https://mct.sbb.ch/"/>
  <rule from="^http://mcts\.sbb\.ch/" to="https://mcts.sbb.ch/"/>
  <rule from="^http://smsalarm\.sbb\.ch/" to="https://smsalarm.sbb.ch/"/>
</ruleset>
<ruleset name="StateBankOfIndia">
  <target host="sbi.co.in" />
  <target host="www.sbi.co.in" />

  <securecookie host="^(.+\.)?sbi\.co\.in$" name=".*"/>

  <rule from="^http://(www\.)?sbi\.co\.in/" to="https://www.sbi.co.in/"/>
</ruleset>
<!-- SF have biosnack.sfbio.se which have a cert from bioklubben.sfbio.se, not the same site -->
<ruleset name="SF.se">
  <target host="sf.se" />
  <target host="www.sf.se" />
  <rule from="^http://sf\.se/" to="https://www.sf.se/"/>
  <rule from="^http://www\.sf\.se/" to="https://www.sf.se/"/>
</ruleset>

<ruleset name="SH.se">
	<target host="webappl.web.sh.se" />
	<target host="bibl.sh.se" />
	<rule from="^http://bibl\.sh\.se/" to="https://bibl.sh.se/"/>
	<rule from="^http://webappl\.web\.sh\.se/" to="https://webappl.web.sh.se/"/>
</ruleset>

<ruleset name="SI.se">
	<target host="si.se" />
	<target host="www.si.se" />
	<rule from="^http://www\.si\.se/" to="https://www.si.se/"/>
	<rule from="^http://si\.se/" to="https://www.si.se/"/>
</ruleset>

<!-- sics is the swedish institute of Computer Science. -->
<ruleset name="SICS.se">
  <target host="sics.se" />
  <target host="www.sics.se" />
  <rule from="^http://SICS\.se/" to="https://www.SICS.se/"/>
  <rule from="^http://www\.SICS\.se/" to="https://www.SICS.se/"/>
</ruleset>

<!-- SJ is a government operated railway company in sweden. -->
<ruleset name="SJ.se">
  <target host="sj.se" />
  <target host="*.sj.se" />
  <rule from="^http://sj\.se/" to="https://www.sj.se/"/>
  <rule from="^http://www\.sj\.se/" to="https://www.sj.se/"/>
</ruleset>

<ruleset name="SL.se">
	<target host="sl.se" />
	<rule from="^http://sl\.se/" to="https://sl.se/"/>
	<rule from="^http://www\.sl\.se/" to="https://sl.se/"/>
</ruleset>

<!-- slf is a swedish labour union -->
<ruleset name="SLF.se">
	<target host="slf.se" />
	<target host="www.slf.se" />
	<rule from="^http://slf\.se/" to="https://www.slf.se/"/>
	<rule from="^http://www\.slf\.se/" to="https://www.slf.se/"/>
</ruleset>

<ruleset name="SLU.se">
	<target host="www.slu.se" />
	<target host="slu.se" />
	<target host="internt.slu.se" />
	<rule from="^http://slu\.se/" to="https://www.slu.se/"/>
	<rule from="^http://www\.slu\.se/" to="https://www.slu.se/"/>
	<rule from="^http://internt\.slu\.se/" to="https://internet.slu.se/"/>
</ruleset>

<ruleset name="SNS Bank">
  <!-- Rule created by Jeroen van der Gun -->

  <target host="www.snsbank.nl" />
  <target host="snsbank.nl" />

  <rule from="^http://(www\.)?snsbank\.nl/" to="https://www.snsbank.nl/"/>
</ruleset>
<ruleset name="SPCA Los Angeles">
	<target host="spcala.com" />
	<target host="www.spcala.com" />

	<rule from="^http://(www\.)?spcala\.com/" to="https://spcala.com/" />

	<!-- Invoking https://www.spcala.com/ produces a certificate error,
	so redirect https://www.spcala.com/ to https://spcala.com/ -->
	<rule from="^https://www\.spcala\.com/" to="https://spcala.com/" />
</ruleset><ruleset name="SSLlabs.com">
  <target host="ssllabs.com" />
  <target host="www.ssllabs.com" />

  <rule from="^http://(www\.)?ssllabs\.com/" to="https://www.ssllabs.com/" />
</ruleset>
<ruleset name="SSLshopper">
<target host="www.sslshopper.com" />
<target host="sslshopper.com" />
<rule from="^http://(www\.)?sslshopper\.com/" to="https://www.sslshopper.com/"/>
</ruleset>
<!-- slf is a swedish labour union -->
<ruleset name="ST.org">
	<target host="st.org" />
	<target host="www.st.org" />
	<rule from="^http://st\.org/" to="https://www.st.org/"/>
	<rule from="^http://www\.st\.org/" to="https://www.st.org/"/>
</ruleset>

<ruleset name="SVT.se">
	<target host="svt.se" />
	<rule from="^http://svt\.se/" to="https://svt.se/"/>
	<rule from="^http://www\.svt\.se/" to="https://svt.se/"/>
</ruleset>

<ruleset name="Safari Books Online">
  <target host="my.safaribooksonline.com" />
  <target host="www.safaribooksonline.com" />

    <rule from="^http://my\.safaribooksonline\.com/login$"
        to="https://ssl.safaribooksonline.com/securelogin"/>
    <rule from="^http://www\.safaribooksonline\.com/Corporate/Index/logIn\.php$"
        to="https://ssl.safaribooksonline.com/securelogin"/>
</ruleset>
<ruleset name="Safe-mail.net">
	<target host="safe-mail.net" />
	<target host="*.safe-mail.net" />

	<rule from="^http://safe-mail\.net/" to="https://www.safe-mail.net/" />
	<rule from="^http://([a-zA-Z0-9\-]+)\.safe-mail\.net/" to="https://$1.safe-mail.net/" />
</ruleset>
<ruleset name="Sanitarium.se">
	<target host="sanitarium.se" />
	<target host="www.sanitarium.se" />
	<rule from="^http://sanitarium\.se/" to="https://sanitarium.se/"/>
	<rule from="^http://www\.sanitarium\.se/" to="https://sanitarium.se/"/>
</ruleset>

<ruleset name="Savannah">
  <target host="savannah.nongnu.org" />
  <target host="savannah.gnu.org" />

  <rule from="^http://savannah\.(non)?gnu\.org/" to="https://savannah.$1gnu.org/"/>
</ruleset>
<!-- media.scmagazineus.com lacks SSL -->
<ruleset name="ScMagazineUS.com">
	<target host="scmagazineus.com" />
	<target host="www.scmagazineus.com" />
	<rule from="^http://www\.scmagazineus\.com/" to="https://www.scmagazineus.com/"/>
	<rule from="^http://scmagazineus\.com/" to="https://www.scmagazineus.com/"/>
</ruleset>

<ruleset name="Schneier on Security">
  <target host="schneier.com" />
  <target host="www.schneier.com" />

	<rule from="^http://(www\.)?schneier\.com/" to="https://www.schneier.com/"/>
</ruleset>
<ruleset name="SchuelerVZ" default_off="Certificate mismatch">
  <target host="www.schuelervz.net" />

  <rule from="^http://www\.schuelervz\.net/" to="https://www.schuelervz.net/"/>
</ruleset>
<ruleset name="Sciencemag.org">
  <target host="www.sciencemag.org" />
  <target host="sciencemag.org" />
  <rule from="^http://www\.sciencemag\.org/" to="https://www.sciencemag.org/"/>
  <rule from="^http://sciencemag\.org/" to="https://www.sciencemag.org/"/>
</ruleset>

<!-- This is another of those 1-pixel tracking providers. -->
<ruleset name="scounter.rambler.ru">
	<target host="counter.rambler.ru" />
	<rule from="^http://counter\.rambler\.ru/" to="https://scounter.rambler.ru/"/>
</ruleset>

<ruleset name="Screen It! Movie Reviews">
	<target host="screenit.com"/>
	<target host="www.screenit.com"/>

	<rule from="^http://(www\.)?screenit\.com/" to="https://www.screenit.com/" />
</ruleset><ruleset name="Scroogle">
  <target host="www.scroogle.org" />
  <target host="scroogle.org" />

  <rule from="^http://(www\.)?scroogle\.org/cgi-bin/nbbw\.cgi$" to="https://ssl.scroogle.org/cgi-bin/nbbwssl.cgi"/>
  <rule from="^http://(www\.)?scroogle\.org/$" to="https://ssl.scroogle.org/" />
  <rule from="^http://(www\.)?scroogle\.org/cgi-bin/nbbw\.cgi\?Gw=(.*)$" to="https://ssl.scroogle.org/cgi-bin/nbbwssl.cgi?Gw=$2"/>
</ruleset>
<ruleset name="Seagate.com (broken)" default_off="Broken (requires login)">
  <target host="www.seagate.com" />
  <target host="seagate.com" />

  <rule from="^http://(www\.)?seagate\.com/" to="https://www.seagate.com/"/>
</ruleset>
<ruleset name="Secunia">
  <target host="secunia.com" />
  <target host="www.secunia.com" />

  <rule from="^http://(www\.)?secunia\.com/" to="https://secunia.com/"/>
</ruleset>

<ruleset name="Security.NL">
  <target host="security.nl" />
  <target host="www.security.nl" />

  <rule from="^http://(?:www\.)?security\.nl/" to="https://secure.security.nl/"/>
</ruleset>
<ruleset name="SecurityWeek.com">
	<target host="securityweek.com" />
	<target host="www.securityweek.com" />
	<rule from="^http://www\.securityweek\.com/" to="https://www.securityweek.com/"/>
	<rule from="^http://securityweek\.com/" to="https://www.securityweek.com/"/>
</ruleset>

<ruleset name="Securosis">
	<target host="securosis.com" />
	<target host="www.securosis.com" />
	<rule from="^http://www\.securosis\.com/" to="https://securosis.com/"/>
	<rule from="^http://securosis\.com/" to="https://securosis.com/"/>
</ruleset>

<ruleset name="Senate.gov">
  <target host="www.senate.gov" />
  <target host="senate.gov" />
  <rule from="^http://www\.senate\.gov/" to="https://www.senate.gov/"/>
  <rule from="^http://senate\.gov/" to="https://senate.gov/"/>
</ruleset>

<ruleset name="Sendmail">
  <target host="sendmail.com" />
  <target host="www.sendmail.com" />

  <rule from="^http://(www\.)?sendmail\.com/" to="https://www.sendmail.com/"/>
</ruleset>
<ruleset name="Siemens.com">
	<target host="siemens.com" />
	<target host="www.siemens.com" />
	<rule from="^http://siemens\.com/" to="https://www.siemens.com/"/>
	<rule from="^http://www\.siemens\.com/" to="https://www.siemens.com/"/>
</ruleset>

<ruleset name="SigmaBeauty">
  <target host="www.sigmabeauty.com" />
  <target host="sigmabeauty.com" />

  <rule from="^http://(www\.)?sigmabeauty\.com/" to="https://www.sigmabeauty.com/"/>
</ruleset>
<ruleset name="Silicon.com">
	<target host="silicon.com" />
	<target host="www.silicon.com" />
	<rule from="^http://silicon\.com/" to="https://www.silicon.com/"/>
	<rule from="^http://www\.silicon\.com/" to="https://www.silicon.com/"/>
</ruleset>

<ruleset name="Sinn Fein">
  <target host="sinnfein.ie" />
  <target host="www.sinnfein.ie" />

  <rule from="^http://(www\.)?sinnfein\.ie/" to="https://www.sinnfein.ie/"/>
</ruleset>
<ruleset name="Sipgate">
  <target host="sipgate.at" />
  <target host="www.sipgate.at" />
  <target host="secure.sipgate.at" />
  <target host="sipgate.co.uk" />
  <target host="www.sipgate.co.uk" />
  <target host="secure.sipgate.co.uk" />

  <rule from="^http://(?:(?:www|secure)\.)?sipgate\.(at|co\.uk)/" to="https://secure.sipgate.$1/"/>
</ruleset>
<ruleset name="SixApart">
  <target host="sixapart.com" />
  <target host="help.sixapart.com" />
  <target host="www.sixapart.com" />
  <target host="sixapart.jp" />
  <target host="www.sixapart.jp" />

  <rule from="^http://sixapart\.com/" to="https://sixapart.com/"/>
  <rule from="^http://(help|www)\.sixapart\.com/" to="https://$1.sixapart.com/"/>
  <rule from="^http://(www\.)?sixapart\.jp/" to="https://www.sixapart.jp/"/>
</ruleset>
<ruleset name="Sixxs.net">
  <target host="sixxs.net" />
  <target host="www.sixxs.net" />

  <rule from="^http://(www\.)?sixxs\.net/" to="https://www.sixxs.net/" />
</ruleset>
<!-- This is a swedish insurance company -->
<ruleset name="Skandia">
	<target host="skandia.se" />
	<target host="www.skandia.se" />
	<rule from="^http://www\.skandia\.se/" to="https://www.skandia.se/"/>
	<rule from="^http://skandia\.se/" to="https://www.skandia.se/"/>
</ruleset>

<ruleset name="Skandiabanken">
  <target host="skandiabanken.no" />
  <target host="www.skandiabanken.no" />
  <target host="secure.skandiabanken.no" />
  <target host="trader.skandiabanken.no" />

	<rule from="^http://(www\.)?skandiabanken\.no/" to="https://www.skandiabanken.no/"/>
	<rule from="^http://secure\.skandiabanken\.no/" to="https://secure.skandiabanken.no/"/>
	<rule from="^http://trader\.skandiabanken\.no/" to="https://trader.skandiabanken.no/"/>
</ruleset>
<ruleset name="Slo-Tech">
  <target host="slo-tech.com" />
  <target host="www.slo-tech.com" />
  <target host="static.slo-tech.com" />

  <rule from="^http://(www\.)?slo-tech\.com/"
          to="https://slo-tech.com/"/>
  <rule from="^http://static\.slo-tech\.com/"
          to="https://static.slo-tech.com/"/>
</ruleset>
<ruleset name="SlySoft" default_off="Cert warning">
  <target host="slysoft.com" />
  <target host="forum.slysoft.com" />
  <target host="www.slysoft.com" />

  <rule from="^http://forum\.slysoft\.com/" to="https://forum.slysoft.com/"/>
  <rule from="^https?://(www\.)?slysoft\.com/" to="https://www.slysoft.com/"/>
</ruleset>
<ruleset name="snagajob">
  <target host="snagajob.com"/>
  <target host="www.snagajob.com"/>
  <target host="*.snagajob.com"/>

  <securecookie host="^(.*\.)?snagajob.com$" name=".*" />

  <rule from="^http://(www\.)?snagajob\.com/" to="https://www.snagajob.com/"/>
  <rule from="^http://media\.snagajob\.com/" to="https://media.snagajob.com/"/>

