Netflix.xml

<!--
	CDN buckets:

		- netflix.hs.llnwd.net/e1/us/

			- jsapi


	Problematic subdomains:

		- jsapi	(400; mismatched, CN: *.hs.llnwd.net)


	Fully covered subdomains:

		- jsapi		(→ netflix.hs.llnwd.net)

-->
<ruleset name="Netflix (buggy)" default_off="various things break">

	<target host="netflix.com" />
	<target host="*.netflix.com" />
		<!--
			blog, techblog, ukirelandblog:

				- Hosted on Blogger
				- Shows Google 404 page

			developer:

				- Handled in Mashery-clients.xml

			ir:

				- Cert: *.shareholder.com
				- Throws 403

			jobs:

				- reset

			-->
		<exclusion pattern="^http://(blog|developer|ir|jobs|techblog|ukirelandblog)\.netflix\.com/" />


	<securecookie host="^(contactus|signup)\.netflix\.com$" name=".*" />


	<rule from="^http://jsapi\.netflix\.com/"
		to="https://netflix.hs.llnwd.net/e1/" />

	<rule from="^http://([^/:@\.]+\.)?netflix\.com/"
		to="https://$1netflix.com/" />

</ruleset>