NYTimes.xml

<!--
	NB: https prevents comment threads from
	loading, with or https-everywhere.


	Other New York Times rulesets:

		- The_Boston_Globe.xml


	CDN buckets:

		- pimage.timespeople.nytimes.com.amazonaws.com

			- pimage.timespeople.nytimes.com

		- pnytimes.chartbeat.net
		- js.nyt.com.edgesuite.net
		- graphics478.nytimes.com.edgesuite.net
		- json8.nytimes.com.edgesuite.net


	Nonfunctional domains:

		- (www.)nytco.com

		- nytimes.com subdomains:

			- firstlook.blogs *
			- dealbook
			- documents
			- dealbook.on
			- firstlook *
			- query		(redirects to www, valid cert)
			- topics

	* No https


	Problematic domains:

		- pimage.timespeople.nytimes.com	(amazonaws)


	Fully covered domains:

		- nytimes.com subdomains:

			- et
			- graphics
			- markets.on
			- meter-svc
			- tagx
			- pimage.timespeople	(→ amazonaws)


	This ruleset currently prevents comment threads loading.  Example:

		nytimes.com/2013/07/07/us/in-secret-court-vastly-broadens-powers-of-nsa.html?target=comments

-->
<ruleset name="NYTimes (breaks comments)" default_off="comment threads fail to load" platform="mixedcontent">

	<target host="newyorktimes.com" />
	<target host="www.newyorktimes.com" />
	<target host="nyt.com" />
	<target host="*.nyt.com" />
	<target host="nytimes.com" />
	<target host="*.nytimes.com" />
		<exclusion pattern="^http://(?:www\.)?nytimes\.com/(?:200[0-4]|info)/" />
		<exclusion pattern="^http://(?:www\.)?nytimes\.com/(?:roomfordebate|services/xml/rss/index\.html)" />
		<!--
			404s over https.

			https://mail1.eff.org/pipermail/https-everywhere/2012-June/001448.html
												-->
		<exclusion pattern="^http://(?:www\.)?nytimes\.com/svc/community/V3/requestHandler(?:$|\?)" />
		<!--
			404s when rewritten to www:
							-->
		<exclusion pattern="^https?://graphics8\.nytimes\.com/bi/js/tagx/tagx\.js" />
		<!--
			Breaks slideshow.

				- Lens/data/\d{8}POD.xml redirects to login page
				- Lens/swfs/ & Lens/lens_post.swf fail to load
										-->
		<exclusion pattern="^https?://graphics8\.nytimes\.com/packages/flash/multimedia/" />


	<!--	Other cross-domain cookies:

			- nyt-a
			- nyt-m		(set by meter-svc)
			- nyt-recommend
			- nyt5_disable
			- RMID *
			- tagx-[lps]
			- WT_FPC

		* Used on mobile.

	NYT-S is the paywall cookie. Securing it may break random bits of the NYTimes site:

		https://trac.torproject.org/projects/tor/ticket/7690

	<securecookie host="^\.nytimes\.com$" name="^NYT-S$" />

		Tracking cookies:
					-->
	<securecookie host="^\.nytimes\.com$" name="^(?:adxc\w|_chartbeat2)$" />
	<securecookie host="^(?:homedelivery|markets\.on|wt\.o)\.nytimes\.com$" name=".+" />


	<rule from="^http://(?:www\.)?newyorktimes\.com/"
		to="https://www.nytimes.com/" />

	<rule from="^http://(?:www\.)?nyt(?:imes)?\.com/"
		to="https://www.nytimes.com/" />

	<rule from="^http://(?:css|i1|js)\.nyt\.com/"
		to="https://www.nytimes.com/" />

	<rule from="^http://\w+\.blogs\.nytimes\.com/favicon\.ico"
		to="https://www.nytimes.com/favicon.ico" />

	<rule from="^http://(et|global|graphics|homedelivery|meter-svc|mirror-svc|myaccount|wt\.o|markets\.on|static|tagx|up)\.nytimes\.com/"
		to="https://$1.nytimes.com/" />

	<rule from="^http://graphics\d\.nytimes\.com/"
		to="https://www.nytimes.com/" />

	<rule from="^http://jobmarket\.nytimes\.com/(adx|images)/"
		to="https://www.nytimes.com/$1/" />

	<rule from="^http://json8\.nytimes\.com/"
		to="https://static.nytimes.com/" />

	<rule from="^http://pimage\.timespeople\.nytimes\.com/"
		to="https://s3.amazonaws.com/pimage.timespeople.nytimes.com/" />

	<!--		travel.nytimes.com doesn't work, but
		articles on travel appear to be on www too.

			Ditto for adverts and scripts.
							-->
	<rule from="^http://travel\.nytimes\.com/(\d{4}/\d\d/\d\d|adx|js)/"
		to="https://www.nytimes.com/$1/" />

	<!--	404s over https.

		https://mail1.eff.org/pipermail/https-everywhere/2012-June/001448.html
											-->
	<rule from="^https://www\.nytimes\.com/svc/community/V3/requestHandler($|\?)"
		to="http://www.nytimes.com/svc/community/V3/requestHandler$1" downgrade="1" />

</ruleset>