  <!-- A 404 error is occured when answers and blog are forced to https -->
  <!-- Hence a exclusion is added to both of them -->
  <exclusion pattern="^http://www\.snagajob\.com/answers/" />
  <exclusion pattern="^http://www\.snagajob\.com/blog/" />
</ruleset>
<ruleset name="US SocialSecAdmin">
	<target host="socialsecurity.gov" />
	<target host="www.socialsecurity.gov" />
	<target host="secure.ssa.gov" />
	<target host="stats.ssa.gov" />

	<rule from="^http://(www\.)?socialsecurity\.gov/" to="https://www.socialsecurity.gov/" />
	<rule from="^http://(secure|stats)\.ssa\.gov/" to="https://$1.ssa.gov/" />
</ruleset><ruleset name="SocietyForScience.org">
  <target host="www.societyforscience.org" />
  <target host="societyforscience.org" />
  <rule from="^http://www\.societyforscience\.org/" to="https://www.societyforscience.org/"/>
  <rule from="^http://societyforscience\.org/" to="https://societyforscience.org/"/>
</ruleset>

<ruleset name="Sony-Europe.com">
	<target host="sp.sony-europe.com" />
	<target host="sony-europe.com" />
	<target host="www.sony-europe.com" />
	<rule from="^http://sp\.sony-europe\.com/" to="https://sp.sony-europe.com/"/>
	<rule from="^http://sony-europe\.com/" to="https://sony-europe.com/"/>
	<rule from="^http://www\.sony-europe\.com/" to="https://www.sony-europe.com/"/>
</ruleset>

<ruleset name="Sony.se">
	<target host="sony.se" />
	<target host="www.sony.se" />
	<rule from="^http://www\.sony\.se/" to="https://www.sony.se/"/>
	<rule from="^http://sony\.se/" to="https://sony.se/"/>
</ruleset>

<ruleset name="SouthernElectric">
  <target host="southern-electric.co.uk" />
  <target host="www.southern-electric.co.uk" />

  <rule from="^http://(www\.)?southern-electric\.co\.uk/" to="https://www.southern-electric.co.uk/"/>
</ruleset>
<ruleset name="SpamGourmet">
  <target host="spamgourmet.com" />
  <target host="www.spamgourmet.com" />

  <rule from="^http://spamgourmet\.com/" to="https://spamgourmet.com/"/>
  <rule from="^http://www\.spamgourmet\.com/" to="https://www.spamgourmet.com/"/>
</ruleset>
<ruleset name="Sparkfun">
  <target host="sparkfun.com" />
  <target host="www.sparkfun.com" />
  <target host="static.sparkfun.com" />

  <rule from="^http://(www\.)?sparkfun\.com/" to="https://www.sparkfun.com/"/>
  <rule from="^http://static\.sparkfun\.com/" to="https://static.sparkfun.com/"/>
</ruleset>
<ruleset name="Sparkstudios.com">
  <target host="www.sparkstudios.com" />
  <target host="sparkstudios.com" />
  <rule from="^http://www\.sparkstudios\.com/" to="https://www.sparkstudios.com/"/>
  <rule from="^http://sparkstudios\.com/" to="https://www.sparkstudios.com/"/>
</ruleset>

<ruleset name="Spin.de">
  <target host="spin.de" />
  <target host="www.spin.de" />

  <rule from="^http://(www\.)?spin\.de/" to="https://www.spin.de/"/>
</ruleset>
<ruleset name="Springpad">
  <target host="springpadit.com" />
  <target host="www.springpadit.com" />

  <rule from="^http://(www\.)?springpadit\.com/" to="https://springpadit.com/"/>
</ruleset>
<ruleset name="Spyderco">
  <target host="spyderco.com" />
  <target host="www.spyderco.com" />

  <rule from="^http://(www\.)?spyderco\.com/" to="https://$1spyderco.com/"/>
</ruleset>
<ruleset name="Srware">
  <target host="srware.net"/>
  <target host="www.srware.net"/>

  <securecookie host="^(.*\.)?srware.net$" name=".*" />

  <rule from="^http://(www\.)?srware\.net/" to="https://www.srware.net/"/>
</ruleset>
<ruleset name="Stan Deyo" default_off="Certificate mismatch">
  <target host="www.standeyo.com" />
  <target host="standeyo.com" />

  <rule from="^http://(www\.)?standeyo\.com/" to="https://standeyo.com/"/>
</ruleset>
<ruleset name="StartCom">
  <target host="startssl.com" />
  <target host="*.startssl.com" />
  <target host="startssl.net" />
  <target host="*.startssl.net" />
  <target host="startssl.org" />
  <target host="*.startssl.org" />
  <target host="startssl.eu" />
  <target host="*.startssl.eu" />
  <target host="startssl.us" />
  <target host="*.startssl.us" />
  <target host="startcom.org" />
  <target host="*.startcom.org" />

  <!-- since these resources are required for establishing HTTPS connections,
       they need to be available over HTTP
  <Piet> OCSP: URI: http://ocsp.startssl.com/sub/class4/server/ca
  <Piet> CA Issuers: URI: http://www.startssl.com/certs/sub.class4.server.ca.crt
  <Piet> URI: http://www.startssl.com/crt4-crl.crl
  <Piet> URI: http://crl.startssl.com/crt4-crl.crl
  (and from the SSL observatory):
  http://cert.startcom.org/sfsca-crl.crl
  http://crl.startcom.org/sfsca-crl.crl
  http://crl.startssl.com/sfsca.crl
  http://cert.startcom.org/ca-crl.crl
  http://crl.startcom.org/crl/ca-crl.crl
  (and from Eddy Nigg):
  http://ocsp.startssl.com/*
  http://www.startssl.com/certs/*.crt
  http://www.startssl.com/*.crl
  http://crl.startssl.com/*.crl
  http://cert.startcom.org/*.crl
  http://cert.startcom.org/*.crt
  -->
  <exclusion pattern="ocsp\.startcom" />
  <exclusion pattern="ocsp\.startssl" />
  <exclusion pattern="\.crl$" />
  <exclusion pattern="\.crt$" />

  <!-- should mitigate against exploitation of the above exclusions -->
  <securecookie host=".*" name=".*" />

  <rule from="^http://(.*\.)?startssl\.(com|net|org|eu|us)/" to="https://$1startssl.$2/"/>
  <rule from="^http://(.*\.)?startcom\.org/" to="https://$1startcom.org/"/>
</ruleset>
<ruleset name="Statcounter">
  <target host="statcounter.com" />
  <target host="*.statcounter.com" />
<!-- cert warning -->
<!--  <target host="www.statcounter.com" /> -->

  <rule from="^http://(www\.)?statcounter\.com/" to="https://statcounter.com/"/>
  <rule from="^http://([^/:@]+)\.statcounter\.com/" to="https://$1.statcounter.com/"/>
</ruleset>

<ruleset name="StayFriends">
  <target host="stayfriends.de" />
  <target host="www.stayfriends.de" />
  <target host="stayfriends.at" />
  <target host="www.stayfriends.at" />
  <target host="stayfriends.ch" />
  <target host="www.stayfriends.ch" />  
  
  <rule from="^http://(www\.)?stayfriends\.de/" to="https://www.stayfriends.de/"/>
  <rule from="^http://(www\.)?stayfriends\.at/" to="https://www.stayfriends.at/"/>
  <rule from="^http://(www\.)?stayfriends\.ch/" to="https://www.stayfriends.ch/"/>
</ruleset>
<ruleset name="Stevens" match_rule="http:.*\.stevens\.">
	<target host="*.stevens.edu" />
	<exclusion pattern="^http://(personal|www.math|www.cs|www.acc|guinness.cs|tarantula.phy|www.phy|tarantula.srcit|www.srcit|debian.srcit|ubuntu.srcit)\.stevens\.edu/.*" />
		<rule from="^http://([^/:@]*)\.stevens\.edu/"
				  to="https://$1.stevens.edu/" />
</ruleset>
<ruleset name="Storebrand">
  <target host="storebrand.no" />
  <target host="www.storebrand.no" />

  <rule from="^http://storebrand\.no/" to="https://www.storebrand.no/"/>
  <rule from="^http://www\.storebrand\.no/" to="https://www.storebrand.no/"/>
</ruleset>

<ruleset name="StudiVZ (disabled)" default_off="Certificate mismatch">
  <target host="www.studivz.net" />

  <rule from="^http://www\.studivz\.net/" to="https://www.studivz.net/"/>
</ruleset>
<ruleset name="StumbleUpon (breaks plugin)" default_off="Breaks the SU extension">
  <target host="stumbleupon.com" />
  <target host="www.stumbleupon.com" />

  <rule from="^http://(www\.)?stumbleupon\.com/" to="https://www.stumbleupon.com/"/>
</ruleset>
<ruleset name="Sunbeltsoftware.com">
	<target host="sunbeltsoftware.com" />
	<target host="www.sunbeltsoftware.com" />
	<rule from="^http://www\.sunbeltsoftware\.com/" to="https://www.sunbeltsoftware.com/"/>
	<rule from="^http://sunbeltsoftware\.com/" to="https://www.sunbeltsoftware.com/"/>
</ruleset>

<ruleset name="SuperAntiSpyware">
  <target host="www.superantispyware.com" />
  <target host="superantispyware.com" />

  <rule from="^http://(www\.)?superantispyware\.com/" to="https://www.superantispyware.com/"/>
</ruleset>
<ruleset name="Superstart.se">
	<target host="superstart.se" />
	<target host="www.superstart.se" />
	<target host="static.superstart.se" />
	<rule from="^http://www\.superstart\.se/" to="https://www.superstart.se/"/>
	<rule from="^http://static\.superstart\.se/" to="https://static.superstart.se/"/>
	<rule from="^http://superstart\.se/" to="https://www.superstart.se/"/>
</ruleset>

<ruleset name="SurveyMonkey (buggy)" default_off="breaks surveys!!!">
  <target host="surveymonkey.com" />
  <target host="www.surveymonkey.com" />
  <target host="secure.surveymonkey.com" />

  <securecookie host="^(.+\.)?surveymonkey\.com$" name=".*"/>

  <rule from="^http://surveymonkey\.com/" to="https://www.surveymonkey.com/"/>
  <rule from="^http://(www|secure)\.surveymonkey\.com/" to="https://$1.surveymonkey.com/"/>
</ruleset>
<ruleset name="Svenskakyrkan">
	<target host="svenskakyrkan.se" />
	<target host="www.svenskakyrkan.se" />
	<rule from="^http://svenskakyrkan\.se/" to="https://www.svenskakyrkan.se/"/>
	<rule from="^http://www\.svenskakyrkan\.se/" to="https://www.svenskakyrkan.se/"/>
</ruleset>

<ruleset name="Svenskaspel.se">
  <target host="svenskaspel.se" />
  <rule from="^http://svenskaspel\.se/" to="https://svenskaspel.se/"/>
  <rule from="^http://www\.svenskaspel\.se/" to="https://svenskaspel.se/"/>
</ruleset>

<!-- The swedish national radio -->
<ruleset name="SverigesRadio">
	<target host="sverigesradio.se" />
	<target host="www.sverigesradio.se" />
	<target host="sr.se" />
	<target host="www.sr.se" />
	<rule from="^http://www\.sverigesradio\.se/" to="https://sverigesradio.se/"/>
	<rule from="^http://sverigesradio\.se/" to="https://sverigesradio.se/"/>
	<rule from="^http://sr\.se/" to="https://sverigesradio.se/"/>
	<rule from="^http://www\.sr\.se/" to="https://sverigesradio.se/"/>
</ruleset>

<ruleset name="Swiss.com">
  <target host="swiss.com"/>
  <target host="www.swiss.com"/>
  <target host="lsy-www.swiss.com"/>
  <target host="booking.swiss.com"/>

  <rule from="^http://(www\.)?swiss\.com/" to="https://www.swiss.com/"/>
  <rule from="^http://lsy-www\.swiss\.com/" to="https://lsy-www.swiss.com/"/>
  <rule from="^http://booking\.swiss\.com/" to="https://booking.swiss.com/"/>
</ruleset>
<ruleset name="switch.ch">
  <target host="switch.ch"/>
  <target host="www.switch.ch"/>

  <rule from="^http://(www\.)?switch\.ch/" to="https://www.switch.ch/"/>
</ruleset>
<ruleset name="Sydostran.se">
<target host="sydostran.se" />
<target host="www.sydostran.se" />
<rule from="^http://sydostran\.se/" to="https://www.sydostran.se/"/>
<rule from="^http://www\.sydostran\.se/" to="https://www.sydostran.se/"/>
</ruleset>

<ruleset name="Symbian Foundation">
  <target host="developer.symbian.org" />

  <rule from="^http://developer\.symbian\.org/" to="https://developer.symbian.org/" />
</ruleset>

<ruleset name="System76.com">
  <target host="www.system76.com" />
  <target host="system76.com" />
  <rule from="^http://www\.system76\.com/" to="https://www.system76.com/"/>
  <rule from="^http://system76\.com/" to="https://www.system76.com/"/>
</ruleset>

<ruleset name="Systembolaget.se">
	<target host="systembolaget.se" />
	<target host="www.systembolaget.se" />
	<exclusion pattern="^http://www\.systembolaget\.se/Butik\-\-Ombud/"/>
	<rule from="^http://systembolaget\.se/" to="https://www.systembolaget.se/"/>
	<rule from="^http://www\.systembolaget\.se/" to="https://www.systembolaget.se/"/>
</ruleset>

<!-- Note that some services linked from the home page will be HTTP.
     Trying to force these to HTTPS currently (2010-05) seems to produce
     certificate errors. -->

<ruleset name="Tmobile">
  <target host="t-mobile.com" />
  <target host="www.t-mobile.com" />
  <target host="my.t-mobile.com" />
  <target host="tmobile.com" />
  <target host="www.tmobile.com" />
  <target host="my.tmobile.com" />
  <target host="t-mobile.co.uk" />
  <target host="www.t-mobile.co.uk" />
  <target host="instantemail.t-mobile.co.uk"/>
  <target host="www.instantemail.t-mobile.co.uk"/>
  <target host="tmobileuk.blackberry.com"/>
  <target host="www.tmobileuk.blackberry.com"/>
  <target host="t-mobile.nl" />
  <target host="www.t-mobile.nl" />
  <target host="www.tmobile.nl" />
  <target host="tmobile.nl" />
  <target host="gsm.t-mobile.nl" />

