Debian.xml

<!--
	For problematic rules, see Debian-self-signed.xml.


	Other Debian rulesets:

		- DebConf.org.xml


	Nonfunctional domains:

		- screenshots.debian.net ¹

		- debian.org subdomains:

			- anonscm ²
			- ca		(shows db; mismatched, CN: db.debian.org)
			- cvs ²
			- incoming	(shows ftp-master; mismatched, CN: ftp-master.debian.org)
			- people	(reset; people.debian.org/~joerg/ is displayed
					after fetching gpg.ganneff.de over http...)
			- popcon ¹
			- qa ¹
			- packages.qa ¹
			- search	(shows www; mismatched, CN: debian.org)
			- svn ²

	¹ Refused
	² Shows alioth; mismatched, CN: alioth.debian.org


	Problematic domains:

		- mentors.debian.net ¹
		- paste.debian.net ¹

		- debian.org subdomains:

			- alioth ¹
			- lists.alioth ²
			- cdimage	(refused)

	¹ Works, self-signed
	² Works, self-signed, mismatched, CN: alioth.debian.org


	Partially covered domains:

		- cdimage.debian.org	(→ www)


	Fully covered debian.org subdomains:

		- (www.)
		- bugs
		- buildd
		- db
		- ftp-master
		- lists
		- nagios
		- nm
		- wiki


	altnames that don't exist:

		- www.bugs.debian.org
		- www.buildd.debian.org
		- www.db.debian.org
		- www.ftp-master.debian.org
		- www.lists.debian.org
		- www.nagios.debian.org
		- www.nm.debian.org
		- www.wiki.debian.org


	Observed cookie domains:

		- nm.debian.org

-->
<ruleset name="Debian (partial)">

	<target host="debian.org" />
	<target host="*.debian.org" />
	<target host="*.debian.net" />


	<securecookie host="^nm\.debian\.org$" name=".+" />


	<rule from="^http://((?:bugs|buildd|contributors|db|dsa|ftp-master|lists|munin|nagios|nm|packages|piuparts|release|rt|security-tracker|sso|udd|vote|wiki|www)\.)?debian\.org/"
		to="https://$1debian.org/" />

	<rule from="^http://(france|screenshots)\.debian\.net/"
		to="https://$1.debian.net/" />
</ruleset>