Huffington-Post.xml

<!--
	For problematic rules, see Huffington-Post-mismatches.xml.

	For other AOL coverage, see AOL.xml.


	CDN buckets:

		- s3.amazonaws.com/big.assets.huffingtonpost.com/
		- s3.amazonaws.com/i.huffpost.com/	-	not directly equivalent to i.huffingtonpost.com
		- entry-stats-huffpost-com.egslb.aol.com
		- s-i.huffpost.com.edgekey.net
		- s-s.huffpost.com.edgekey.net
		- www.huffingtonpost.ca.edgesuite.net
		- images.huffingtonpost.com.edgesuite.net
		- e.huffpost.com.edgesuite.net
		- i.huffpost.com.edgesuite.net
		- s.huffpost.com.edgesuite.net


	Nonfunctional domains:

		- entry-stats.huffpost.com	(refused)


	Problematic domains:

		- (www.)huffingtonpost.com
		- bug.assets.huffingtonpost.com
		- i.huffpost.com
		- s.huffpost.com	(redirects to i, prints Amazon Web Services "Access Denied")


	Fully covered domains:

		- huffingtonpost.com subdomains:

			- (www.)	(→ secure)
			- big.assets	(→ s3.amazonaws.com/big.assets.huffingtonpost.com/)
			- images	(→ s-i.huffpost.com)
			- secure

		- huffpost.com subdomains:

			- i	(→ s-i)
			- s	(→ s-s)
			- s-i
			- s-s


	Mixed content:

		- css, on secure.huffingtonpost.com from s.huffpost.com *

		- Images, on secure.huffingtonpost.com from:

			- cdn.crowdignite.com **
			- www.gstatic.com *
			- www.mediabistro.com *
			- i.huffpost.com *
			- s.huffpost.com *
			- s.huffpost.com via s-s.huffpost.com *

		- Web bug, on secure.huffingtonpost.com from:

			- o.aolcdn.com *
			- entry-stats.huffpost.com **
			- pixel.quantserve.com *
			- b.scorecardresearch.com *
			- ar.voicefive.com *

	* Secured by us
	** Unsecurable

-->
<ruleset name="Huffington Post" platform="mixedcontent">

	<target host="huffingtonpost.com" />
	<target host="*.huffingtonpost.com" />
	<target host="*.huffpost.com" />


	<rule from="^http://(?:secure\.|www\.)?huffingtonpost\.com/"
		to="https://secure.huffingtonpost.com/" />

	<rule from="^http://big\.assets\.huffingtonpost\.com/"
		to="https://s3.amazonaws.com/big.assets.huffingtonpost.com/" />

	<rule from="^http://images\.huffingtonpost\.com/"
		to="https://s-i.huffpost.com/" />

	<!--	404s on s-s.huffpost.com.
						-->
	<rule from="^http://s\.huffpost\.com/contributors/"
		to="https://secure.huffingtonpost.com/contributors/" />

	<!--	AmazonWS, but valid cert.
						-->
	<rule from="^http://(?:s-)?([is])\.huffpost\.com/"
		to="https://s-$1.huffpost.com/" />

</ruleset>