  <rule from="^http://(www\.)?t-mobile\.(com|nl)/" to="https://www.t-mobile.$2/"/>
  <rule from="^http://(www\.)?tmobile\.(com|nl)/" to="https://www.tmobile.$2/"/>
  <rule from="^http://my\.t-?mobile\.com/" to="https://my.t-mobile.com/"/>
  <rule from="^http://(www\.)?t-mobile\.co\.uk/" to="https://www.t-mobile.co.uk/" />
  <rule from="^http://(www\.)?tmobileuk\.blackberry\.com/" to="https://tmobileuk.blackberry.com/"/>
  <rule from="^http://(www\.)?instantemail\.t-mobile\.co\.uk/" to="https://tmobileuk.blackberry.com/"/>
  <rule from="^http://gsm\.t-mobile\.nl/" to="https://gsm.t-mobile.nl/"/>
</ruleset>
<ruleset name="TAZ">
  <target host="taz.de" />
  <target host="blogs.taz.de" />
  <target host="dl.taz.de" />
  <target host="www.taz.de" />

  <rule from="^http://(www\.)?taz\.de/" to="https://www.taz.de/"/>
  <rule from="^http://blogs\.taz\.de/" to="https://blogs.taz.de/"/>
  <rule from="^http://dl\.taz\.de/" to="https://dl.taz.de/"/>
</ruleset>
<ruleset name="TD Canada Trust">
  <target host="tdcanadatrust.com" />
  <target host="www.tdcanadatrust.com" />

  <rule from="^http://(www\.)?tdcanadatrust\.com/" to="https://www.tdcanadatrust.com/" />
</ruleset>
<ruleset name="TT.se">
<target host="tt.se" />
<target host="www.tt.se" />
<rule from="^http://tt\.se/" to="https://www.tt.se/"/>
<rule from="^http://www\.tt\.se/" to="https://www.tt.se/"/>
</ruleset>

<!-- tv.com includes stuff from .com.com. which do NOT allow https :( -->
<ruleset name="TV.com">
	<target host="tv.com" />
	<target host="www.tv.com" />

	<rule from="^http://tv\.com/" to="https://www.tv.com/"/>
	<rule from="^http://www\.tv\.com/" to="https://www.tv.com/"/>
</ruleset>

<ruleset name="TV4play.se">
	<target host="tv4play.se" />
	<target host="www.tv4play.se" />
	<rule from="^http://www\.tv4play\.se/" to="https://www.tv4play.se/"/>
	<rule from="^http://tv4play\.se/" to="https://www.tv4play.se/"/>
</ruleset>

<!-- tandlakarforbundet is a swedish labour union -->
<ruleset name="Tandlakarforbundet.se">
	<target host="tandlakarforbundet.se" />
	<target host="www.tandlakarforbundet.se" />
	<rule from="^http://tandlakarforbundet\.se/" to="https://www.tandlakarforbundet.se/"/>
	<rule from="^http://www\.tandlakarforbundet\.se/" to="https://www.tandlakarforbundet.se/"/>
</ruleset>

<ruleset name="Target">
  <target host="target.com" />
  <target host="www.target.com" />
  <target host="sites.target.com" />

  <rule from="^http://(www\.)?target\.com/" to="https://www.target.com/"/>
  <rule from="^http://sites\.target\.com/" to="https://sites.target.com/"/>
</ruleset>
<ruleset name="Tchibo.de">
  <target host="tchibo.de"/>
  <target host="*.tchibo.de"/>
  <target host="*.tchibo-content.de"/>

  <securecookie host="^(.*\.)?tchibo\.de$" name=".*" />

  <rule from="^http://(www\.)?tchibo\.de/" to="https://www.tchibo.de/"/>
  <rule from="^http://tchibo\.de/" to="https://www.tchibo.de/"/>
  <rule from="^http://media1\.tchibo-content\.de/" to="https://media1.tchibo-content.de/"/>
  <rule from="^http://media2\.tchibo-content\.de/" to="https://media2.tchibo-content.de/"/>
  <rule from="^http://media3\.tchibo-content\.de/" to="https://media3.tchibo-content.de/"/>
  <rule from="^http://media4\.tchibo-content\.de/" to="https://media4.tchibo-content.de/"/>
  <rule from="^http://media5\.tchibo-content\.de/" to="https://media5.tchibo-content.de/"/>
  <rule from="^http://media6\.tchibo-content\.de/" to="https://media6.tchibo-content.de/"/>
  <rule from="^http://media7\.tchibo-content\.de/" to="https://media7.tchibo-content.de/"/>
  <rule from="^http://media8\.tchibo-content\.de/" to="https://media8.tchibo-content.de/"/>
  <rule from="^http://media9\.tchibo-content\.de/" to="https://media9.tchibo-content.de/"/>
</ruleset>
<ruleset name="Teamviewer">
  <target host="teamviewer.com"/>
  <target host="www.teamviewer.com"/>
  <target host="*.teamviewer.com"/>

  <securecookie host="^(.*\.)?teamviewer.com$" name=".*" />

  <rule from="^http://(www\.)?teamviewer\.com/" to="https://www.teamviewer.com/"/>
  <rule from="^http://login\.teamviewer\.com/" to="https://login.teamviewer.com/"/>
  <rule from="^http://wa103\.teamviewer\.com/" to="https://wa103.teamviewer.com/"/>
  <rule from="^http://wa236\.teamviewer\.com/" to="https://wa236.teamviewer.com/"/>
</ruleset>
<ruleset name="Teamxlink" default_off="Cert warning">
  <target host="teamxlink.co.uk" />
  <target host="www.teamxlink.co.uk" />

  <rule from="^http://(www\.)?teamxlink\.co\.uk/" to="https://www.teamxlink.co.uk/"/>
</ruleset>
<ruleset name="Techcrunch" default_off="Cert warning">
  <target host="techcrunch.com" />
  <target host="www.techcrunch.com" />

  <rule from="^http://(www\.)?techcrunch\.com/" to="https://techcrunch.com/"/>
</ruleset>
<!-- Technet.com redirects to technet.microsoft.com 
which does not support SSL (301 redirect). blogs.technet.com however does.
-->
<ruleset name="Technet.com">
	<target host="blogs.technet.com" />
	<rule from="^http://blogs\.technet\.com/" to="https://blogs.technet.com/"/>
</ruleset>
<ruleset name="Techniker Krankenkasse">
<target host="www.tk.de" />
<target host="tk.de" />
<rule from="^http://(www\.)?tk\.de/" to="https://www.tk.de/"/>
</ruleset>
<ruleset name="TechnologyReview">
  <target host="technologyreview.com" />
  <target host="technologyreview.in" />
  <target host="www.technologyreview.com" />
  <target host="www.technologyreview.in" />
  <target host="subscribe.technologyreview.com" />

  <securecookie host="^(.+\.)?technologyreview\.com$" name=".*"/>
  <securecookie host="^(.*\.)?technologyreview\.in$" name=".*" />

  <rule from="^http://(www\.)?technologyreview\.com/" to="https://www.technologyreview.com/"/>
  <rule from="^http://(www\.)?technologyreview\.in/" to="https://www.technologyreview.in/"/>
  <rule from="^http://(subscribe)\.technologyreview\.com/" to="https://subscribe.technologyreview.com/"/>
</ruleset><ruleset name="Techsupportalert">
<target host="www.techsupportalert.com" />
<target host="techsupportalert.com" />
<rule from="^http://(www\.)?techsupportalert\.com/" to="https://www.techsupportalert.com/"/>
</ruleset><ruleset name="Tele2.se">
  <target host="www.tele2.se" />
  <target host="tele2.se" />
  <rule from="^http://www\.tele2\.se/" to="https://www.tele2.se/"/>
  <rule from="^http://tele2\.se/" to="https://www.tele2.se/"/>
</ruleset>

<ruleset name="Telia.se">
  <target host="telia.se" />
  <target host="*.telia.se" />
  <rule from="^http://telia\.se/" to="https://www.telia.se/"/>
  <rule from="^http://www\.telia\.se/" to="https://www.telia.se/"/>
</ruleset>

 <!-- Partial -->
<ruleset name="Tesco">
  <target host="tesco.com" />
  <target host="tescocompare.com" />
  <target host="tescofinance.com" />
  <target host="tescophoto.com" />
  <target host="tescodiets.com" />
  <target host="clothingattesco.com" />
  <target host="tescogetinvolved.com" />
  <target host="direct.tesco.com" />
  <target host="secure.tesco.com" />
  <target host="phone-shop.tesco.com" />
  <target host="www.tesco.com" />
  <target host="www.clothingattesco.com" />
  <target host="www.tescocompare.com" />
  <target host="www.tescofinance.com" />
  <target host="www.tescophoto.com" />
  <target host="www.tescodiets.com" />
  <target host="www.tescogetinvolved.com" />

  <securecookie host="^(.*\.)?tescofinance\.com$" name=".*" />
  <securecookie host="^(.*\.)?tescocompare\.com$" name=".*" />
  <securecookie host="^(.*\.)?clothingattesco\.com$" name=".*" />
  <securecookie host="^(.*\.)?tescophoto\.com$" name=".*" />
  <securecookie host="^(.*\.)?tescodiets\.com$" name=".*" />
  <securecookie host="^(.*\.)?tescogetinvolved\.com$" name=".*" />

  <rule from="^http://(www\.)?tescocompare\.com/" to="https://www.tescocompare.com/"/>
  <rule from="^http://(www\.)?tescofinance\.com/" to="https://www.tescofinance.com/"/>
  <rule from="^http://(www\.)?tescophoto\.com/" to="https://www.tescophoto.com/"/>
  <rule from="^http://(www\.)?tescodiets\.com/" to="https://www.tescodiets.com/"/>
  <rule from="^http://(www\.)?tescogetinvolved\.com/" to="https://www.tescogetinvolved.com/"/>
  <rule from="^http://(www\.)?clothingattesco\.com/" to="https://www.clothingattesco.com/"/>

  <rule from="^http://(secure|direct|phone-shop)\.tesco\.com/" to="https://$1.tesco.com/"/>

	<rule from="^http://(www\.)?tesco\.com/books/"
			to="https://secure.tesco.com/books/"/>
	<rule from="^http://(www\.)?tesco\.com/groceries/"
			to="https://secure.tesco.com/groceries/"/>
	<rule from="^http://(www\.)?tesco\.com/whatsinstore/"
			to="https://secure.tesco.com/whatsinstore/"/>
</ruleset>
<ruleset name="TheAA">
  <target host="theaa.com" />
  <target host="www.theaa.com" />

  <rule from="^http://(www\.)?theaa\.com/" to="https://www.theaa.com/"/>
</ruleset>
<ruleset name="The Book Depository">
  <target host="bookdepository.co.uk" />
  <target host="www.bookdepository.co.uk" />
  <target host="images.bookdepository.co.uk" />
  <target host="cache0.bookdepository.co.uk" />
  <target host="cache1.bookdepository.co.uk" />
  <target host="cache2.bookdepository.co.uk" />
  <target host="cache3.bookdepository.co.uk" />

  <rule from="^http://bookdepository\.co\.uk/" to="https://bookdepository.co.uk/" />
  <rule from="^http://(cache0|cache1|cache2|cache3|images|www)\.bookdepository\.co\.uk/" to="https://$1.bookdepository.co.uk/" />
</ruleset><ruleset name="The Book People">
  <target host="thebookpeople.co.uk" />
  <target host="images.thebookpeople.co.uk" />
  <target host="www.thebookpeople.co.uk" />

  <rule from="^http://(www\.)?thebookpeople\.co\.uk/" to="https://www.thebookpeople.co.uk/" />
  <rule from="^http://images\.thebookpeople\.co\.uk/" to="https://images.thebookpeople.co.uk/" />
</ruleset><ruleset name="The Document Foundation">

	<target host="www.documentfoundation.org" />
	<target host="documentfoundation.org" />

	<rule from="^http://(www\.)?documentfoundation\.org/" to="https://www.documentfoundation.org/"/>
</ruleset><ruleset name="The Privacy Blog">
  <target host="www.theprivacyblog.com" />
  <target host="theprivacyblog.com" />

  <rule from="^http://(www\.)?theprivacyblog\.com/" to="https://www.theprivacyblog.com/"/>
</ruleset>
<ruleset name="ThinkGeek">
        <target host="thinkgeek.com" />
        <target host="www.thinkgeek.com" />

        <rule from="^http://(www\.)?thinkgeek\.com/" to="https://www.thinkgeek.com/"/>
        <securecookie host="^(.*\.)?thinkgeek\.com$" name=".*" />
</ruleset>
<ruleset name="ThisIsMyNext">
  <target host="thisismynext.com" />
  <target host="www.thisismynext.com" />

  <securecookie host="^(.+\.)?thisismynext\.com$" name=".*"/>

  <rule from="^http://(www\.)?thisismynext\.com/" to="https://thisismynext.com/"/>
</ruleset>
<ruleset name="ThreatPost">
  <target host="threatpost.com" />
  <target host="www.threatpost.com" />

  <securecookie host="^(.+\.)?threatpost\.com$" name=".*"/>

  <rule from="^http://(www\.)?threatpost\.com/" to="https://threatpost.com/"/>
</ruleset><ruleset name="Three">
  <target host="three.ie" />
  <target host="www.three.ie" />
  <target host="threestore.three.co.uk" />

  <rule from="^http://(www\.)?three\.ie/" to="https://www.three.ie/"/>
  <rule from="^http://threestore\.three\.co\.uk/" to="https://threestore.three.co.uk/"/>
</ruleset>
<ruleset name="Thunder Ranch">
  <target host="thunderranchinc.com" />
  <target host="www.thunderranchinc.com" />

  <rule from="^http://(www\.)?thunderranchinc\.com/" to="https://www.thunderranchinc.com/"/>
</ruleset>
<ruleset name="Timbro.se">
	<target host="timbro.se" />
	<target host="www.timbro.se" />
	<rule from="^http://www\.timbro\.se/" to="https://www.timbro.se/"/>
	<rule from="^http://timbro\.se/" to="https://timbro.se/"/>
</ruleset>

<ruleset name="TinEye">
  <target host="www.tineye.com" />
  <target host="tineye.com" />
  <target host="pixid.ideeinc.com" />

  <rule from="^http://(www\.)?tineye\.com/" to="https://www.tineye.com/"/>
  <rule from="^http://(www\.)?pixid\.ideeinc\.com/" to="https://pixid.ideeinc.com/"/>
</ruleset>
<ruleset name="Tmcnet.com">
  <target host="www.tmcnet.com" />
  <target host="tmcnet.com" />
  <rule from="^http://www\.tmcnet\.com/" to="https://www.tmcnet.com/"/>
  <rule from="^http://tmcnet\.com/" to="https://tmcnet.com/"/>
</ruleset>

<ruleset name="Todoist">
  <target host="todoist.com" />

  <rule from="^http://(www\.)?todoist\.com/" to="https://todoist.com/"/>
</ruleset>
<ruleset name="TodoLy">
  <target host="todo.ly"/>
  <target host="www.todo.ly"/>

  <securecookie host="^(.+\.)?todo\.ly$" name=".*"/>

  <rule from="^http://(www\.)?todo\.ly/" to="https://todo.ly/"/>
</ruleset>
<ruleset name="TofinoSecurity">
  <target host="www.tofinosecurity.com" />
  <target host="tofinosecurity.com" />

  <rule from="^http://(www\.)?tofinosecurity\.com/" to="https://www.tofinosecurity.com/"/>
</ruleset>
<ruleset name="Tor2Web">
  <target host="*.tor2web.com" />
  <target host="*.tor2web.org" />
  <!-- the home page is not yet working
  <target host="tor2web.*" />
  -->

  <rule from="^http://([^/]+)\.tor2web\.(org|com)/" to="https://$1.tor2web.org/"/>
  <!-- just in case -->
  <rule from="^https://([^/]+)\.tor2web\.com/" to="https://$1.tor2web.org/"/>
</ruleset>
<ruleset name="Torproject">
  <target host="torproject.org" />
  <target host="*.torproject.org" />

  <exclusion pattern="^http://archive\.torproject\.org/"/>
  <exclusion pattern="^http://media\.torproject\.org/"/>
  <exclusion pattern="^http://deb\.torproject\.org/"/>
  <exclusion pattern="^http://torperf\.torproject\.org/"/>
  <rule from="^http://torproject\.org/" to="https://torproject.org/"/>
  <rule from="^http://([^/:@]*)\.torproject\.org/" to="https://$1.torproject.org/"/>
</ruleset>
<ruleset name="TorrentFreak.com">
	<target host="torrentfreak.com" />
	<target host="www.torrentfreak.com" />
	<rule from="^http://www\.torrentfreak\.com/" to="https://www.torrentfreak.com/"/>
	<rule from="^http://torrentfreak\.com/" to="https://www.torrentfreak.com/"/>
</ruleset>

<ruleset name="Torrentz">
  <target host="www.torrentz.com" />
  <target host="www.torrentz.eu" />
  <target host="www.torrentz.me" />
  <target host="torrentz.com" />
  <target host="torrentz.eu" />
  <target host="torrentz.me" />

  <rule from="^http(s)?://(www\.)?torrentz\.(com|me)/" to="https://torrentz.eu/"/>
  <rule from="^http://(www\.)?torrentz\.eu/" to="https://torrentz.eu/"/>
</ruleset><ruleset name="Torservers">
<target host="www.torservers.net" />
<target host="torservers.net" />
<rule from="^http://(www\.)?torservers\.net/" to="https://www.torservers.net/"/>
</ruleset>
<ruleset name="Tradera">
	<target host="tradera.com" />
	<target host="*.tradera.com" />
	<target host="tradera.se" />
	<target host="*.tradera.se" />
	<rule from="^http://tradera\.se/" to="https://www.tradera.com/"/>
	<rule from="^http://www\.tradera\.se/" to="https://www.tradera.com/"/>
	<rule from="^http://tradera\.com/" to="https://www.tradera.com/"/>
	<rule from="^http://www\.tradera\.com/" to="https://www.tradera.com/"/>
</ruleset>

<ruleset name="Trafficfacts.com">
	<target host="rt.trafficfacts.com" />

	<rule from="^http://rt\.trafficfacts\.com/" to="https://rt.trafficfacts.com/" />
</ruleset><ruleset name="Transifex.net">
  <target host="transifex.net" />
  <target host="www.transifex.net" />

  <rule from="^http://(www\.)?transifex\.net/" to="https://www.transifex.net/" />
</ruleset>
<ruleset name="Translatewiki.net">
  <target host="translatewiki.net" />
  <target host="www.translatewiki.net" />

  <rule from="^http://(www\.)?translatewiki\.net/" to="https://translatewiki.net/" />
</ruleset><ruleset name="Transportstyrelsen.se">
	<target host="transportstyrelsen.se" />
	<target host="www.transportstyrelsen.se" />
	<rule from="^http://www\.transportstyrelsen\.se/" to="https://www.transportstyrelsen.se/"/>
	<rule from="^http://transportstyrelsen\.se/" to="https://transportstyrelsen.se/"/>
</ruleset>

<ruleset name="Trashmail">
  <target host="trashmail.net" />
  <target host="www.trashmail.net" />

  <rule from="^http://(www\.)?trashmail\.net/" to="https://ssl.trashmail.net/"/>
</ruleset>
<ruleset name="Trisquel">
  <target host="trisquel.info" />
  <target host="www.trisquel.info" />

  <rule from="^http://(www\.)?trisquel\.info/" to="https://trisquel.info/" />
</ruleset><ruleset name="TunnelBroker" default_off="self-signed">
  <target host="tunnelbroker.net" />
  <target host="*.tunnelbroker.net" />

  <rule from="^http://tunnelbroker\.net/" to="https://tunnelbroker.net/"/>
  <rule from="^http://([^/:@]*)\.tunnelbroker\.net/" to="https://$1.tunnelbroker.net/"/>
</ruleset>
<ruleset name="Turn.com">
	<target host="r.turn.com" />

	<rule from="^http://r\.turn\.com/" to="https://r.turn.com/" />
</ruleset><ruleset name="Tweetdeck">
  <target host="tweetdeck.com" />
  <target host="www.tweetdeck.com" />

  <exclusion pattern="^http://support\.tweetdeck\.com/"/><!-- cert for wrong domain -->
  <rule from="^http://(www\.)?tweetdeck\.com/" to="https://www.tweetdeck.com/"/>
</ruleset>
<!-- Image contents may be protected via S3 rule? -->

<ruleset name="TwitPic">
  <target host="twitpic.com" />
  <target host="www.twitpic.com" />

  <rule from="^http://(www\.)?twitpic\.com/" to="https://twitpic.com/"/>
</ruleset>
<!-- The third rule here rewrites profile picture URLs to follow a
     pattern that Twitter currently uses itself, but inconsistently.
     Using this pattern now makes most user pages load successfully
     in HTTPS instead of giving a mixed content warning. -->

<!-- There are still some hosts that things get loaded from that can't
     be safely rewritten without triggering a certificate error.
     E.g. platform.twitter.com has some scripts, but the https version
     won't validate. -->

<!-- The twimg rule triggers the favicon bug a lot but it's not clear
     that it makes the site unusable or particularly broken. -->

<ruleset name="Twitter">
  <target host="*.twitter.com" />
  <target host="twitter.com" />
  <target host="*.twimg.com" />

  <securecookie host="^(.*\.)?twitter\.com$" name=".*" />

  <rule from="^http://(www\.)?twitter\.com/" to="https://twitter.com/"/>
  <rule from="^http://(business|dev|mobile|search|static|support)\.twitter\.com/" to="https://$1.twitter.com/"/>
  <rule from="^http://[a-z0-9][^@:/]?\.twimg\.com/" to="https://s3.amazonaws.com/twitter_production/"/>
</ruleset>
<ruleset name="Typepad">
  <target host="typepad.com" />
  <target host="www.typepad.com" />

  <rule from="^http://(www\.)?typepad\.com/" to="https://www.typepad.com/"/>
</ruleset>
<ruleset name="U-blox.com" default_off="Cert problem">
  <target host="www.u-blox.com" />
  <target host="u-blox.com" />
  <rule from="^http://www\.u-blox\.com/" to="https://www.u-blox.com/"/>
  <rule from="^http://u-blox\.com/" to="https://www.u-blox.com/"/>
</ruleset>

<!-- only cs seems to give back correct content :/ -->
<ruleset name="UCSB.edu">
	<target host="www.cs.ucsb.edu" />
	<rule from="^http://www\.cs\.ucsb\.edu/" to="https://www.cs.ucsb.edu/"/>
</ruleset>

<!-- only www-cse seems to give back correct content :/ -->
<ruleset name="UCSD.edu">
	<target host="www-cse.ucsd.edu" />
	<rule from="^http://www-cse\.ucsd\.edu/" to="https://www-cse.ucsd.edu/"/>
</ruleset>

<ruleset name="UK Local Government">
  <!--
    These are rules for local government in the UK.
    Council websites are foo.gov.uk domains.
    Often there are additional subdomains, for specific departments / apps
      eg: planning.southend.gov.uk, essexlibraries.essexcc.gov.uk
    There's no exhaustive list of subdomains, but local councils are listed at:
      http://www.direct.gov.uk/en/Dl1/Directories/Localcouncils/DG_4003594
  -->

  <!-- special and unusual cases go at the top to avoid the catch-all rule below -->

  <target host="www.hinckleyandbosworthonline.org.uk"/><target host="hinckleyandbosworthonline.org.uk"/>
  <target host="www.hinckley-bosworth.gov.uk"/><target host="hinckley-bosworth.gov.uk"/>
  <rule from="^http://(www\.)?(hinckleyandbosworthonline\.org\.uk|hinckley\-bosworth\.gov\.uk)/" to="https://www.hinckley-bosworth.gov.uk/"/>

  <target host="apps.southend.gov.uk"/>
  <rule from="^http://apps\.southend\.gov\.uk/" to="https://apps.southend.gov.uk/"/>

  <!-- a small number require redirect to secure.example.gov.uk -->

  <target host="broadland.gov.uk"/><target host="www.broadland.gov.uk"/>
  <target host="manchester.gov.uk"/><target host="www.manchester.gov.uk"/>
  <target host="monmouthshire.gov.uk"/><target host="www.monmouthshire.gov.uk"/>
  <target host="northwarks.gov.uk"/><target host="www.northwarks.gov.uk"/>
  <rule
    from="^http://(?:www\.)?(broadland\.gov\.uk|kettering\.gov\.uk|manchester\.gov\.uk|monmouthshire\.gov\.uk|northwarks\.gov\.uk)/"
    to="https://secure.$1/"/>

  <!-- all the remainder use www.example.gov.uk as http and https -->

  <target host="aberdeencity.gov.uk"/><target host="www.aberdeencity.gov.uk"/>
  <target host="aberdeenshire.gov.uk"/><target host="www.aberdeenshire.gov.uk"/>
  <target host="angus.gov.uk"/><target host="www.angus.gov.uk"/>
  <target host="bassetlaw.gov.uk"/><target host="www.bassetlaw.gov.uk"/>
  <target host="bathnes.gov.uk"/><target host="www.bathnes.gov.uk"/>
  <target host="blackpool.gov.uk"/><target host="www.blackpool.gov.uk"/>
  <target host="bournemouth.gov.uk"/><target host="www.bournemouth.gov.uk"/>
  <target host="bradford.gov.uk"/><target host="www.bradford.gov.uk"/>
  <target host="braintree.gov.uk"/><target host="www.braintree.gov.uk"/>
  <target host="brent.gov.uk"/><target host="www.brent.gov.uk"/>
  <target host="burnley.gov.uk"/><target host="www.burnley.gov.uk"/>
  <target host="calderdale.gov.uk"/><target host="www.calderdale.gov.uk"/>
  <target host="camden.gov.uk"/><target host="www.camden.gov.uk"/>
  <target host="canterbury.gov.uk"/><target host="www.canterbury.gov.uk"/>
  <target host="ceredigion.gov.uk"/><target host="www.ceredigion.gov.uk"/>
  <target host="charnwood.gov.uk"/><target host="www.charnwood.gov.uk"/>
  <target host="cherwell.gov.uk"/><target host="www.cherwell.gov.uk"/>
  <target host="cheshireeast.gov.uk"/><target host="www.cheshireeast.gov.uk"/>
  <target host="cityoflondon.gov.uk"/><target host="www.cityoflondon.gov.uk"/>
  <target host="derby.gov.uk"/><target host="www.derby.gov.uk"/>
  <target host="devon.gov.uk"/><target host="www.devon.gov.uk"/>
  <target host="doncaster.gov.uk"/><target host="www.doncaster.gov.uk"/>
  <target host="dover.gov.uk"/><target host="www.dover.gov.uk"/>
  <target host="dudley.gov.uk"/><target host="www.dudley.gov.uk"/>
  <target host="dundeecity.gov.uk"/><target host="www.dundeecity.gov.uk"/>
  <target host="easthants.gov.uk"/><target host="www.easthants.gov.uk"/>
  <target host="eastlothian.gov.uk"/><target host="www.eastlothian.gov.uk"/>
  <target host="east-northamptonshire.gov.uk"/><target host="www.east-northamptonshire.gov.uk"/>
  <target host="eastriding.gov.uk"/><target host="www.eastriding.gov.uk"/>
  <target host="edinburgh.gov.uk"/><target host="www.edinburgh.gov.uk"/>
  <target host="elmbridge.gov.uk"/><target host="www.elmbridge.gov.uk"/>
  <target host="enfield.gov.uk"/><target host="www.enfield.gov.uk"/>
  <target host="essex.gov.uk"/><target host="www.essex.gov.uk"/>
  <target host="falkirk.gov.uk"/><target host="www.falkirk.gov.uk"/>
  <target host="fareham.gov.uk"/><target host="www.fareham.gov.uk"/>
  <target host="fenland.gov.uk"/><target host="www.fenland.gov.uk"/>
  <target host="fifedirect.org.uk"/><target host="www.fifedirect.org.uk"/>
  <target host="fylde.gov.uk"/><target host="www.fylde.gov.uk"/>
  <target host="gateshead.gov.uk"/><target host="www.gateshead.gov.uk"/>
  <target host="glasgow.gov.uk"/><target host="www.glasgow.gov.uk"/>
  <target host="gloucestershire.gov.uk"/><target host="www.gloucestershire.gov.uk"/>
  <target host="hackney.gov.uk"/><target host="www.hackney.gov.uk"/>
  <target host="hants.gov.uk"/><target host="www.hants.gov.uk"/>
  <target host="hastings.gov.uk"/><target host="www.hastings.gov.uk"/>
  <target host="herefordshire.gov.uk"/><target host="www.herefordshire.gov.uk"/>
  <target host="hertsdirect.org"/><target host="www.hertsdirect.org"/>
  <target host="hillingdon.gov.uk"/><target host="www.hillingdon.gov.uk"/>
  <target host="ipswich.gov.uk"/><target host="www.ipswich.gov.uk"/>
  <target host="islington.gov.uk"/><target host="www.islington.gov.uk"/>
  <target host="iwight.com"/><target host="www.iwight.com"/>
  <target host="kent.gov.uk"/><target host="www.kent.gov.uk"/>
  <target host="kettering.gov.uk"/><target host="www.kettering.gov.uk"/>
  <target host="kirklees.gov.uk"/><target host="www.kirklees.gov.uk"/>
  <target host="lbhf.gov.uk"/><target host="www.lbhf.gov.uk"/>
  <target host="leicestershire.gov.uk"/><target host="www.leicestershire.gov.uk"/>
  <target host="lincolnshire.gov.uk"/><target host="www.lincolnshire.gov.uk"/>
  <target host="london.gov.uk"/><target host="www.london.gov.uk"/>
  <target host="maidstone.gov.uk"/><target host="www.maidstone.gov.uk"/>
  <target host="merton.gov.uk"/><target host="www.merton.gov.uk"/>
  <target host="midlothian.gov.uk"/><target host="www.midlothian.gov.uk"/>
  <target host="miltonkeynes.gov.uk"/><target host="www.miltonkeynes.gov.uk"/>
  <target host="newcastle.gov.uk"/><target host="www.newcastle.gov.uk"/>
  <target host="n-kesteven.gov.uk"/><target host="www.n-kesteven.gov.uk"/>
  <target host="northdown.gov.uk"/><target host="www.northdown.gov.uk"/>
  <target host="north-herts.gov.uk"/><target host="www.north-herts.gov.uk"/>
  <target host="northnorfolk.org"/><target host="www.northnorfolk.org"/>
  <target host="nottinghamshire.gov.uk"/><target host="www.nottinghamshire.gov.uk"/>
  <target host="n-somerset.gov.uk"/><target host="www.n-somerset.gov.uk"/>
  <target host="pendle.gov.uk"/><target host="www.pendle.gov.uk"/>
  <target host="peterborough.gov.uk"/><target host="www.peterborough.gov.uk"/>
  <target host="reading.gov.uk"/><target host="www.reading.gov.uk"/>
  <target host="redbridge.gov.uk"/><target host="www.redbridge.gov.uk"/>
  <target host="ribblevalley.gov.uk"/><target host="www.ribblevalley.gov.uk"/>
  <target host="richmondshire.gov.uk"/><target host="www.richmondshire.gov.uk"/>
  <target host="rochford.gov.uk"/><target host="www.rochford.gov.uk"/>
  <target host="rossendale.gov.uk"/><target host="www.rossendale.gov.uk"/>
  <target host="rother.gov.uk"/><target host="www.rother.gov.uk"/>
  <target host="rotherham.gov.uk"/><target host="www.rotherham.gov.uk"/>
  <target host="rugby.gov.uk"/><target host="www.rugby.gov.uk"/>
  <target host="ryedale.gov.uk"/><target host="www.ryedale.gov.uk"/>
  <target host="scotborders.gov.uk"/><target host="www.scotborders.gov.uk"/>
  <target host="sevenoaks.gov.uk"/><target host="www.sevenoaks.gov.uk"/>
  <target host="sheffield.gov.uk"/><target host="www.sheffield.gov.uk"/>
  <target host="slough.gov.uk"/><target host="www.slough.gov.uk"/>
  <target host="solihull.gov.uk"/><target host="www.solihull.gov.uk"/>
  <target host="somerset.gov.uk"/><target host="www.somerset.gov.uk"/>
  <target host="southampton.gov.uk"/><target host="www.southampton.gov.uk"/>
  <target host="southend.gov.uk"/><target host="www.southend.gov.uk"/>
  <target host="southglos.gov.uk"/><target host="www.southglos.gov.uk"/>
  <target host="southlanarkshire.gov.uk"/><target host="www.southlanarkshire.gov.uk"/>
  <target host="southwark.gov.uk"/><target host="www.southwark.gov.uk"/>
  <target host="staffordshire.gov.uk"/><target host="www.staffordshire.gov.uk"/>
  <target host="staffsmoorlands.gov.uk"/><target host="www.staffsmoorlands.gov.uk"/>
  <target host="stirling.gov.uk"/><target host="www.stirling.gov.uk"/>
  <target host="tandridge.gov.uk"/><target host="www.tandridge.gov.uk"/>
  <target host="tauntondeane.gov.uk"/><target host="www.tauntondeane.gov.uk"/>
  <target host="threerivers.gov.uk"/><target host="www.threerivers.gov.uk"/>
  <target host="tmbc.gov.uk"/><target host="www.tmbc.gov.uk"/>
  <target host="torbay.gov.uk"/><target host="www.torbay.gov.uk"/>
  <target host="uttlesford.gov.uk"/><target host="www.uttlesford.gov.uk"/>
  <target host="valeofglamorgan.gov.uk"/><target host="www.valeofglamorgan.gov.uk"/>
  <target host="walthamforest.gov.uk"/><target host="www.walthamforest.gov.uk"/>
  <target host="warrington.gov.uk"/><target host="www.warrington.gov.uk"/>
  <target host="wellingborough.gov.uk"/><target host="www.wellingborough.gov.uk"/>
  <target host="westdevon.gov.uk"/><target host="www.westdevon.gov.uk"/>
  <target host="west-lindsey.gov.uk"/><target host="www.west-lindsey.gov.uk"/>
  <target host="westminster.gov.uk"/><target host="www.westminster.gov.uk"/>
  <target host="westoxon.gov.uk"/><target host="www.westoxon.gov.uk"/>
  <target host="westsussex.gov.uk"/><target host="www.westsussex.gov.uk"/>
  <target host="wigan.gov.uk"/><target host="www.wigan.gov.uk"/>
  <target host="wirral.gov.uk"/><target host="www.wirral.gov.uk"/>
  <target host="wolverhampton.gov.uk"/><target host="www.wolverhampton.gov.uk"/>
  <!--
  These are self-signed, but probably still work:
  <target host="coventry.gov.uk"/><target host="www.coventry.gov.uk"/>
  <target host="hartlepool.gov.uk"/><target host="www.hartlepool.gov.uk"/>
  <target host="lewes.gov.uk"/><target host="www.lewes.gov.uk"/>
  <target host="newcastle-staffs.gov.uk"/><target host="www.newcastle-staffs.gov.uk"/>
  <target host="telford.gov.uk"/><target host="www.telford.gov.uk"/>
  -->

  <rule
    from="^http://(?:www\.)?([^/]+)/"
    to="https://www.$1/"/>

  <!-- place additional rules at the top if you wish to avoid the catch-all rule above -->
</ruleset>
<ruleset name="UN.org">
	<target host="www.un.org" />
	<target host="un.org" />
	<rule from="^http://un\.org/" to="https://un.org/"/>
	<rule from="^http://www\.un\.org/" to="https://www.un.org/"/>
</ruleset>

<ruleset name="UNFPA.org">
	<target host="www.unfpa.org" />
	<target host="unfpa.org" />
	<rule from="^http://www\.unfpa\.org/" to="https://www.unfpa.org/"/>
	<rule from="^http://unfpa\.org/" to="https://www.unfpa.org/"/>
</ruleset>

<ruleset name="UNIDO.org">
	<target host="www.unido.org" />
	<rule from="^http://www\.unido\.org/" to="https://www.unido.org/"/>
</ruleset>

<ruleset name="UNM">
  <target host="unm.edu" />
  <target host="www.unm.edu" />
  <target host="ece.unm.edu" />
  <target host="www.ece.unm.edu" />

  <rule from="^http://(www\.)?unm\.edu/" to="https://www.unm.edu/"/>
  <rule from="^http://(www\.)?ece\.unm\.edu/" to="https://www.ece.unm.edu/"/>
</ruleset>
<ruleset name="UNODC.org">
	<target host="www.unodc.org" />
	<target host="unodc.org" />
	<rule from="^http://www\.unodc\.org/" to="https://www.unodc.org/"/>
	<rule from="^http://unodc\.org/" to="https://www.unodc.org/"/>
</ruleset>

<ruleset name="UOregon (Partial!)">
  <target host="*.uoregon.edu" />
  <rule from="^http://(oregoncis|blackboard|distanceeducation|counseling|duckweb|hr2|ir|it|pcs|budgetmotel|brp|libweb|lcb|odt|scholarsbank|wiki|systems\.cs|www2\.lcb|www\.(cs|law|lcb))\.uoregon\.edu/"
          to="https://$1.uoregon.edu/"/>
  <rule from="^http://(ba|safetyweb)\.uoregon\.edu/sites/"
          to="https://$1.uoregon.edu/sites/"/>
  <rule from="^http://parking\.uoregon\.edu/(sites|misc|_images)/"
          to="https://parking.uoregon.edu/$1/"/>
          
</ruleset>

<ruleset name="UPC">
  <target host="*.upc.nl" />

  <rule from="^http://(www\.)?upc\.nl/" to="https://www.upc.nl/"/>
</ruleset><ruleset name="UPU.int">
	<target host="www.upu.int" />
	<target host="upu.int" />
	<rule from="^http://www\.upu\.int/" to="https://www.upu.int/"/>
	<rule from="^http://upu\.int/" to="https://www.upu.int/"/>
</ruleset>

<ruleset name="US Congressional Budget Office">
	<target host="cbo.gov" />
	<target host="www.cbo.gov" />

	<rule from="^http://(www\.)?cbo\.gov/" to="https://www.cbo.gov/" />
</ruleset><ruleset name="USBank">
<target host="usbank.com" />
<target host="www.usbank.com" />

<rule from="^http://(www\.)?usbank\.com/" to="https://www.usbank.com/"/>
</ruleset>

<ruleset name="USDA-ARS">
  <target host="ars.usda.gov" />
  <target host="www.ars.usda.gov" />
  <rule from="^http://(www\.)?ars\.usda\.gov/"
          to="https://www.ars.usda.gov/"/>
</ruleset>
<ruleset name="USENIX">
	<target host="usenix.org" />
	<target host="db.usenix.org" />
	<target host="www.usenix.org" />
	<rule from="^http://www\.usenix\.org/" to="https://db.usenix.org/"/>
	<rule from="^http://db\.usenix\.org/" to="https://db.usenix.org/"/>
	<rule from="^http://usenix\.org/" to="https://db.usenix.org/"/>
</ruleset>

<ruleset name="USPS">
  <target host="usps.com" />
  <target host="www.usps.com" />
  <target host="shop.usps.com" />

  <rule from="^http://(www\.)?usps\.com/" to="https://www.usps.com/"/>
  <rule from="^http://shop\.usps\.com/" to="https://shop.usps.com/"/>
</ruleset>
<!-- Uppsala university -->
<!-- Not all subdomains suports ssl, here are those that does -->
<ruleset name="UU.se">
	<target host="boxer.bmc.uu.se" />
	<target host="it.bmc.uu.se" />
	<target host="www.uu.se" />
	<target host="helpdesk.uu.se" />
	<target host="dropbox.uu.se" />
	<target host="filer.anst.uu.se" />
	<target host="www.anst.uu.se" />
	<target host="filer.student.uu.se" />
	<target host="home.student.uu.se" />
	<target host="mail.teknik.uu.se" />
	<target host="tor.uadm.uu.se" />
	<target host="uu.se" />
	<target host="webmail.uu.se" />
	<target host="www-hotel.uu.se" />
	<target host="www.it.uu.se" />
	<target host="www.listserv.uu.se" />
	<target host="www.uaf.uu.se" />
	<target host="www.uppmax.uu.se" />
	<target host="www.uuinnovation.uu.se" />
	<rule from="^http://uu\.se/" to="https://www.uu.se/"/>
	<rule from="^http://www\.uu\.se/" to="https://www.uu.se/"/>
	<rule from="^http://www-hotel\.uu\.se/" to="https://www-hotel.uu.se/"/>
	<rule from="^http://webmail\.uu\.se/" to="https://webmail.uu.se/"/>
	<rule from="^http://helpdesk\.uu\.se/" to="https://helpdesk.uu.se/"/>
	<rule from="^http://dropbox\.uu\.se/" to="https://dropbox.uu.se/"/>
	<rule from="^http://boxer\.bmc\.uu\.se/" to="https://boxer.bmc.uu.se/"/>
	<rule from="^http://it\.bmc\.uu\.se/" to="https://it.bmc.uu.se/"/>
	<rule from="^http://filer\.anst\.uu\.se/" to="https://filer.anst.uu.se/"/>
	<rule from="^http://www\.anst\.uu\.se/" to="https://www.anst.uu.se/"/>
	<rule from="^http://www\.it\.uu\.se/" to="https://www.it.uu.se/"/>
	<rule from="^http://www\.listserv\.uu\.se/" to="https://www.listserv.uu.se/"/>
	<rule from="^http://www\.uaf\.uu\.se/" to="https://www.uaf.uu.se/"/>
	<rule from="^http://www\.uppmax\.uu\.se/" to="https://www.uppmax.uu.se/"/>
	<rule from="^http://www\.uuinnovation\.uu\.se/" to="https://www.uuinnovation.uu.se/"/>
	<rule from="^http://filer\.student\.uu\.se/" to="https://filer.student.uu.se/"/>
	<rule from="^http://home\.student\.uu\.se/" to="https://home.student.uu.se/"/>
	<rule from="^http://mail\.teknik\.uu\.se/" to="https://mail.teknik.uu.se/"/>
	<rule from="^http://tor\.uadm\.uu\.se/" to="https://tor.uadm.uu.se/"/>
</ruleset>

<ruleset name="Ubuntuone">
  <target host="ubuntuone.com" />
  <target host="www.ubuntuone.com" />

  <rule from="^http://(www\.)?ubuntuone\.com/" to="https://ubuntuone.com/"/>
</ruleset>

<ruleset name="UiO">
  <target host="uio.no" />
  <target host="www.uio.no" />
  <target host="studweb.uio.no" />
  <target host="apollon.uio.no" />
  <target host="www.apollon.uio.no" />

	<rule from="^http://uio\.no/" to="https://uio.no/"/>
	<rule from="^http://www\.uio\.no/" to="https://www.uio.no/"/>

	<rule from="^http://studweb\.uio\.no/" to="https://studweb.uio.no/"/>

	<rule from="^http://apollon\.uio\.no/" to="https://apollon.uio.no/"/>
	<rule from="^http://www\.apollon\.uio\.no/" to="https://www.apollon.uio.no/"/>
</ruleset>
<ruleset name="Uma.es">
  <target host="*.cv.uma.es" />
  <target host="www.sci.uma.es" />
  <target host="web.satd.uma.es" />

  <rule from="^http://(www\.)?(.*)\.cv\.uma\.es/" to="https://$2.cv.uma.es/" />
  <rule from="^http://www\.sci\.uma\.es/" to="https://www.sci.uma.es/" />
  <rule from="^http://web\.satd\.uma\.es/" to="https://web.satd.uma.es/" />
</ruleset>
<ruleset name="Unbound">
  <target host="unbound.net" />
  <target host="www.unbound.net" />

  <rule from="^http://(www\.)?unbound\.net/" to="https://unbound.net/"/>
</ruleset>
<ruleset name="Underskog">
  <target host="underskog.no" />
  <target host="www.underskog.no" />

  <rule from="^http://(www\.)?underskog\.no/" to="https://underskog.no/"/>
</ruleset>

<ruleset name="United Airlines">
  <target host="united.com" />
  <target host="www.united.com" />
  <target host="travel.united.com" />
  <target host="ua2go.com" />
  <target host="www.ua2go.com" />

  <rule from="^http://(www\.)?united\.com/" to="https://www.united.com/"/>
  <rule from="^http://travel\.united\.com/" to="https://travel.united.com/"/>
  <rule from="^http://(www\.)?ua2go\.com/"  to="https://www.ua2go.com/"/>
</ruleset>
<ruleset name="University of Illinois at Chicago (partial)" default_off="Searching by department under Find People [https://www.uic.edu/uic/search/] may not work">
	<target host="uic.edu" />
	<target host="my.uic.edu" />
	<target host="www.uic.edu" />
	<target host="www2.uic.edu" />
	<target host="ness.uic.edu" />
	<target host="uical.uic.edu" />
	<target host="media.uic.edu" />
	<target host="tigger.uic.edu" />
	<target host="webmail.uic.edu" />
	<target host="blackboard.uic.edu" />
	<target host="www.housing.uic.edu" />
	<target host="exedweb.cc.uic.edu" />

	<target host="uicbookstore.org" />
	<target host="www.uicbookstore.org" />

	<exclusion pattern="^http://www\.uic\.edu/htbin/((ulist/az(\?|$))|(az(\?|$))|(ldap_search/))" />
	<exclusion pattern="^http://media\.uic\.edu/ensemble/app/(?!(flash/))" />
	<exclusion pattern="^http://media\.uic\.edu/ensemble/(?!(app/))" />

	<rule from="^http://(www\.)?uic\.edu/" to="https://www.uic.edu/" />
	<rule from="^http://(my|www|www2|ness|uical|media|tigger|webmail|blackboard|(www\.housing)|(exedweb\.cc))\.uic\.edu/" to="https://$1.uic.edu/" />
	<rule from="^https?://www\.uic\.edu/searchUIC\.html(#|$)" to="https://www.uic.edu/uic/search/$1" />

	<rule from="^https://uic\.edu/" to="https://www.uic.edu/" />

	<rule from="^http://(www\.)?uicbookstore\.org/" to="https://www.uicbookstore.org/" />
	<rule from="^https://uicbookstore\.org/" to="https://www.uicbookstore.org/" />
</ruleset><ruleset name="University of Southern Indiana (partial)">
	<target host="usi.edu" />
	<target host="www.usi.edu" />

	<rule from="^http://(www\.)?usi\.edu/" to="https://www.usi.edu/" />

	<!-- Invoking https://usi.edu/ produces a certificate error, so
	redirect https://usi.edu/ to https://www.usi.edu/ -->
	<rule from="^https://usi\.edu/" to="https://www.usi.edu/" />
</ruleset><ruleset name="University of Texas at Austin (partial)">
	<target host="utexas.edu" />
	<target host="www.utexas.edu" />
	<target host="ideas.utexas.edu" />
	<target host="registrar.utexas.edu" />
	<target host="utdirect.utexas.edu" />
	<target host="www.lib.utexas.edu" />
	<target host="catalog.lib.utexas.edu" />
	<target host="metalib.lib.utexas.edu" />
	<target host="dev.lib.utexas.edu" />

	<rule from="^http://(www\.)?utexas\.edu/" to="https://www.utexas.edu/" />
	<rule from="^http://(ideas|registrar|utdirect|((www|catalog|metalib|dev)\.lib))\.utexas\.edu/" to="https://$1.utexas.edu/" />

	<!-- It appears that HTTPS connections cannot be established to
	https://utexas.edu/ as of June 1, 2011, so redirect
	https://utexas.edu/ to https://www.utexas.edu/ -->
	<rule from="^https://utexas\.edu/" to="https://www.utexas.edu/" />
</ruleset><ruleset name="University of Texas at Dallas">
	<target host="utdallas.edu" />
	<target host="www.utdallas.edu" />

	<rule from="^http://(www\.)?utdallas\.edu/" to="https://www.utdallas.edu/" />
</ruleset><ruleset name="Upplandsvasby.se">
  <target host="www.upplandsvasby.se" />
  <rule from="^http://www\.upplandsvasby\.se/" to="https://www.upplandsvasby.se/"/>
</ruleset>

<ruleset name="US-Cert.gov">
	<target host="www.us-cert.gov" />
	<target host="us-cert.gov" />
	<rule from="^http://www\.us-cert\.gov/" to="https://www.us-cert.gov/"/>
	<rule from="^http://us-cert\.gov/" to="https://us-cert.gov/"/>
</ruleset>

<ruleset name="UserScripts.org">
  <target host="userscripts.org" />
  <target host="www.userscripts.org" />

  <rule from="^http://(www\.)?userscripts\.org/" to="https://www.userscripts.org/"/>
</ruleset>
<ruleset name="UsrJoy">
  <target host="usrjoy.com" />
  <target host="www.usrjoy.com" />

  <securecookie host="^(.+\.)?usrjoy\.com$" name=".*"/>

  <rule from="^http://(www\.)?usrjoy\.com/" to="https://www.usrjoy.com/"/>
</ruleset>
<ruleset name="VG.no">
	<target host="vg.no" />
	<target host="www.vg.no" />
	<target host="static.vg.no" />
	<target host="static01.vg.no" />
	<target host="static02.vg.no" />
	<target host="static03.vg.no" />
	<target host="static04.vg.no" />
	<rule from="^http://www\.vg\.no/" to="https://www.vg.no/"/>
	<rule from="^http://vg\.no/" to="https://vg.no/"/>
	<rule from="^http://static\.vg\.no/" to="https://static.vg.no/"/>
	<rule from="^http://static01\.vg\.no/" to="https://static01.vg.no/"/>
	<rule from="^http://static02\.vg\.no/" to="https://static02.vg.no/"/>
	<rule from="^http://static03\.vg\.no/" to="https://static03.vg.no/"/>
	<rule from="^http://static04\.vg\.no/" to="https://static04.vg.no/"/>
</ruleset>

<ruleset name="VR.se">
	<target host="vr.se" />
	<target host="www.vr.se" />
	<rule from="^http://www\.vr\.se/" to="https://www.vr.se/"/>
	<rule from="^http://vr\.se/" to="https://www.vr.se/"/>
</ruleset>

<ruleset name="VTunnel">
  <target host="vtunnel.com" />
  <target host="www.vtunnel.com" />

  <securecookie host="^(.+\.)?vtunnel\.com$" name=".*"/>

  <rule from="^http://(www\.)?vtunnel\.com/" to="https://vtunnel.com/"/>
</ruleset>
<ruleset name="veracode.com">
	<target host="www.veracode.com" />
	<target host="veracode.com" />
	<rule from="^http://www\.veracode\.com/" to="https://www.veracode.com/"/>
	<rule from="^http://veracode\.com/" to="https://www.veracode.com/"/>
</ruleset>

<ruleset name="Vereinigte IKK">
<target host="www.vereinigte-ikk.de" />
<target host="vereinigte-ikk.de" />
<rule from="^http://(www\.)?vereinigte-ikk\.de/" to="https://www.vereinigte-ikk.de/"/>
</ruleset>
<ruleset name="Verified Voting">
	<target host="verifiedvoting.org" />
	<target host="www.verifiedvoting.org" />
	<target host="verifiedvotingfoundation.org" />
	<target host="www.verifiedvotingfoundation.org" />

	<rule from="^http://(www\.)?verifiedvoting\.org/" to="https://www.verifiedvoting.org/" />
	<rule from="^http://(www\.)?verifiedvotingfoundation\.org/" to="https://www.verifiedvotingfoundation.org/" />
</ruleset><ruleset name="Verizon">
  <target host="www.verizon.com" />
  <target host="www22.verizon.com" />
  <target host="verizon.com" />
  <target host="www.verizonwireless.com" />
  <target host="verizonwireless.com" />

  <rule from="^http://(www\.)?verizon\.com/" to="https://www22.verizon.com/"/>
  <rule from="^http://www22\.verizon\.com/" to="https://www22.verizon.com/"/>
  <rule from="^http://(www\.)?verizonwireless\.com/" to="https://www.verizonwireless.com/"/>
</ruleset>
<ruleset name="VideoLAN" default_off="CAcert">
  <target host="videolan.org" />
  <target host="www.videolan.org" />

  <rule from="^http://(www\.)?videolan\.org/" to="https://www.videolan.org/"/>
</ruleset>
<ruleset name="Vimeo login">
  <target host="vimeo.com" />
  <target host="www.vimeo.com" />

  <!-- secure login form -->
  <rule from="^http://(www\.)?vimeo\.com/log_in" to="https://secure.vimeo.com/log_in"/>
</ruleset>

<ruleset name="Virgin Mobile AU">
    <target host="www.virginmobile.com.au" />

    <rule from="^http://www\.virginmobile\.com\.au/" to="https://www.virginmobile.com.au/" />
</ruleset>

<ruleset name="VirusTotal">
  <target host="virustotal.com" />
  <target host="www.virustotal.com" />

  <rule from="^http://(www\.)?virustotal\.com/" to="https://www.virustotal.com/"/>
</ruleset>
<!-- Av vendor. -->
<ruleset name="Virusec.com">
	<target host="www.escan.com" />
	<target host="escan.com" />
	<target host="www.virusec.com" />
	<target host="virusec.com" />
	<rule from="^http://www\.escan\.com/" to="https://www.virusec.com/"/>
	<rule from="^http://escan\.com/" to="https://www.virusec.com/"/>
	<rule from="^http://virusec\.com/" to="https://www.virusec.com/"/>
	<rule from="^http://www\.virusec\.com/" to="https://www.virusec.com/"/>
</ruleset>

<ruleset name="Vitelity">
  <target host="portal.vitelity.net" />

  <rule from="^http://portal\.vitelity\.net/" to="https://portal.vitelity.net/" />
</ruleset>
<!-- yet another 1px tracking host :-( -->
<ruleset name="Vizzit.se">
	<target host="www.vizzit.se" />
	<rule from="^http://www\.vizzit\.se/" to="https://www.vizzit.se/"/>
</ruleset>

<ruleset name="Vodafone">
  <target host="vodafone.ie" />
  <target host="www.vodafone.ie" />
  <target host="vodafone.co.uk" />
  <target host="www.vodafone.co.uk" />
  <target host="online.vodafone.co.uk" />
  <target host="shop.vodafone.co.uk" />
  <target host="vodafone.de" />
  <target host="www.vodafone.de" />
  <target host="shop.vodafone.de" />
  <target host="vodafone.co.nz" />
  <target host="www.vodafone.co.nz" />

  <rule from="^http://(?:www\.)?vodafone\.(co\.nz|co\.uk|de|ie)/" to="https://www.vodafone.$1/"/>
  <rule from="^http://online\.vodafone\.co\.uk/" to="https://online.vodafone.co.uk/"/>
  <rule from="^http://shop\.vodafone\.(co\.uk|de)/" to="https://shop.vodafone.$1/"/>
</ruleset>
<ruleset name="Volcano eCigs">
  <target host="volcanoecigs.com"/>
  <target host="www.volcanoecigs.com"/>

  <rule from="^http://(www\.)?volcanoecigs\.com/" to="https://www.volcanoecigs.com/"/>
</ruleset>
<ruleset name="Volkswagen Bank">
  <target host="*.volkswagenbank.de" />
  <target host="volkswagenbank.de" />

  <securecookie host="^(.*\.)?volkswagenbank\.de$" name=".*" />

  <rule from="^http://(www\.)?volkswagenbank\.de/" to="https://www.volkswagenbank.de/" />
  <rule from="^http://online-banking\.volkswagenbank\.de/" to="https://online-banking.volkswagenbank.de/" />
</ruleset>
<ruleset name="Vonage">
  <target host="vonage.com" />
  <target host="www.vonage.com" />
  <target host="vonage.co.uk" />
  <target host="www.vonage.co.uk" />
  <target host="vonage.ca" />
  <target host="www.vonage.ca" />

  <rule from="^http://(www\.)?vonage\.com/" to="https://www.vonage.com/"/>
  <rule from="^http://(www\.)?vonage\.co\.uk/" to="https://www.vonage.co.uk/"/>
  <rule from="^http://(www\.)?vonage\.ca/" to="https://www.vonage.ca/"/>
</ruleset>
<ruleset name="voterVOICE">
	<target host="votervoice.net" />
	<target host="www.votervoice.net" />

	<rule from="^http://(www\.)?votervoice\.net/" to="https://www.votervoice.net/" />
</ruleset><ruleset name="Vuze">
  <target host="vuze.com" />
  <target host="www.vuze.com" />

  <rule from="^http://(www\.)?vuze\.com/" to="https://www.vuze.com/"/>
</ruleset>
<ruleset name="WHO.int">
	<target host="www.who.int" />
	<target host="who.int" />
	<rule from="^http://www\.who\.int/" to="https://www.who.int/"/>
	<rule from="^http://who\.int/" to="https://www.who.int/"/>
</ruleset>

<ruleset name="World Socialist Web Site">
  <target host="wsws.org" />
  <target host="*.wsws.org" />

  <rule from="^http://(www\.)?wsws\.org/" to="https://www.wsws.org/"/>
  <rule from="^http://([^/:@]*)\.wsws\.org/" to="https://$1.wsws.org/"/>
</ruleset>
<ruleset name="WTFuzz.com">
	<target host="wtfuzz.com" />
	<target host="www.wtfuzz.com" />
	<rule from="^http://www\.wtfuzz\.com/" to="https://www.wtfuzz.com/"/>
	<rule from="^http://wtfuzz\.com/" to="https://www.wtfuzz.com/"/>
</ruleset>

<ruleset name="Waffles.fm">
	<target host="waffles.fm" />
	<target host="www.waffles.fm" />
	<rule from="^http://www\.waffles\.fm/" to="https://waffles.fm/"/>
</ruleset>
<ruleset name="WashingtonPost (broken)" default_off="Moved to akamai and broke :(">
  <target host="www.washingtonpost.com" />
  <target host="washingtonpost.com" />
  <target host="voices.washingtonpost.com" />

  <rule from="^http://(www\.)?washingtonpost\.com/"
          to="https://www.washingtonpost.com/"/>
  <rule from="^http://voices\.washingtonpost\.com/"
          to="https://voices.washingtonpost.com/"/>
</ruleset>
<ruleset name="web.de">
  <target host="web.de"/>
  <target host="*.web.de"/>
  <target host="www.web.de"/>
  <target host="logout.webde.uimserv.net"/>

  <securecookie host="^(.*\.)?web\.de$" name=".*" />

  <rule from="^http://(www\.)?web\.de/" to="https://web.de/"/>
  <rule from="^http://web\.de/" to="https://web.de/"/>
  <rule from="^http://logout\.webde\.uimserv\.net/" to="https://logout.webde.uimserv.net/"/>
</ruleset>
<!-- yet another 1px tracking host :-( -->
<ruleset name="Webtrekk.net">
	<target host="gigaset01.webtrekk.net" />
	<rule from="^http://gigaset01\.webtrekk\.net/" to="https://gigaset01.webtrekk.net/"/>
</ruleset>

<!-- tracking network, included on lots of sites. may carry banners.
If we are to download their content, atleast do it by https -->
<ruleset name="webtrends.com">
	<target host="m.webtrends.com" />
	<target host="developer.webtrends.com" />
	<target host="statse.webtrendslive.com" />
	<rule from="^http://m\.webtrends\.com/" to="https://m.webtrends.com/"/>
	<rule from="^http://developer\.webtrends\.com/" to="https://developer.webtrends.com/"/>
	<rule from="^http://statse\.webtrendslive\.com/" to="https://statse.webtrendslive.com/"/>
</ruleset>

<ruleset name="Wells Fargo">
  <target host="wellsfargo.com" />
  <target host="*.wellsfargo.com" />

  <rule from="^http://wellsfargo\.com/" to="https://www.wellsfargo.com/" />
  <rule from="^http://([^/:@]*)\.wellsfargo\.com/" to="https://$1.wellsfargo.com/" />
</ruleset>
<ruleset name="Weltbild.ch">
        <target host="weltbild.ch" />
        <target host="www.weltbild.ch" />
        <securecookie host="^(.*\.)?weltbild\.ch$" name=".*" />

        <rule from="^http://(www\.)?weltbild\.ch/" to="https://www.weltbild.ch/"/>
</ruleset>
<ruleset name="WestlandUtrecht Bank">
  <!-- Rule created by Jeroen van der Gun -->

  <target host="www.westlandutrecht.nl" />
  <target host="westlandutrecht.nl" />
  <target host="www.westlandutrechtbank.nl" />
  <target host="westlandutrechtbank.nl" />
  <target host="www.mijnwestlandutrecht.nl" />
  <target host="mijnwestlandutrecht.nl" />

  <rule from="^http://(www\.)?westlandutrecht(?:bank)?\.nl/" to="https://www.westlandutrechtbank.nl/"/>
  <rule from="^http://(www\.)?mijnwestlandutrecht\.nl/" to="https://mijnwestlandutrecht.nl/"/>
</ruleset>
<ruleset name="WhatCD">
  <target host="what.cd" />
  <target host="www.what.cd" />

  <rule from="^http://(www\.)?what\.cd/$" to="https://ssl.what.cd/"/>

</ruleset>
<ruleset name="WhatIsMyIP">
  <target host="whatismyip.com" />
  <target host="www.whatismyip.com" />

  <securecookie host="^(.+\.)?whatismyip\.com$" name=".*"/>

  <rule from="^http://(www\.)?whatismyip\.com/" to="https://www.whatismyip.com/"/>
</ruleset>
<ruleset name="Wiggle">
  <target host="wiggle.co.uk" />
  <target host="*.wiggle.co.uk" />

  <securecookie host="^([^@:/]+\.)?wiggle\.co\.uk$" name=".*"/>

  <rule from="^http://(www\.)?wiggle\.co\.uk/" to="https://www.wiggle.co.uk/"/>
</ruleset>
<!-- www.wikisomething.org is generally a valid
     domain containing general information on a project and is
     simply not available at all in HTTPS.  Everything with a /wiki
     suffix, however, is a language-specific page that is available in
     HTTPS.  Hence these rules avoid redirecting www.wikisomething.org,
     while redirecting all language-specific subdomains.  If you
     navigate first to the WWW page, you could be vulnerable to SSL
     stripping, but if you succeed in submitting a query from there
     in a specific language without interference, you'll subsequently
     be protected.  -->

<ruleset name="Wikipedia">
  <target host="*.wikipedia.org" />
  <target host="*.wikinews.org" />
  <target host="*.wikisource.org" />
  <target host="*.wikibooks.org" />
  <target host="*.wikiquote.org" />
  <target host="*.wikiversity.org" />
  <target host="*.wiktionary.org" />
  <target host="*.wikimedia.org" />
  <target host="mediawiki.org" />
  <target host="www.mediawiki.org" />
  <target host="wikimediafoundation.org" />
  <target host="www.wikimediafoundation.org" />
  <target host="wikimedia.org" />
  <target host="enwp.org" />

<!-- TODO: What exclusions do we need for mobile sites, if any? -->
  <exclusion pattern="^http://(dumps|download)\.wikimedia\.org/"/>
  <exclusion pattern="^http://(static|download|m)\.wikipedia\.org/"/>
  <exclusion pattern="^http://www\.wik(ipedia|inews|isource|ibooks|iquote|iversity|tionary)\.org/"/>

<!-- To be safe, and to make the rule visible in the context menu -->
  <rule from="^http://secure\.wikimedia\.org/"
          to="https://secure.wikimedia.org/"/>

<!-- The mediazilla: interwiki prefix on a default MediaWiki installation
     is outdated, wrongly pointing to http://bugzilla.wikipedia.org
     which is normally a (vulnerable) redirect.
     This has been corrected on Wikimedia Foundation wikis. -->
  <rule from="^http://bugzilla\.wiki[mp]edia\.org/"
          to="https://bugzilla.wikimedia.org/"/>

  <rule from="^http://([^@:/]+)\.wik(ipedia|inews|isource|ibooks|iquote|iversity|tionary)\.org/(w|wiki)/"
          to="https://secure.wikimedia.org/wik$2/$1/$3/"/>
  <rule from="^http://([^@:/]+)\.wik(ipedia|inews|isource|ibooks|iquote|iversity|tionary)\.org/\?title="
          to="https://secure.wikimedia.org/wik$2/$1/wiki/"/>
  <rule from="^http://([^@:/]+)\.wik(ipedia|inews|isource|ibooks|iquote|iversity|tionary)\.org/?$"
          to="https://secure.wikimedia.org/wik$2/$1/wiki/"/>

  <rule from="^http://(meta|commons|incubator|species|outreach|strategy|usability|wikimania|wikimania200[5-9]|wikimania201[0-2]|test)\.wikimedia\.org/(w|wiki)/"
          to="https://secure.wikimedia.org/wikipedia/$1/$2/"/>
  <rule from="^http://(meta|commons|incubator|species|outreach|strategy|usability|wikimania|wikimania200[5-9]|wikimania201[0-2]|test)\.wikimedia\.org/\?title="
          to="https://secure.wikimedia.org/wikipedia/$1/wiki/"/>
  <rule from="^http://(meta|commons|incubator|species|outreach|strategy|usability|wikimania|wikimania200[5-9]|wikimania201[0-2]|test)\.wikimedia\.org/?$"
          to="https://secure.wikimedia.org/wikipedia/$1/wiki/"/>
  

  <rule from="^http://(www\.)?mediawiki\.org/$" 
          to="https://secure.wikimedia.org/wikipedia/mediawiki/wiki/" />
  <rule from="^http://(www\.)?mediawiki\.org/(w|wiki)/" 
          to="https://secure.wikimedia.org/wikipedia/mediawiki/$2/" />
  <rule from="^http://(www\.)?wikimediafoundation\.org/$" 
          to="https://secure.wikimedia.org/wikipedia/foundation/wiki/" />
  <rule from="^http://(www\.)?wikimediafoundation\.org/(w|wiki)/" 
          to="https://secure.wikimedia.org/wikipedia/foundation/$2/" />

<!-- portal containing links to the English versions of all projects -->
  <rule from="^http://(www\.)wikimedia\.org/$"
          to="https://secure.wikimedia.org/" />
	
  <rule from="^http://(www\.)?(bits|upload)\.wikimedia\.org/"
   	  to="https://$2.wikimedia.org/"/>
  <rule from="^http://geoiplookup\.wikimedia\.org/"
	  to="https://geoiplookup.wikimedia.org/"/>
  <rule from="^http://survey\.wikimedia\.org/"
	  to="https://survey.wikimedia.org/" />
  <rule from="^http://enwp\.org/"
	  to="https://secure.wikimedia.org/wikipedia/en/wiki/" />
</ruleset>
<ruleset name="WinPcap">
  <target host="winpcap.org" />
  <target host="www.winpcap.org" />

  <rule from="^http://winpcap\.org/" to="https://winpcap.org/"/>
  <rule from="^http://www\.winpcap\.org/" to="https://www.winpcap.org/"/>
</ruleset>
<ruleset name="Wippies Webmail">
  <target host="webmail.wippies.com" />

  <rule from="^http://webmail\.wippies\.com/" to="https://webmail.wippies.com/" />
</ruleset>
<ruleset name="Wireshark">
  <target host="wireshark.org" />
  <target host="anonsvn.wireshark.org" />
  <target host="www.wireshark.org" />

  <rule from="^http://wireshark\.org/" to="https://wireshark.org/"/>
  <rule from="^http://(anonsvn|www)\.wireshark\.org/" to="https://$1.wireshark.org/"/>
</ruleset>
<ruleset name="Woot (broken)" default_off="completely broken">
  <target host="woot.com" />
  <target host="www.woot.com" />

  <rule from="^http://(www\.)?woot\.com/" to="https://www.woot.com/"/>
</ruleset>
<ruleset name="WordPress">
  <target host="wordpress.com" />
  <target host="*.wordpress.com" />
  <target host="wordpress.org" />
  <target host="*.wordpress.org" />
  <target host="*.trac.wordpress.org" />
  <target host="*.svn.wordpress.org" />
  <target host="*.files.wordpress.com" />
  <target host="*.wp.com" />

  <exclusion pattern="^http://(([^/:@\.]+)\.)?wordpress\.com/latex\.php(\?.*)?$"/>
  <exclusion pattern="^http://([^/:@\.]+)\.blog\.wordpress\.com/"/>
  <exclusion pattern="^http://([^/:@\.]+)\.blog\.files\.wordpress\.com/"/>
  <exclusion pattern="^http://([^/:@\.]+)\.forums\.wordpress\.com/"/>
  <exclusion pattern="^http://([^/:@\.]+)\.support\.wordpress\.com/"/>

  <rule from="^http://wordpress\.(com|org)/"
          to="https://wordpress.$1/"/>
  <rule from="^http://s\.wordpress\.(com|org)/"
	  to="https://s-ssl.wordpress.$1/"/>
  <rule from="^http://s[0-9]\.wordpress\.(com|org)/"
	  to="https://secure.wordpress.$1/"/>
  <rule from="^http://([^/:@]+)\.wordpress\.(com|org)/"
	  to="https://$1.wordpress.$2/"/>
  <rule from="^http://([^/:@]+)\.(trac|svn)\.wordpress\.org/"
	  to="https://$1.$2.wordpress.org/"/>
  <rule from="^http://([^/:@]+)\.files\.wordpress\.com/"
	  to="https://$1.files.wordpress.com/"/>
  <rule from="^http://s\d*\.wp\.com/(\?custom-css|i/|wp-content/|wp-includes/)"
	  to="https://s-ssl.wordpress.com/$1" />
</ruleset>
<ruleset name="World Community Grid">
   <target host="www.worldcommunitygrid.org" />

   <rule from="^http://www\.worldcommunitygrid\.org/"
	to="https://secure.worldcommunitygrid.org/"/>
</ruleset>
<ruleset name="WorstPills.org">
	<target host="worstpills.org" />
	<target host="www.worstpills.org" />

	<rule from="^http://(www\.)?worstpills\.org/" to="https://www.worstpills.org/" />
</ruleset><ruleset name="wuala">
  <target host="wuala.com" />
  <target host="*.wuala.com" />

  <securecookie host="^((www|forum|stats|thumb\d+)\.)?wuala\.com$" name=".*"/>

  <rule from="^http://wuala\.com/" to="https://wuala.com/"/>
  <rule from="^http://(www|forum|stats|thumb\d+)\.wuala\.com/" to="https://$1.wuala.com/"/>
</ruleset>
<ruleset name="XO Skins">
  <target host="xoskins.com" />
  <target host="www.xoskins.com" />

  <rule from="^http://(www\.)?xoskins\.com/" to="https://xoskins.com/"/>
</ruleset>

<ruleset name="XPD.se">
	<target host="xpd.se" />
	<target host="www.xpd.se" />
	<rule from="^http://www\.xpd\.se/" to="https://www.xpd.se/"/>
	<rule from="^http://xpd\.se/" to="https://xpd.se/"/>
</ruleset>

<ruleset name="XS4ALL (partial)">
  <target host="xs4all.nl" />
  <target host="www.xs4all.nl" />

	<exclusion pattern="^http://(www\.)?xs4all.nl/((%7E)|~)+"/>
	<rule from="^http://(www\.)?xs4all\.nl/" to="https://www.xs4all.nl/"/>
</ruleset>
<ruleset name="Xing">
  <target host="xing.com" />
  <target host="www.xing.com" />

  <rule from="^http://(www\.)?xing\.com/" to="https://www.xing.com/"/>
</ruleset>
<ruleset name="Xiph.org">
	<target host="xiph.org" />
	<target host="www.xiph.org" />
	<target host="svn.xiph.org" />
	<target host="wiki.xiph.org" />
	<target host="trac.xiph.org" />

	<rule from="^http://(www\.)?xiph\.org/" to="https://www.xiph.org/" />
	<rule from="^http://(svn|wiki|trac)\.xiph\.org/" to="https://$1.xiph.org/" />
</ruleset><ruleset name="Xmarks">
  <target host="xmarks.com"/>
  <target host="www.xmarks.com"/>
  <target host="*.xmarks.com"/>

  <securecookie host="^(.*\.)?xmarks.com$" name=".*" />

  <rule from="^http://(www\.)?xmarks\.com/" to="https://www.xmarks.com/"/>
  <rule from="^http://static\.xmarks\.com/" to="https://static.xmarks.com/"/>
  <rule from="^http://my\.xmarks\.com/" to="https://my.xmarks.com/"/>
  <rule from="^http://download\.xmarks\.com/" to="https://download.xmarks.com/"/>
  <rule from="^http://login\.xmarks\.com/" to="https://login.xmarks.com/"/>
  <rule from="^http://thumbs\.xmarks\.com/" to="https://thumbs.xmarks.com/"/>
</ruleset>
<ruleset name="YFrog">
  <target host="yfrog.com" />
  <target host="www.yfrog.com" />

  <rule from="^http://(www\.)?yfrog\.com/" to="https://yfrog.com/"/>
</ruleset>
<ruleset name="Yaha">
  <target host="yaha.no" />
  <target host="www.yaha.no" />

  <rule from="^http://yaha\.no/" to="https://yaha.no/"/>
  <rule from="^http://www\.yaha\.no/" to="https://www.yaha.no/"/>
</ruleset>
<ruleset name="Yahoo! Mail">
  <target host="mail.yahoo.com" />
  <target host="login.yahoo.com" />
  <!-- This rule really needs a secure cookie.  !! -->
  <target host="pn1.bc.yahoo.com" />
  <target host="us.bc.yahoo.com" />
  <target host="row.bc.yahoo.com" />

  <rule from="^http://mail\.yahoo\.com/" to="https://mail.yahoo.com/" />
  <rule from="^http://login\.yahoo\.com/" to="https://login.yahoo.com/" />
  <rule from="^http://(pn1|us|row)\.bc\.yahoo\.com/" to="https://$1.bc.yahoo.com/" />
</ruleset>
<ruleset name="Yamli API">
  <target host="api.yamli.com" />

  <rule from="^http://api\.yamli\.com/" to="https://api.yamli.com/" />
</ruleset><!--
    For any questions please contact Artyom Gavrichenkov <ximaera@yandex.ru>.

    I'm not in any way a Yandex employee, however, this set of rules is
    already working for a long time with all Yandex services, being used very
    intensively, and thus is being shared with community in order to prevent
    scam and stealing from Money.Yandex.ru (and other services as well).

    If you want to know about license terms, here they are:

    DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
    Version 2, December 2004

    Copyright (C) 2004 Sam Hocevar <sam@hocevar.net>

    Everyone is permitted to copy and distribute verbatim or modified
    copies of this license document, and changing it is allowed as long
    as the name is changed.

    DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
    TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION

    0. You just DO WHAT THE FUCK YOU WANT TO.
-->
<ruleset name="Yandex">
    <target host="yandex.ru" />
    <target host="yandex.net" />
    <target host="yandex.st" />
    <target host="ya.ru" />
    <target host="*.yandex.ru" />
    <target host="*.yandex.net" />
    <target host="*.yandex.st" />
    <target host="*.ya.ru" />
    <target host="*.friends.yandex.net" />
    <target host="*.maps.yandex.ru" />
    <target host="moikrug.ru" />
    <target host="*.moikrug.ru" />

    <!--
        Rather than enumerating domains that support SSL,
        we enable SSL for all services and then exclude those
        which become broken:
    -->

    <!-- 1. Public services without HTTPS support (or with broken one) -->
    <exclusion pattern="^http://api-maps\.yandex\.ru/" />
    <exclusion pattern="^http://bar-widgets\.yandex\.ru/" />
    <exclusion pattern="^http://blogs\.yandex\.ru/" />
    <exclusion pattern="^http://dict\.yandex\.ru/" />
    <exclusion pattern="^http://dzen\.yandex\.ru/" />
    <exclusion pattern="^http://encyclopedia\.yandex\.ru/" />
    <exclusion pattern="^http://fotki\.yandex\.ru/" />
    <exclusion pattern="^http://images\.yandex\.ru/" />
    <exclusion pattern="^http://lingvo\.yandex\.ru/" />
    <exclusion pattern="^http://maps\.yandex\.ru/" />
    <exclusion pattern="^http://metro\.yandex\.ru/" />
    <exclusion pattern="^http://music\.yandex\.ru/" />
    <exclusion pattern="^http://news\.yandex\.ru/" />
    <exclusion pattern="^http://presocial\.yandex\.net/" />
    <exclusion pattern="^http://sprav\.yandex\.ru/" />
    <exclusion pattern="^http://slovari\.yandex\.ru/" />
    <exclusion pattern="^http://tv\.yandex\.ru/" />
    <exclusion pattern="^http://video\.yandex\.ru/" />
    <exclusion pattern="^http://wdgt\.yandex\.ru/" />
    <exclusion pattern="^http://www\.yandex\.ru/" />
    <!-- Remove this if you do never post entries or comments on my.ya.ru -->
    <exclusion pattern="^http://(www\.)?[^.]+\.ya\.ru/" />
    <!--  for example: http://mirror.yandex.ru/ubuntu-cdimage/releases/ -->
    <exclusion pattern="^http://mirror.yandex.ru/" />


    <!-- 2. Simple redirections -->
    <exclusion pattern="^http://probki\.yandex\.ru/" />
    <exclusion pattern="^http://blogs\.ya\.ru" />
    <exclusion pattern="^http://fotki\.ya\.ru" />
    <exclusion pattern="^http://images\.ya\.ru" />
    <exclusion pattern="^http://music\.ya\.ru" />
    <exclusion pattern="^http://probki\.ya\.ru" />
    <exclusion pattern="^http://video\.ya\.ru" />
    <exclusion pattern="^http://wdgt\.ya\.ru" />
    <exclusion pattern="^http://www\.ya\.ru" />

    <!--
        3. Narod.ru.

        Narod.ru doesn't use auth data from Yandex,
        so we don't need to encrypt its pages.
        The only exception is Narod.Disk, but it doesn't provide HTTPS
    -->
    <exclusion pattern="^http://narod[0-9]*\.yandex\.ru/" />

    <!-- 4. Search suggestions -->
    <exclusion pattern="^http://suggest\.yandex\.ru/" />
    <exclusion pattern="^http://suggest-[a-z]+\.yandex\.(ru|net)/" />

    <!-- 5. Webmaster -->
    <exclusion pattern="^http://content\.webmaster\.yandex\.ru/" />

    <!-- 6. Mobile services -->
    <exclusion pattern="^http://m\.yandex\.ru/" />

    <!-- 7. Internet.Yandex.Ru (connection rate detection breaks with HTTPS) -->
    <exclusion pattern="^http://internet.yandex.ru/" />

    <!-- 8. Various click counters and content storages -->
    <exclusion pattern="^http://awaps\.yandex\.ru/" />
    <exclusion pattern="^http://clck\.yandex\.ru/" />
    <exclusion pattern="^http://copy\.yandex\.net/" />
    <exclusion pattern="^http://hghltd\.yandex\.net/" />
    <exclusion pattern="^http://kiks\.yandex\.ru/" />
    <exclusion pattern="^http://print\.maps\.yandex\.ru/" />
    <exclusion pattern="^http://market-click[0-9]+\.yandex\.ru/" />
    <exclusion pattern="^http://mc\.yandex\.net/" />
    <exclusion pattern="^http://mdata\.yandex\.net/" />
    <exclusion pattern="^http://wrz\.yandex\.ru/" />

    <!-- 9. Data clusters for Maps and Video -->
    <exclusion pattern="^http://vec[0-9]+\.maps\.yandex\.(ru|net)/" />
    <exclusion pattern="^http://jgo\.maps\.yandex\.(ru|net)/" />
    <exclusion pattern="^http://[^.]+-tub\.yandex\.net/" />
    <exclusion pattern="^http://[^.]+-tub\.yandex\.ru/" />
    <exclusion pattern="^http://[^.]+-tub-[^.]+\.yandex\.net/" />
    <exclusion pattern="^http://[^.]+-tub-[^.]+\.yandex\.ru/" />

    <!--
        Rewriting rules
    -->
    <rule from="^http://(www\.)?([^.]+)\.yandex\.(ru|net|st)/" to="https://$2.yandex.$3/" />

    <rule from="^http://(www\.)?yandex\.(net|st)/" to="https://yandex.$2/" />

    <!--
        Here we can enable 4+ level domains with a single regexp,
        but I've never seen any domains more that 4 levels deep
        in Yandex network, so I wouldn't enable them now -
        it may be unconvenient and may broke some services.
        Only 4-level domains match.
    -->
    <rule from="^http://([^.]+)\.([^.]+)\.yandex\.(ru|net)/" to="https://$1.$2.yandex.$3/" />

    <rule from="^http://(www\.)?([^.]+)\.ya\.ru/" to="https://$2.ya.ru/" />

    <rule from="^http://(www\.)?moikrug\.ru/" to="https://moikrug.ru/" />

</ruleset>
<ruleset name="Yieldmanager.com">
	<target host="ad.yieldmanager.com" />

	<rule from="^http://ad\.yieldmanager\.com/" to="https://ad.yieldmanager.com/" />
</ruleset><ruleset name="YouTube">
  <target host="youtube.com" />
  <target host="*.youtube.com" />
  <target host="*.ytimg.com" />
  <target host="youtu.be" />

  <exclusion pattern="^http://(www\.)?youtube\.com/crossdomain\.xml"/>

  <rule from="^http://(www\.)?youtube\.com/"
	  to="https://www.youtube.com/"/>
  <rule from="^http://(br|de|es|fr|img|insight|jp|m|nl|uk)\.youtube\.com/"
	  to="https://$1.youtube.com/"/>
  <rule from="^http://([^/@:])+\.ytimg\.com/"
	  to="https://$1.ytimg.com/" />
  <rule from="^http://youtu\.be/(\w{11})"
	  to="https://www.youtube.com/watch?v=$1&#x26;feature=youtu.be" />
</ruleset>
<ruleset name="Your Freedom">
  <target host="your-freedom.net" />
  <target host="www.your-freedom.net" />

  <rule from="^http://(www\.)?your-freedom\.net/" to="https://www.your-freedom.net/"/>
</ruleset>
<ruleset name="Ytimg.com">
	<target host="s.ytimg.com" />
	<target host="i.ytimg.com" />
	<target host="i1.ytimg.com" />
	<target host="i2.ytimg.com" />
	<target host="i3.ytimg.com" />
	<target host="i4.ytimg.com" />

	<rule from="^http://(s|i([1-4]){0,1})\.ytimg\.com/" to="https://$1.ytimg.com/" />
</ruleset><ruleset name="Yubico">
  <target host="yubico.com" />
  <target host="www.yubico.com" />
  <target host="store.yubico.com" />
  <target host="openid.yubico.com" />
  <target host="api.yubico.com" />
  <target host="upload.yubico.com" />

  <securecookie host="^(.+\.)?yubico\.com$" name=".*"/>

  <rule from="^http://yubico\.com/" to="https://yubico.com/"/>
  <rule from="^http://(www|store|openid|api|upload)\.yubico\.com/" to="https://$1.yubico.com/"/>
</ruleset>
<ruleset name="ZTunnel">
  <target host="ztunnel.com" />
  <target host="www.ztunnel.com" />

  <securecookie host="^(.+\.)?ztunnel\.com$" name=".*"/>

  <rule from="^http://(www\.)?ztunnel\.com/" to="https://ztunnel.com/"/>
</ruleset>
<ruleset name="Zareason.com">
  <target host="www.zareason.com" />
  <target host="zareason.com" />
  <rule from="^http://www\.zareason\.com/" to="https://www.zareason.com/"/>
  <rule from="^http://zareason\.com/" to="https://zareason.com/"/>
</ruleset>

<ruleset name="Ziggo">
  <target host="*.ziggo.nl" />
  <target host="*.ziggo.com" />

  <rule from="^http://(www\.)?ziggo\.(nl|com)/" to="https://www.ziggo.$2/"/>
</ruleset><ruleset name="Zimbra">
  <target host="zimbra.com" />
  <target host="*.zimbra.com" />

  <rule from="^http://zimbra\.com/" to="https://www.zimbra.com/"/>
  <rule from="^http://([^/:@]*)\.zimbra\.com/" to="https://$1.zimbra.com/"/>
</ruleset>

<ruleset name="Ziplist.com">
  <target host="ziplist.com" />
  <target host="www.ziplist.com" />

  <rule from="^http://(www\.)?ziplist\.com/" to="https://www.ziplist.com/" />
</ruleset>
<ruleset name="Zoho">
   <target host="*.zoho.com" />

    <rule from="^http://(www|writer|mail|sheet|show|docs|notebook|wiki|share|planner|chat|personal|projects|creator|business|invoice|assist|reports|meeting|recruit|discussions|people|search)\.zoho\.com/" to="https://$1.zoho.com/"/>
</ruleset>
<ruleset name="btjunkie">
  <target host="btjunkie.org" />
  <target host="www.btjunkie.org" />
  <target host="dl.btjunkie.org" />

  <rule from="^http://dl\.btjunkie\.org/" to="https://dl.btjunkie.org/"/>
  <rule from="^https?://(www\.)?btjunkie\.org/" to="https://btjunkie.org/"/>
</ruleset>
<ruleset name="comdirect bank">
  <target host="kunde.comdirect.de" />
  <target host="www.comdirect.de" />
  <target host="comdirect.de" />

  <rule from="^http://(www\.)?comdirect\.de/" to="https://www.comdirect.de/" />
  <rule from="^http://kunde\.comdirect\.de/" to="https://kunde.comdirect.de/" />
</ruleset>
<ruleset name="eHow (broken)" default_off="HTTPS disabled">
  <target host="ehow.com" />
  <target host="www.ehow.com" />

  <rule from="^http://(www\.)?ehow\.com/" to="https://www.ehow.com/"/>
</ruleset>
<ruleset name="hi5">
  <target host="hi5.com" />
  <target host="www.hi5.com" />

  <rule from="^http://(www\.)?hi5\.com/" to="https://www.hi5.com/"/>
</ruleset>

<ruleset name="netzclub">
  <target host="netzclub.net"/>
  <target host="www.netzclub.net"/>
  <target host="profil.netzclub.net"/>

  <rule from="^http://(www\.)?netzclub\.net/" to="https://www.netzclub.net/"/>
  <rule from="^http://profil\.netzclub\.net/" to="https://profil.netzclub.net/"/>
</ruleset><ruleset name="so36.NET">
  <target host="so36.net" />
  <target host="*.so36.net" />

	<rule from="^http://so36\.net/" to="https://so36.net/"/>
	<rule from="^http://([^/:@]*)\.so36\.net/" to="https://$1.so36.net/"/>
</ruleset>
<ruleset name="uTorrent (broken)" default_off="https is gone!">
  <target host="utorrent.com" />
  <target host="www.utorrent.com" />
  <target host="download.utorrent.com" />
  <target host="forum.utorrent.com" />

  <rule from="^https?://(www\.)?utorrent\.com/" to="https://www.utorrent.com/"/>
  <rule from="^http://(download|forum)\.utorrent\.com/" to="https://$1.utorrent.com/"/>
</ruleset>
<ruleset name="xkcd">
	<target host="xkcd.com" />
	<target host="www.xkcd.com" />
	<target host="store.xkcd.com" />
	<target host="www.store.xkcd.com" />
	<target host="xkcd.org" />
	<target host="www.xkcd.org" />
	<target host="m.xkcd.com" />
	<target host="m.xkcd.org" />
	<rule from="^http://(www\.)?xkcd\.(com|org)/"
		to="https://www.xkcd.com/" />
	<rule from="^http://m\.xkcd\.(com|org)/"
		to="https://m.xkcd.com/" />
	<rule from="^http://(www\.)?store\.xkcd\.com/"
		to="https://store.xkcd.com/" />
</ruleset>
</rulesetlibrary>
